Connected Setup¶
The connected Linux machine will need to be able to run provided tools and access specific registries.
-
The current CDN access needed for the mirror host:
URL Port Function registry.redhat.io
443 Provides core container images access.redhat.com
443 Hosts a signature store that a container client requires for verifying images pulled from registry.access.redhat.com
. In a firewall environment, ensure that this resource is on the allowlist.registry.access.redhat.com
443 Hosts all the container images that are stored on the Red Hat Ecosystem Catalog, including core container images. quay.io
443 Provides core container images cdn.quay.io
443 Provides core container images cdn01.quay.io
443 Provides core container images cdn02.quay.io
443 Provides core container images cdn03.quay.io
443 Provides core container images cdn04.quay.io
443 Provides core container images cdn05.quay.io
443 Provides core container images cdn06.quay.io
443 Provides core container images sso.redhat.com
443 https://cloud.redhat.com/openshift
site uses authentication fromsso.redhat.com
.mirror.openshift.com
443 Required to access mirrored installation content and images.
The general flow of a disconnected OpenShift install starts with:
- Download the required tools from Red Hat.
- Create an image set configuration file defining what you want to mirror.
- Mirror an image set to disk using oc mirror.
- Transfer the image set and associated tools to the target environment.