๊ฒ€์ƒ‰

6.2. File Integrity Operator ์„ค์น˜

download PDF

6.2.1. ์›น ์ฝ˜์†”์„ ์‚ฌ์šฉํ•˜์—ฌ File Integrity Operator ์„ค์น˜

์‚ฌ์ „ ์š”๊ตฌ ์‚ฌํ•ญ

  • admin ๊ถŒํ•œ์ด ์žˆ์–ด์•ผ ํ•ฉ๋‹ˆ๋‹ค.

ํ”„๋กœ์„ธ์Šค

  1. OpenShift Container Platform ์›น ์ฝ˜์†”์—์„œ Operator OperatorHub๋กœ ์ด๋™ํ•ฉ๋‹ˆ๋‹ค.
  2. File Integrity Operator ๋ฅผ ๊ฒ€์ƒ‰ํ•œ ๋‹ค์Œ ์„ค์น˜๋ฅผ ํด๋ฆญํ•ฉ๋‹ˆ๋‹ค.
  3. ๊ธฐ๋ณธ ์„ค์น˜ ๋ชจ๋“œ ๋ฐ ๋„ค์ž„์ŠคํŽ˜์ด์Šค๋ฅผ ๊ณ„์† ์„ ํƒํ•˜์—ฌ Operator๊ฐ€ openshift-file-integrity ๋„ค์ž„์ŠคํŽ˜์ด์Šค์— ์„ค์น˜๋˜๋„๋ก ํ•ฉ๋‹ˆ๋‹ค.
  4. ์„ค์น˜๋ฅผ ํด๋ฆญํ•ฉ๋‹ˆ๋‹ค.

๊ฒ€์ฆ

์„ค์น˜์— ์„ฑ๊ณตํ–ˆ๋Š”์ง€ ํ™•์ธํ•˜๋ ค๋ฉด ๋‹ค์Œ์„ ์ˆ˜ํ–‰ํ•˜์‹ญ์‹œ์˜ค.

  1. Operator ์„ค์น˜๋œ Operator ํŽ˜์ด์ง€๋กœ ์ด๋™ํ•ฉ๋‹ˆ๋‹ค.
  2. Operator๊ฐ€ openshift-file-integrity ๋„ค์ž„์ŠคํŽ˜์ด์Šค์— ์„ค์น˜๋˜์–ด ์žˆ๊ณ  ํ•ด๋‹น ์ƒํƒœ๋Š” Succeeded์ธ์ง€ ํ™•์ธํ•ฉ๋‹ˆ๋‹ค.

Operator๊ฐ€ ์„ฑ๊ณต์ ์œผ๋กœ ์„ค์น˜๋˜์ง€ ์•Š์€ ๊ฒฝ์šฐ ๋‹ค์Œ์„ ์ˆ˜ํ–‰ํ•˜์‹ญ์‹œ์˜ค.

  1. Operator ์„ค์น˜๋œ Operator ํŽ˜์ด์ง€๋กœ ์ด๋™ํ•˜์—ฌ Status ์—ด์— ์˜ค๋ฅ˜ ๋˜๋Š” ์‹คํŒจ๊ฐ€ ์žˆ๋Š”์ง€ ์ ๊ฒ€ํ•ฉ๋‹ˆ๋‹ค.
  2. ์›Œํฌ๋กœ๋“œ Pod ํŽ˜์ด์ง€๋กœ ์ „ํ™˜ํ•˜๊ณ  openshift-file-integrity ํ”„๋กœ์ ํŠธ์—์„œ ๋ฌธ์ œ๋ฅผ ๋ณด๊ณ ํ•˜๋Š” Pod์˜ ๋กœ๊ทธ๋ฅผ ํ™•์ธํ•ฉ๋‹ˆ๋‹ค.

6.2.2. CLI๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ File Integrity Operator ์„ค์น˜

์‚ฌ์ „ ์š”๊ตฌ ์‚ฌํ•ญ

  • admin ๊ถŒํ•œ์ด ์žˆ์–ด์•ผ ํ•ฉ๋‹ˆ๋‹ค.

ํ”„๋กœ์„ธ์Šค

  1. ๋‹ค์Œ์„ ์‹คํ–‰ํ•˜์—ฌ Namespace ์˜ค๋ธŒ์ ํŠธ YAML ํŒŒ์ผ์„ ์ƒ์„ฑํ•ฉ๋‹ˆ๋‹ค.

    $ oc create -f <file-name>.yaml

    ์ถœ๋ ฅ ์˜ˆ

    apiVersion: v1
    kind: Namespace
    metadata:
      labels:
        openshift.io/cluster-monitoring: "true"
      name: openshift-file-integrity

  2. OperatorGroup ์˜ค๋ธŒ์ ํŠธ YAML ํŒŒ์ผ์„ ์ƒ์„ฑํ•ฉ๋‹ˆ๋‹ค.

    $ oc create -f <file-name>.yaml

    ์ถœ๋ ฅ ์˜ˆ

    apiVersion: operators.coreos.com/v1
    kind: OperatorGroup
    metadata:
      name: file-integrity-operator
      namespace: openshift-file-integrity
    spec:
      targetNamespaces:
      - openshift-file-integrity

  3. Subscription ์˜ค๋ธŒ์ ํŠธ YAML ํŒŒ์ผ์„ ์ƒ์„ฑํ•ฉ๋‹ˆ๋‹ค.

    $ oc create -f <file-name>.yaml

    ์ถœ๋ ฅ ์˜ˆ

    apiVersion: operators.coreos.com/v1alpha1
    kind: Subscription
    metadata:
      name: file-integrity-operator
      namespace: openshift-file-integrity
    spec:
      channel: "release-0.1"
      installPlanApproval: Automatic
      name: file-integrity-operator
      source: redhat-operators
      sourceNamespace: openshift-marketplace

๊ฒ€์ฆ

  1. CSV ํŒŒ์ผ์„ ๊ฒ€์‚ฌํ•˜์—ฌ ์„ค์น˜์— ์„ฑ๊ณตํ–ˆ๋Š”์ง€ ํ™•์ธํ•ฉ๋‹ˆ๋‹ค.

    $ oc get csv -n openshift-file-integrity
  2. File Integrity Operator๊ฐ€ ์‹คํ–‰ ์ค‘์ธ์ง€ ํ™•์ธํ•ฉ๋‹ˆ๋‹ค.

    $ oc get deploy -n openshift-file-integrity

6.2.3. ์ถ”๊ฐ€ ๋ฆฌ์†Œ์Šค

Red Hat logoGithubRedditYoutubeTwitter

์ž์„ธํ•œ ์ •๋ณด

ํ‰๊ฐ€ํŒ, ๊ตฌ๋งค ๋ฐ ํŒ๋งค

์ปค๋ฎค๋‹ˆํ‹ฐ

Redย Hat ๋ฌธ์„œ ์ •๋ณด

Redย Hat์„ ์‚ฌ์šฉํ•˜๋Š” ๊ณ ๊ฐ์€ ์‹ ๋ขฐํ•  ์ˆ˜ ์žˆ๋Š” ์ฝ˜ํ…์ธ ๊ฐ€ ํฌํ•จ๋œ ์ œํ’ˆ๊ณผ ์„œ๋น„์Šค๋ฅผ ํ†ตํ•ด ํ˜์‹ ํ•˜๊ณ  ๋ชฉํ‘œ๋ฅผ ๋‹ฌ์„ฑํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

๋ณด๋‹ค ํฌ๊ด„์  ์ˆ˜์šฉ์„ ์œ„ํ•œ ์˜คํ”ˆ ์†Œ์Šค ์šฉ์–ด ๊ต์ฒด

Redย Hat์€ ์ฝ”๋“œ, ๋ฌธ์„œ, ์›น ์†์„ฑ์—์„œ ๋ฌธ์ œ๊ฐ€ ์žˆ๋Š” ์–ธ์–ด๋ฅผ ๊ต์ฒดํ•˜๊ธฐ ์œ„ํ•ด ์ตœ์„ ์„ ๋‹คํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ์ž์„ธํ•œ ๋‚ด์šฉ์€ ๋‹ค์Œ์„ ์ฐธ์กฐํ•˜์„ธ์š”.Redย Hat ๋ธ”๋กœ๊ทธ.

Redย Hat ์†Œ๊ฐœ

Redย Hat์€ ๊ธฐ์—…์ด ํ•ต์‹ฌ ๋ฐ์ดํ„ฐ ์„ผํ„ฐ์—์„œ ๋„คํŠธ์›Œํฌ ์—์ง€์— ์ด๋ฅด๊ธฐ๊นŒ์ง€ ํ”Œ๋žซํผ๊ณผ ํ™˜๊ฒฝ ์ „๋ฐ˜์—์„œ ๋” ์‰ฝ๊ฒŒ ์ž‘์—…ํ•  ์ˆ˜ ์žˆ๋„๋ก ๊ฐ•ํ™”๋œ ์†”๋ฃจ์…˜์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค.

ยฉ 2024 Red Hat, Inc.