Deploying to Air-Gapped Environments

helm pull bitnami/postgresql --version 15.3.0
helm pull bitnami/postgresql --untar    # Extract to ./postgresql/
helm pull oci://ghcr.io/acme/charts/api --version 1.4.2

helm dependency update ./mychart   # populates charts/
tar czf mychart-bundle.tgz mychart/

# Extract image list from chart
helm template ./chart | grep 'image:' | awk '{print $2}' | sort -u

# Mirror with skopeo
skopeo copy docker://nginx:1.27 docker://registry.internal/nginx:1.27

# Or crane
crane copy nginx:1.27 registry.internal/nginx:1.27

helm repo add internal https://charts.internal/stable
helm registry login oci://registry.internal
helm push api-1.4.2.tgz oci://registry.internal/charts

# values-airgap.yaml
global:
  imageRegistry: registry.internal
image:
  repository: acme/api
  tag: "1.4.2"
postgresql:
  image:
    registry: registry.internal
    repository: bitnami/postgresql

helm install api ./chart -f values-airgap.yaml --dry-run
helm template api ./chart -f values-airgap.yaml | grep 'image:' | grep -v registry.internal
# Expect zero output — all images should reference internal registry