Reconfiguring the TCA Airgap Appliance

This section introduces how to reconfigure the TCA Airgap appliance network and certificate settings to expose the artifacts registry services.

Prerequisites

• A static IP address is allocated for the TCA Airgap Appliance, and related network information, such as gateway, DNS server and so on are provided.

• A full domain qualified domain name (FQDN) is allocated to the TCA Airgap Appliance, which could be resolved to the static IP by the corresponding DNS server.

• A certificate suite with a server certificate containing the FQDN as common name and one of the SAN extension, the full chain CA certificates content, and the key file of the server certificate

Procedure

1. Prepare the user inputs.

   To prepare the user-inputs.yml content without running the deploy command separately, perform the steps 1 and 2 mentioned in Updating FQDN and IP Address and steps mentioned in the Updating the Airgap Appliance Certificate.

2. Run the agctl deploy command to reconfigure the TCA Airgap appliance.

   It will take several minutes to complete. To check the progress of the operation, see the logs available at /user/local/airgap/logs/.

3. Verify the artifacts registry service connectivity.

   Unset
   curl https://<TCA Airgap Appliance FQDN> -v

   It is expected that the output message contains SSL certificate verify ok and HTTP/1.1 200 OK. The Server certificate details in the output message are consistent with the provided certificate.