Whilst software supply chains and update mechanisms are typically designed for continuous connectivity, isolated environments require secure and controlled delivery paths that do not rely on traditional networking.
In this talk, we will present the results of KATESIP, an ESA-funded project carried out by Cloud&Heat and D3TN. The project adapts Delay- and Disruption-tolerant Networking (DTN) protocols, designed for use in the future Solar System Internet, to enable the secure delivery of software artefacts to air-gapped Kubernetes environments (i.e. those connected unidirectionally via data diodes).
We will outline the key challenges in critical environments, describe the design of our solution, and demonstrate a practical use case of secure software delivery in unidirectionally connected Kubernetes environments for critical infrastructure.
