Chapter 3. Air-gapped environment


An air-gapped environment, also known as an air-gapped network or isolated network, ensures security by physically segregating the system or network. This isolation is established to prevent unauthorized access, data transfer, or communication between the air-gapped system and external sources.

You can install the Red Hat Developer Hub in an air-gapped environment to ensure security and meet specific regulatory requirements.

To install the Developer Hub in an air-gapped environment, you must have access to the registry.redhat.io and the registry for the air-gapped environment.

Prerequisites

  • You have installed an Openshift Container Platform (OCP) 4.10 or later.
  • You have access to the registry.redhat.io.
  • You have access to the OpenShift image registry of your cluster. For more information about exposing the OpenShift image registry, see Exposing the registry in OpenShift documentation.
  • You have installed the oc command line tool on your workstation.
  • You have installed the podman command line tools on your workstation.
  • You you have an account in Red Hat Developer portal.

Procedure

  1. Log in to the OCP using oc:

    oc login -u <user> -p <password> https://api.<HOSTNAME>:6443
    Copy to Clipboard Toggle word wrap
  2. Log in to the OCP image registry using podman:

    podman login -u kubeadmin -p $(oc whoami -t) default-route-openshift-image-registry.<HOSTNAME>
    Copy to Clipboard Toggle word wrap
    Note

    You can use the following commands to get the full host name of the OpenShift image registry and than use the host name in a command to log in:

    REGISTRY_HOST=$(oc get route default-route -n openshift-image-registry --template='{{ .spec.host }}')
    
    podman login -u kubeadmin -p $(oc whoami -t) $REGISTRY_HOST
    Copy to Clipboard Toggle word wrap
  3. Log in to the registry.redhat.io in podman using the following command:

    podman login registry.redhat.io
    Copy to Clipboard Toggle word wrap

    For more information about registry authentication, see Red Hat Container Registry Authentication.

  4. Pull Developer Hub and PostgreSQL images from Red Hat Image registry to your workstation:

    podman pull <DEVELOPERHUBIMAGE>
    podman pull registry.redhat.io/rhel9/postgresql-15:latest
    Copy to Clipboard Toggle word wrap
  5. Push both images to the internal OCP registry.

    For more information about pushing images directly to OCP registry, see How do I push an Image directly into the OpenShift 4 registry.

    podman push --remove-signatures registry.redhat.io/rhel9/postgresql-15:latest default-route-openshift-image-registry.<hostname>/<yourProject>/postgresql-15:latest
    Copy to Clipboard Toggle word wrap
    Tip

    If an x509 error occurs, ensure you install the CA certificate used for OpenShift routes on your system.

    Optionally, you can append --tls-verify=false to the podman push command, note that this approach is not recommended.

  6. Use the following command to verify that both images are present in the internal OCP registry:

    oc get imagestream -n <projectName>
    Copy to Clipboard Toggle word wrap
  7. Enable local image lookup for both images using the following commands:

    oc set image-lookup postgresql-15
    oc set image-lookup  rhdh-hub-rhel9
    Copy to Clipboard Toggle word wrap
  8. Go to YAML view and update the image section for backstage and postgresql using the following values:

    Example values for Developer Hub image

    upstream:
      backstage:
        image:
          registry: ""
          repository: rhdh-hub-rhel9
          tag: latest
    Copy to Clipboard Toggle word wrap

    Example values for PostgreSQL image

    upstream:
      postgresql:
        image:
          registry: ""
          repository: postgresql-15
          tag: latest
    Copy to Clipboard Toggle word wrap

  9. Install the Red Hat Developer Hub using Helm Chart. For more information about installing Developer Hub, see Chapter 2, Installing Red Hat Developer Hub using Helm Chart.
Back to top
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2025 Red Hat