Chapter 1. Preparing to deploy OpenShift Container Storage

Procedure

1. Enable the Key/Value (KV) backend path in Vault.

   For Vault KV secret engine API, version 1:

   $ vault secrets enable -path=ocs kv

   Copy to Clipboard Toggle word wrap

   For Vault KV secret engine API, version 2:

   $ vault secrets enable -path=ocs kv-v2

   Copy to Clipboard Toggle word wrap

2. Create a policy to restrict users to perform a write or delete operation on the secret using the following commands:

   echo '
   path "ocs/*" {
     capabilities = ["create", "read", "update", "delete", "list"]
   }
   path "sys/mounts" {
   capabilities = ["read"]
   }'| vault policy write ocs -

   Copy to Clipboard Toggle word wrap

3. Create a token matching the above policy:

   $ vault token create -policy=ocs -format json

   Copy to Clipboard Toggle word wrap