Ensure that JFConnect is running in the air-gapped mode.
For more information, see Configure JFrog Platform in an Air-gapped Environment.
Install JAS with Helm with the following updates to the Helm values and system YAML files.
Add Contextual Analysis and Exposures images to the internal registry for the local Artifactory.
Download the images from releases-docker.jfrog.io (with a tag of the same Xray version).
If already you set the
global.imageRegistry
(for pulling Xray images) in your values file it should work.global: imageRegistry: ...
If you want to change only the location of jas images you can set this in the system.yaml file.
executionService: pullSecret: "<pull-secret-name>" contextualAnalysis: registry: "releases-docker.jfrog.io" image: "jfrog/xray-jas-contextual-analysis" exposures: container: registry: "releases-docker.jfrog.io" image: "jfrog/xray-jas-exposures"
The tag of the images should be the same as the Xray version.
Add Contextual Analysis and Exposures images to the internal registry directly to the Kubernetes nodes.
Download images on a machine that has an Internet connection.
docker pull --platform=linux/amd64 releases-docker.jfrog.io/jfrog/xray-jas-exposures:<XRAY_VERSION> docker pull --platform=linux/amd64 releases-docker.jfrog.io/jfrog/xray-jas-contextual-analysis:<XRAY_VERSION>
Save the images as tar files.
docker save releases-docker.jfrog.io/jfrog/xray-jas-exposures:<XRAY_VERSION> > jas_exposure.tar docker save releases-docker.jfrog.io/jfrog/xray-jas-contextual-analysis:<XRAY_VERSION> > jas_contextual_analysis.tar
Copy the tar files to all k8s nodes and load with the following commands.
ctr -n=k8s.io images import jas_exposure.tar ctr -n=k8s.io images import jas_contextual_analysis.tar