How does Diagrid Catalyst handle Dapr security in air-gapped or disconnected environments?

Catalyst supports air-gapped deployments by allowing you to run its control plane components within your isolated network. Workload identity and MCP tool authorization policies are enforced locally, with no dependency on external internet connectivity. Catalyst uses Dapr’s mTLS for sidecar-to-sidecar encryption and integrates with your existing certificate management. You can configure secret stores (e.g., HashiCorp Vault, Azure Key Vault) locally. Diagrid provides deployment guides for air-gapped Kubernetes clusters without requiring egress.