1.3. Installing Trusted Profile Analyzer using the Operator Lifecycle Manager
You can install the Red Hat Trusted Profile Analyzer (RHTPA) Operator, and deploy the RHTPA service by using OpenShift’s Operator Lifecycle Manager (OLM). This deployment gives you a basic RHTPA environment, and a web-based user interface (UI) to manage the service. You can configure either Red Hat’s single sign-on (SSO) technology or Amazon Web Services' (AWS) Cognito as an OpenID Connect (OIDC) provider. You can configure either Red Hat’s OpenShift Data Foundation or AWS S3 for storage. You can also configure either a PostgreSQL database or use Amazon’s Relational Database Service (RDS) to store advisory and analytical data.
Deploying the RHTPA operator on OpenShift is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs), might not be functionally complete, and Red Hat does not recommend to use them for production. These features give early access to upcoming product features, enabling customers to test functionality and give their feedback during the development process. See the support scope for Red Hat Technology Preview features for more details.
Prerequisites
- Red Hat OpenShift Container Platform 4.16 or later.
-
Access to the OpenShift web console with the
cluster-adminrole. - A configured OIDC provider, either Red Hat’s SSO or Amazon Cognito.
- A storage provider, either Red Hat OpenShift Data Foundation or Amazon S3.
- An available PostgreSQL or Amazon RDS database instance.
Procedure
-
Log in to the OpenShift web console with a user that has the
cluster-adminrole. - From the Administrator perspective, expand the Operators navigation menu, and click OperatorHub.
- In the search field, type trusted, and click the Red Hat Trusted Profile Analyzer tile.
- Click the Install button to show the operator details.
- On the Install Operator page, select your installation namespace from the drop-down menu, or create a new project namespace. Accept the rest of the default values, and click the Install button. Wait for the installation to finish.
- Once the installation of the RHTPA operator finishes, click the View Operator button.
To deploy the Trusted Profile Analyzer service.
- On the Red Hat Trusted Profile Analyzer Operator page, under the Details tab, click the Create instance link on the TrustedProfileAnalyzer tile.
- On the Create TrustedProfileAnalyzer page, select YAML view.
-
Copy the OIDC provider, storage, and importer sections from the Helm chart for AWS services or Red Hat services, and paste them under the
specsection. - Update the OIDC provider, storage, and importer values for your environment.
- Click the Create button.
- You can check on the health of the new Trusted Profile Analyzer service by checking that the pods are up and running. You can also verify the exposure of the access route URL, and that the Trusted Profile Analyzer service is accessible.