홈
제품
OpenShift Container Platform
4.21
Security and compliance
11.4.2. Installing the Zero Trust Workload Identity Manager by using the CLI

11.4.2. Installing the Zero Trust Workload Identity Manager by using the CLI

Install the Zero Trust Workload Identity Manager by using the command-line interface (CLI) to create the required project, OperatorGroup, and Subscription objects. You can then deploy the Operator components necessary for managing workload identities on your OpenShift Container Platform cluster.

Prerequisites

You have access to the cluster with cluster-admin privileges.

참고

A minimum of 1Gi persistent volume is required to install the SPIRE Server.

Procedure

Create a new project named zero-trust-workload-identity-manager by running the following command:
```
$ oc new-project zero-trust-workload-identity-manager
```

Create an OperatorGroup object:

Create a YAML file, for example, operatorGroup.yaml, with the following content:

apiVersion: operators.coreos.com/v1
kind: OperatorGroup
metadata:
  name: openshift-zero-trust-workload-identity-manager
  namespace: zero-trust-workload-identity-manager
spec:
  upgradeStrategy: Default

Create the OperatorGroup object by running the following command:
```
$ oc create -f operatorGroup.yaml
```

Create a Subscription object:

Create a YAML file, for example, subscription.yaml, that defines the Subscription object:

apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  name: openshift-zero-trust-workload-identity-manager
  namespace: zero-trust-workload-identity-manager
spec:
  channel: stable-v1
  name: openshift-zero-trust-workload-identity-manager
  source: redhat-operators
  sourceNamespace: openshift-marketplace
  installPlanApproval: Automatic

Create the Subscription object by running the following command:
```
$ oc create -f subscription.yaml
```

Verification

Verify that the OLM subscription is created by running the following command:

$ oc get subscription -n zero-trust-workload-identity-manager

Example output

NAME                                             PACKAGE                                SOURCE             CHANNEL
openshift-zero-trust-workload-identity-manager   zero-trust-workload-identity-manager   redhat-operators   stable-v1

Verify whether the Operator is successfully installed by running the following command:

$ oc get csv -n zero-trust-workload-identity-manager

Example output

NAME                                         DISPLAY                                VERSION  PHASE
zero-trust-workload-identity-manager.v1.0.0   Zero Trust Workload Identity Manager   1.0.0    Succeeded

Verify that the Zero Trust Workload Identity Manager controller manager is ready by running the following command:

$ oc get deployment -l name=zero-trust-workload-identity-manager -n zero-trust-workload-identity-manager

Example output

NAME                                                      READY   UP-TO-DATE   AVAILABLE   AGE
zero-trust-workload-identity-manager-controller-manager   1/1     1            1           43m

11.4.2. Installing the Zero Trust Workload Identity Manager by using the CLI

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 소개

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat 문서 정보

Theme

Red Hat legal and privacy links

Red Hat legal and privacy links