Inventory (reference)
Host dl385-2 (connected, used for mirroring). All VMs on libvirt ocpnet (192.168.130.0/24), domain airgap.lab. Nested virt enabled (CNV).
Clusters
| Cluster | Domain | API/Ing VIP | Nodes | Pod / Svc CIDR |
|---|---|---|---|---|
| hub | hub.airgap.lab | .5 / .6 | .11/.12/.13 | 10.128.0.0/14 · 172.30.0.0/16 |
| hub-dr | hub-dr.airgap.lab | .57 / .58 | .17/.18/.19 | 10.128.0.0/14 · 172.30.0.0/16 |
| wl | wl.airgap.lab | .7 / .8 | .14/.15/.16 | 10.128.0.0/14 · 172.30.0.0/16 |
| wl-dr | wl-dr.airgap.lab | .62 / .63 | .59/.60/.61 | 10.132.0.0/14 · 172.31.0.0/16 |
Node spec: 32 vCPU / 96 GB / 300 GB OS. wl/wl-dr add 3× 500 GB ODF disks.
Infrastructure VMs
| IP | VM | Role |
|---|---|---|
| .10 | ocp420-bastion | Quay mirror :8443, Tang :7500, root CA, DNS, chrony, /root/gitops |
| .20 | ocp420-gitlab | gitlab.airgap.lab (FIPS off) — repo platform/gitops |
| .21–.23 | ocp420-vault-0/1/2 | Vault HA raft — vault.airgap.lab:8200 |
| .24 | ocp420-vault-transit | Vault transit auto-unseal |
| .25 | ocp420-minio | s3.airgap.lab:9000 — backups/object store |
| .26 / .27 | ocp420-jenkins / -nexus | CI / artifacts |
| .28 | ocp420-winbuild | Windows build host |
| .30 | rhel-app-vm | app/integration build+staging (Java/Maven/podman, has internet) |
| .53–.54 | ipa-0/1 | FreeIPA (DNS/LDAP/CA) |
Middleware VMs
| IP | VM | Role |
|---|---|---|
| .31–.36 | kafka-ctrl/broker | Kafka cluster |
| .37–.42 | redis-0..5 | Redis (failover) |
| .43–.44/.46 | apisix / apisix-etcd / apisix-gw | API gateway api.airgap.lab |
| .47–.49 | pg-0/1/2 | Postgres HA (Patroni, VIP pg.airgap.lab=.56) |
| .50–.51 | artemis-0/1 | ActiveMQ Artemis |
| .52 | wazuh | SIEM (audit + alert sink :9099) |
| .55 | airflow | Apache Airflow |
⚠️ 5
ibbl-replica-lab-v3-*VMs = separate lab. Do not touch without explicit go-ahead.