Right now we’re deploying istio into an environment with no internet access.
For the images we’ve just mirrored istio into a private registry. For the deployment we have helm write to a file and manually update each image to point and our own registry. Finally this is pushed in with kubectl.
I think the only change that you need to have within the helm chart is to update values file to point to your private registry:
global:
# Default hub for Istio images.
# Releases are published to docker hub under 'istio' project.
# Daily builds from prow are on gcr.io, and nightly builds from circle on docker.io/istionightly
hub: my-company-private/istio