Red Hat OpenShift Container Platform

Installing the Zero Trust Workload Identity Manager by using the CLI

Install the Zero Trust Workload Identity Manager by using the command-line interface (CLI) to create the required project, OperatorGroup, and Subscription objects. You can then deploy the Operator components necessary for managing workload identities on your Red Hat OpenShift Container Platform cluster.

Prerequisites

You have access to the cluster with cluster-admin privileges.

A minimum of 1Gi persistent volume is required to install the SPIRE Server.

Procedure

Create a new project named zero-trust-workload-identity-manager by running the following command:
```
$ oc new-project zero-trust-workload-identity-manager
```

Create an OperatorGroup object:

Create a YAML file, for example, operatorGroup.yaml, with the following content:

apiVersion: operators.coreos.com/v1
kind: OperatorGroup
metadata:
  name: openshift-zero-trust-workload-identity-manager
  namespace: zero-trust-workload-identity-manager
spec:
  upgradeStrategy: Default

Create the OperatorGroup object by running the following command:
```
$ oc create -f operatorGroup.yaml
```

Create a Subscription object:

Create a YAML file, for example, subscription.yaml, that defines the Subscription object:

apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  name: openshift-zero-trust-workload-identity-manager
  namespace: zero-trust-workload-identity-manager
spec:
  channel: stable-v1
  name: openshift-zero-trust-workload-identity-manager
  source: redhat-operators
  sourceNamespace: openshift-marketplace
  installPlanApproval: Automatic

Create the Subscription object by running the following command:
```
$ oc create -f subscription.yaml
```

Verification

Verify that the OLM subscription is created by running the following command:

$ oc get subscription -n zero-trust-workload-identity-manager

Example output

NAME                                             PACKAGE                                SOURCE             CHANNEL
openshift-zero-trust-workload-identity-manager   zero-trust-workload-identity-manager   redhat-operators   stable-v1

Verify whether the Operator is successfully installed by running the following command:

$ oc get csv -n zero-trust-workload-identity-manager

Example output

NAME                                         DISPLAY                                VERSION  PHASE
zero-trust-workload-identity-manager.v1.0.0   Zero Trust Workload Identity Manager   1.0.0    Succeeded

Verify that the Zero Trust Workload Identity Manager controller manager is ready by running the following command:

$ oc get deployment -l name=zero-trust-workload-identity-manager -n zero-trust-workload-identity-manager

Example output

NAME                                                      READY   UP-TO-DATE   AVAILABLE   AGE
zero-trust-workload-identity-manager-controller-manager   1/1     1            1           43m