Deploying a Tang server using the NBDE Tang Server Operator

You can deploy and quickly configure one or more Tang servers using the NBDE Tang Server Operator in the web console.

Prerequisites

  • You must have cluster-admin privileges on an Red Hat OpenShift Container Platform cluster.

  • You have installed the NBDE Tang Server Operator on your OCP cluster.

Procedure

  1. In the Red Hat OpenShift Container Platform web console, navigate to Ecosystem → Software Catalog.

  2. Select Project, and click Create Project:

    Create Project in the web console

  3. On the Create Project page, fill in the required information, for example:

    Example values on the Create Project page

  4. Click Create.

  5. NBDE Tang Server replicas require a Persistent Volume Claim (PVC) for storing encryption keys. In the web console, navigate to Storage → PersistentVolumeClaims:

    PersistentVolumeClaims in the Storage menu

  6. On the following PersistentVolumeClaims screen, click Create PersistentVolumeClaim.

  7. On the Create PersistentVolumeClaim page, select a storage that fits your deployment scenario. Consider how often you want to rotate the encryption keys. Name your PVC and choose the claimed storage capacity, for example:

    Create PersistentVolumeClaims page

  8. Navigate to Ecosystem → Installed Operators, and click NBDE Tang Server.

  9. Click Create instance.

    Create NBDE Tang Server instance

  10. On the Create TangServer page, choose the name of the Tang Server instance, amount of replicas, and specify the name of the previously created Persistent Volume Claim, for example:

    Create TangServer page

  11. After you enter the required values a change settings that differ from the default values in your scenario, click Create.

← Previous: Installing the NBDE Tang Server Operator using CLI | ↑ Up: Encrypt underlying host storage across cluster nodes | ⌂ Home: Red Hat OpenShift Container Platform | Next: Rotating keys using the NBDE Tang Server Operator →