Red Hat OpenShift Container Platform

Installing the Compliance Operator on hosted control planes

Install the Compliance Operator on hosted control planes by creating a Subscription file in the software catalog so you can run compliance scans in a hosted control plane environment.

Hosted control planes is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.

For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.

Prerequisites

You must have admin privileges.

Procedure

Define a Namespace object similar to the following:
Example namespace-object.yaml
```
apiVersion: v1
kind: Namespace
metadata:
  labels:
    openshift.io/cluster-monitoring: "true"
    pod-security.kubernetes.io/enforce: privileged
  name: openshift-compliance
```
- In Red Hat OpenShift Container Platform {product-version}, the pod security label must be set to privileged at the namespace level.
Create the Namespace object by running the following command:
```
$ oc create -f namespace-object.yaml
```

Define an OperatorGroup object:

Example operator-group-object.yaml

apiVersion: operators.coreos.com/v1
kind: OperatorGroup
metadata:
  name: compliance-operator
  namespace: openshift-compliance
spec:
  targetNamespaces:
  - openshift-compliance

Create the OperatorGroup object by running the following command:
```
$ oc create -f operator-group-object.yaml
```

Define a Subscription object:

Example subscription-object.yaml

apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  name: compliance-operator-sub
  namespace: openshift-compliance
spec:
  channel: "stable"
  installPlanApproval: Automatic
  name: compliance-operator
  source: redhat-operators
  sourceNamespace: openshift-marketplace
  config:
    nodeSelector:
      node-role.kubernetes.io/worker: ""
    env:
    - name: PLATFORM
      value: "HyperShift"

Create the Subscription object by running the following command:
```
$ oc create -f subscription-object.yaml
```

Verification

Verify the installation succeeded by inspecting the CSV file by running the following command:
```
$ oc get csv -n openshift-compliance
```
Verify that the Compliance Operator is up and running by running the following command:
```
$ oc get deploy -n openshift-compliance
```