https://k8s-school.fr/labs/k8s/en/tags/registry/index.htmlHugoenCopyright (c) 2025 Fabrice Jammes - Licensed under CC BY-SA 4.0Wed, 10 Jun 2026 18:00:00 +1000https://k8s-school.fr/labs/k8s/en/1_labs/openshift-airgapped-image-mirroring/index.htmlMon, 08 Jun 2026 14:15:26 +1000https://k8s-school.fr/labs/k8s/en/1_labs/openshift-airgapped-image-mirroring/index.htmlAuthor: Fabrice JAMMES (LinkedIn). Duration: 25-35 minutes Objective Clusters running in restricted networks (“airgapped”) cannot pull images directly from the internet (i.e. docker.io). You must mirror the images you need into a registry the cluster can reach, and then make the cluster use that mirror. There are two fundamentally different ways to achieve this: A. Cluster-wide transparent redirection — configure OpenShift itself (ImageTagMirrorSet) to silently redirect every docker.io pull to your local mirror. Charts and Deployments stay untouched. B. Explicit reference — point each chart/Deployment directly at the mirror registry (image.registry=...). No cluster-level redirection is configured. In this guided lab you’ll deploy the same nginx chart both ways, observe how the resulting Pods differ, and weigh the trade-offs of each approach.https://k8s-school.fr/labs/k8s/en/1_labs/openshift-airgapped-oc-mirror/index.htmlWed, 10 Jun 2026 18:00:00 +1000https://k8s-school.fr/labs/k8s/en/1_labs/openshift-airgapped-oc-mirror/index.htmlAuthor: Fabrice JAMMES (LinkedIn). Duration: 25-35 minutes Objective In the previous lab you mirrored a single image with skopeo copy and hand-wrote an ImageTagMirrorSet to redirect docker.io pulls to it. That works, but it doesn’t scale: every image needs its own skopeo copy, and the mirror-set YAML must be kept perfectly in sync with whatever you copied — get the library/ namespace wrong and pulls 404.