Installing the File Integrity Operator

Installing the File Integrity Operator using the web console

Prerequisites

  • You must have admin privileges.

Procedure

  1. In the OKD web console, navigate to OperatorsOperatorHub.

  2. Search for the File Integrity Operator, then click Install.

  3. Keep the default selection of Installation mode and namespace to ensure that the Operator will be installed to the openshift-file-integrity namespace.

  4. Click Install.

Verification

To confirm that the installation is successful:

  1. Navigate to the OperatorsInstalled Operators page.

  2. Check that the Operator is installed in the openshift-file-integrity namespace and its status is Succeeded.

If the Operator is not installed successfully:

  1. Navigate to the OperatorsInstalled Operators page and inspect the Status column for any errors or failures.

  2. Navigate to the WorkloadsPods page and check the logs in any pods in the openshift-file-integrity project that are reporting issues.

Installing the File Integrity Operator using the CLI

Prerequisites

  • You must have admin privileges.

Procedure

  1. Create a Namespace object YAML file by running:

    1. $ oc create -f <file-name>.yaml

    Example output

    1. apiVersion: v1
    2. kind: Namespace
    3. metadata:
    4. labels:
    5. openshift.io/cluster-monitoring: "true"
    6. pod-security.kubernetes.io/enforce: privileged (1)
    7. name: openshift-file-integrity
    1In OKD 4.12, the pod security label must be set to privileged at the namespace level.
  2. Create the OperatorGroup object YAML file:

    1. $ oc create -f <file-name>.yaml

    Example output

    1. apiVersion: operators.coreos.com/v1
    2. kind: OperatorGroup
    3. metadata:
    4. name: file-integrity-operator
    5. namespace: openshift-file-integrity
    6. spec:
    7. targetNamespaces:
    8. - openshift-file-integrity
  3. Create the Subscription object YAML file:

    1. $ oc create -f <file-name>.yaml

    Example output

    1. apiVersion: operators.coreos.com/v1alpha1
    2. kind: Subscription
    3. metadata:
    4. name: file-integrity-operator
    5. namespace: openshift-file-integrity
    6. spec:
    7. channel: "v1"
    8. installPlanApproval: Automatic
    9. name: file-integrity-operator
    10. source: redhat-operators
    11. sourceNamespace: openshift-marketplace

Verification

  1. Verify the installation succeeded by inspecting the CSV file:

    1. $ oc get csv -n openshift-file-integrity
  2. Verify that the File Integrity Operator is up and running:

    1. $ oc get deploy -n openshift-file-integrity

Additional resources