Running GPU platforms air-gapped

With no internet, every artifact — images, drivers, models, dependencies — must arrive through a controlled inbound mirror-and-scan path into an internal registry, then be verified (signatures, SBOMs) at admission.

Nothing can depend on external SaaS: run monitoring, secrets, and GitOps in-cluster, and keep tested, boundary-local backups.

Plan spare capacity: you can't burst to the cloud, and isolation (dedicated pools) reduces packing efficiency. See the secure regulated-industry reference architecture.