Jira Task: Install and Verify Zero Trust Workload Identity Manager on OpenShift Cluster

Description

This task outlines the end-to-end process of deploying a new OpenShift cluster on AWS, and then installing and verifying the Zero Trust Workload Identity Manager operator. The process involves downloading the necessary installer files, setting up authentication with a pull secret, running the cluster installation, and finally, installing and verifying the operator via the OpenShift web console and CLI.

Prerequisites

• Access to the cluster with cluster-admin privileges.

• Access to the OpenShift Container Platform web console.

• A Red Hat account to obtain the pull-secret.json file.

• An AWS account with appropriate permissions for cluster provisioning.

Step-by-Step Instructions

1. Prepare the Installer

1. Create a new directory named installer.

1. Download the OpenShift cluster package from one of the following URLs and save it to your installer directory:

• • https://amd64.ocp.releases.ci.openshift.org

• • https://access.redhat.com/downloads/content/290/ver=4.19/rhel---9/4.19.10/x86_64/product-software

1. Navigate into the installer directory and untar the downloaded package:

tar -xvf ~/Downloads/openshift-install-linux-4.19.11.tar.gz

2. Obtain and Prepare the Pull Secret

1. Create a new directory named keys inside the installer directory.

1. Obtain your pull-secret.json or pull-secret.txt file from:

https://cloud.redhat.com/openshift/install/aws/installer-provisioned

1. Place the pull-secret file into the keys directory.

1. If the pull secret is new, obtain an API token from:

https://oauth-openshift.apps.ci.l2s4.p1.openshiftapps.com/oauth/token/request

1. Log in to the OpenShift cluster using the oc login command from the installer directory. For example:

oc login --token=<your_token> --server=<your_server>

1. Add the AWS keys to the pull secret by running:

oc registry login --to ~/keys/pull-secret.json

1. Verify the contents of the pull secret with jq:

jq -c < ~/keys/pull-secret.json

3. Install the OpenShift Cluster

1. From the installer directory, run the cluster creation command:

./openshift-install create cluster --dir aws

1. When prompted, provide the following details:

• • SSH Public Key: Leave as null

• • Platform: aws

• • Region: us-east-1

• • Base Domain: qe.devcluster.openshift.com

• • Cluster Name: sayadas-aws-osc (Note: This should be prefixed with your Karbaros ID as per instructions.)

• • Pull Secret: This will automatically be taken from the keys directory.

4. Install the Operator via the Web Console

1. Once the cluster is successfully installed, use the provided kubeconfig and kubeadmin credentials to log in to the OpenShift web console.

1. Go to Operators > OperatorHub.

1. In the filter box, type "Zero Trust Workload Identity Manager".

1. Select the operator and choose the desired version from the drop-down list.

1. Click Install.

5. Verify the Operator Installation

1. Use the oc command-line tool to verify that the operator is running correctly.

1. Run the following command:

oc get deployment -l name=zero-trust-workload-identity-manager -n zero-trust-workload-identity-manager

1. The expected output should show that the deployment is ready, as in the example below:
    {{NAME READY UP-TO-DATE AVAILABLE AGE
   zero-trust-workload-identity-manager-controller-manager 1/1 1 1 18m}}

Labels: openshift, aws, ztwim, installer, operator-installation, qe-automation