Chapter 2. Install

Procedure

1. Create a tdx-machine-config.yaml manifest file according to the following example:

   apiVersion: machineconfiguration.openshift.io/v1
   kind: MachineConfig
   metadata:
     labels:
       machineconfiguration.openshift.io/role: <role>
     name: 99-enable-intel-tdx
   spec:
     kernelArguments:
     - kvm_intel.tdx=1
     - nohibernate
     config:
       ignition:
         version: 3.2.0
       storage:
         files:
           - path: /etc/modules-load.d/vsock.conf
             mode: 0644
             contents:
               source: data:text/plain;charset=utf-8;base64,dnNvY2stbG9vcGJhY2sK

   <role>

   Specify master for single-node OpenShift or worker for a multi-node cluster.

2. Create the config map by running the following command:

   $ oc create -f tdx-machine-config.yaml

   Updating the machine config triggers node reboot.

Procedure

1. Create an osc-namespace.yaml manifest file:

   apiVersion: v1
   kind: Namespace
   metadata:
     name: openshift-sandboxed-containers-operator

2. Create the namespace by running the following command:

   $ oc create -f osc-namespace.yaml

3. Create an osc-operatorgroup.yaml manifest file:

   apiVersion: operators.coreos.com/v1
   kind: OperatorGroup
   metadata:
     name: sandboxed-containers-operator-group
     namespace: openshift-sandboxed-containers-operator
   spec:
     targetNamespaces:
     - openshift-sandboxed-containers-operator

4. Create the operator group by running the following command:

   $ oc create -f osc-operatorgroup.yaml

5. Create an osc-subscription.yaml manifest file:

   apiVersion: operators.coreos.com/v1alpha1
   kind: Subscription
   metadata:
     name: sandboxed-containers-operator
     namespace: openshift-sandboxed-containers-operator
   spec:
     channel: stable
     installPlanApproval: Automatic
     name: sandboxed-containers-operator
     source: redhat-operators
     sourceNamespace: openshift-marketplace
     startingCSV: sandboxed-containers-operator.v1.12.0

6. Create the subscription by running the following command:

   $ oc create -f osc-subscription.yaml

7. Verify that the Operator is correctly installed by running the following command:

   $ oc get csv -n openshift-sandboxed-containers-operator

   This command can take several minutes to complete.

8. Watch the process by running the following command:

   $ watch oc get csv -n openshift-sandboxed-containers-operator

   Example output

   NAME                             DISPLAY                                  VERSION         PHASE
   openshift-sandboxed-containers   openshift-sandboxed-containers-operator  1.12.0          Succeeded