# 0090. Air-gapped installs are out of scope

Status: Accepted · Date: 2026-10-27 · Design section: Non-goals, Monitoring and registry mirrors

Decided: air-gapped environments are no longer a requirement, so `ichor images list` (with `--kokumi`) and the design's air-gap section and phase-10 "air-gap verification" are removed, while registry mirrors, registry auth, `ichor init --registry-mirror`, the installer-repository override and the self-hosted Image Factory URL stay because pull-through caches and private registries need them

## Context

The design carried air-gap support as an optional feature: mirrors, an installer image override, a self-hosted Image
Factory and `ichor images list` to print what had to be mirrored. The maintainer decided that no air-gapped
environment needs to be supported. Features that exist only for it are cost without a user.

## Decision

Removed:

- `ichor images list` and the `ichor images` group, including `--kokumi`, `--image-registry` rewriting and the
  Image Factory catalog warning (ADR 0036); `kokumiImages` and its tests.
- The design's "Air gap" paragraph under Kokumi, the `ichor images list` paragraphs of the air-gap section (the
  section is now "Monitoring and registry mirrors"), `ichor images list` from phase 9 and "air-gap verification"
  from phase 10. Air-gapped environments are listed under Non-goals.
- Air-gap wording in API doc comments, the chart and code comments.

Kept, with the reason:

- `TalosCluster.spec.registries` (mirrors and pull credentials, ADR 0027) and `ichor init --registry-mirror`:
  pull-through caches and private registries, used by the demo.
- `IchorInstallation.spec.installerRepository`, the installer image override and the self-hosted Image Factory URL:
  usable with any private registry or Factory.
- The installer image's embedded manifest (ADR 0019, ADR 0059): it keeps `ichor init` and upgrades free of a fetch
  step and version drift, which is independent of air gaps.
- The pre-check for mirror reachability.

Nothing was removed from the proto API, so no field numbers are reserved.

## Consequences

- Nothing is built or tested for an installation with no route to public registries; a user who mirrors images does
  so by hand.
- ADR 0036 is superseded; ADR 0048 (`ichor images list --kokumi` only) and ADR 0059 (its air-gap rationale and the
  `ichor images list` pointer) are superseded in part. Older ADRs that mention air gap as a motive are left as
  history.