Chapter 1. Preparing to deploy OpenShift Data Foundation

Procedure

1. Enable the Key/Value (KV) backend path in Vault.

   For Vault KV secret engine API, version 1:

   Copy to Clipboard Toggle word wrap

   $ vault secrets enable -path=odf kv

   For Vault KV secret engine API, version 2:

   Copy to Clipboard Toggle word wrap

   $ vault secrets enable -path=odf kv-v2

2. Create a policy to restrict users to perform a write or delete operation on the secret using the following commands.

   Copy to Clipboard Toggle word wrap

   echo '
   path "odf/*" {
     capabilities = ["create", "read", "update", "delete", "list"]
   }
   path "sys/mounts" {
   capabilities = ["read"]
   }'| vault policy write odf -

3. Create a token matching the above policy.

   Copy to Clipboard Toggle word wrap

   $ vault token create -policy=odf -format json