Air-Gap Architecture Overview

Air-Gap Architecture Overview An architecture diagram generated by Archify. hybrid-assets.eks.amazonaws.com · manifest.yaml · Preparation - Internet-Connected Host hybrid-assets.eks.amazonaws.com manifest.yaml ekshybrid-download.sh · download / upload script · Preparation - Internet-Connected Host ekshybrid-download.sh download / upload script Private S3 Bucket · binaries + checksums · AWS Side - Private VPC Endpoint Path Private S3 Bucket binaries + checksums ECR · container images · AWS Side - Private VPC Endpoint Path ECR container images PHZ Domain Resolution · hybrid-assets.eks.amazonaws.com · AWS Side - Private VPC Endpoint Path PHZ Domain Resolution hybrid-assets.eks.amazonaws.com S3 Interface VPC Endpoint · binary downloads · AWS Side - Private VPC Endpoint Path S3 Interface VPC Endpoint binary downloads ECR API/DKR VPC Endpoint · image pulls · AWS Side - Private VPC Endpoint Path ECR API/DKR VPC Endpoint image pulls On-Premises Node · nodeadm / air-gapped · Runtime - Air-Gapped Environment On-Premises Node nodeadm / air-gapped Download manifest.yaml Upload binaries + checksums Check container image list Resolve domain private IP binary downloads Pull container images Preparation - Internet-Connected Host AWS Side - Private VPC Endpoint Path Runtime - Air-Gapped Environment Legend Backend Database Cloud External

S3 Bucket (pre-upload required)

  • • nodeadm, kubelet, kubectl, kube-proxy
  • • cni-plugins, ecr-credential-provider, aws-iam-authenticator, aws_signing_helper
  • • Checksum files (.sha256), manifest.yaml

ECR (direct access via VPC endpoints)

  • • pause, coredns, kube-proxy images
  • • vpc-cni, vpc-cni-init images