Chapter 1. Preparing to deploy OpenShift Data Foundation

Procedure

1. Enable the Key/Value (KV) backend path in Vault.

   For Vault KV secret engine API, version 1:

   $ vault secrets enable -path=odf kv

   Copy to Clipboard Toggle word wrap

   For Vault KV secret engine API, version 2:

   $ vault secrets enable -path=odf kv-v2

   Copy to Clipboard Toggle word wrap

2. Create a policy to restrict users to perform a write or delete operation on the secret using the following commands.

   echo '
   path "odf/*" {
     capabilities = ["create", "read", "update", "delete", "list"]
   }
   path "sys/mounts" {
   capabilities = ["read"]
   }'| vault policy write odf -

   Copy to Clipboard Toggle word wrap

3. Create a token matching the above policy.

   $ vault token create -policy=odf -format json

   Copy to Clipboard Toggle word wrap