Chapter 4. Update
You update Red Hat build of Trustee by updating the Red Hat build of Trustee Operator.
4.1. Updating the Red Hat build of Trustee Operator Copy linkLink copied to clipboard!
You can update the Red Hat build of Trustee Operator by using the CLI.
Procedure
Create a
trustee-subscription.yamlmanifest file:apiVersion: operators.coreos.com/v1alpha1 kind: Subscription metadata: name: trustee-operator-system namespace: trustee-operator-system spec: channel: stable installPlanApproval: Automatic name: trustee-operator source: redhat-operators sourceNamespace: openshift-marketplace startingCSV: trustee-operator.v1.1.0Create the subscription by running the following command:
$ oc create -f trustee-subscription.yamlVerify that the Operator is correctly installed by running the following command:
$ oc get csv -n trustee-operator-systemThis command can take several minutes to complete.
Watch the process by running the following command:
$ watch oc get csv -n trustee-operator-systemExample output
NAME DISPLAY VERSION REPLACES PHASE trustee-operator trustee-operator 1.1.0 0.4.2 Succeeded
4.2. Updating the RVPS config map Copy linkLink copied to clipboard!
You update the Reference Value Provider Service (RVPS) config map when your platform changes, such as after upgrading OpenShift Container Platform or Red Hat OpenShift sandboxed containers, or when your workload configuration changes. Updating the RVPS config map ensures that attestation verification succeeds with the new expected measurement values.
Procedure
Regenerate the RVPS config map by following the steps in Generating RVPS reference values.
NoteAfter you apply the updated RVPS config map, the new values are available to Red Hat build of Trustee automatically. You do not need to restart the service. This synchronization process might take several minutes to propagate throughout the system.