Airgap environment
Install Gloo Gateway in an air-gapped environment, such as an on-premises datacenter, a cluster that is available on the intranet or private network only, or other disconnected environments.
This feature is an Enterprise-only feature that requires a Gloo Gateway Enterprise license.
Before you begin
Make sure that you have the following setup:
- A connected device that can pull the required images from the internet.
- An air-gapped or disconnected device that you want to install Gloo Gateway in.
- A private image registry, such as Sonatype Nexus Repository or JFrog Artifactory that both the connected and disconnected devices can connect to.
Install Gloo Gateway
Set the Gloo Gateway version that you want to install as an environment variable, such as the latest version in the following example.
export GLOO_EE_VERSION=1.18.0
On the connected device, download the Gloo Gateway Enterprise images.
helm template glooe/gloo-ee --version $GLOO_EE_VERSION --set-string license_key=$GLOO_GATEWAY_LICENSE_KEY | yq e '. | .. | select(has("image"))' - | grep image: | sed 's/image: //'
Example output for version 1.18.0:
quay.io/solo-io/gloo-fed-apiserver:1.18.0@sha256:9702824261456ae5274e18b3261fc1f0f7ff0044ae0005d38f0642ac15497075 quay.io/solo-io/gloo-federation-console:1.18.0@sha256:1110dd211e9aa334d273daf59184cdbbd1a595013258315c3f2a14238b52b143 quay.io/solo-io/gloo-fed-apiserver-envoy:1.18.0@sha256:b2fe9173980f07382f23918edc836ac5e98ac69f5c5ae7b3c345783f5985cb50 quay.io/solo-io/gloo-fed:1.18.0@sha256:69b6467d6c7cc3d386aa8b27652c5281afc8782b3168dd341bcf623c41501f19 quay.io/solo-io/gloo-ee:1.18.0 quay.io/solo-io/discovery-ee:1.18.0 quay.io/solo-io/gloo-ee-envoy-wrapper:1.18.0 "docker.io/grafana/grafana:10.4.1" registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0 "quay.io/prometheus-operator/prometheus-config-reloader:v0.73.2" "quay.io/prometheus/prometheus:v2.52.0" docker.io/busybox:1.28 docker.io/redis:7.2.4-alpine quay.io/solo-io/rate-limit-ee:1.18.0 quay.io/solo-io/extauth-ee:1.18.0 quay.io/solo-io/observability-ee:1.18.0 quay.io/solo-io/kubectl:1.18.0 quay.io/solo-io/kubectl:1.18.0 quay.io/solo-io/kubectl:1.18.0 quay.io/solo-io/kubectl:1.18.0 quay.io/solo-io/kubectl:1.18.0 quay.io/solo-io/certgen:1.18.0 docker.io/alpine/k8s:1.29.2
Push the images from the connected device to a private registry that the disconnected device can pull the images from. For instructions and any credentials you must set up to complete this step, consult your registry provider, such as Nexus Repository Manager or JFrog Artifactory.
Optional: You might want to set up your private registry so that you can also pull the Helm charts. For instructions, consult your registry provider, such as Nexus Repository Manager or JFrog Artifactory.
Install Gloo Gateway. Make sure to define the downloaded images in your Helm values file. For more information, see the Helm reference.