Deployment
Deployment options
Run Opsec in your cloud, on-premises or fully air-gapped.
| Option | Best for | Updates |
|---|---|---|
| Cloud VPC | Teams on AWS, GCP or Azure | Signed bundles pulled automatically |
| On-premises | Regulated environments with existing clusters | Pulled through your registry mirror |
| Air-gapped | Classified or fully disconnected networks | Imported via offline transfer |
Hardware requirements
- Kubernetes 1.28 or later with a CSI storage class.
- At least one node with an 80 GB GPU for agent inference.
- Postgres 15 or later — managed or in-cluster.
- Outbound access to your source control host, or a local mirror.
Air-gapped installation
bash
opsec bundle verify opsec-2026.10.tar.zst
opsec bundle import opsec-2026.10.tar.zst --registry registry.internal:5000