Installing the File Integrity Operator

Installing the File Integrity Operator using the web console

Prerequisites

• You must have admin privileges.

Procedure

1. In the OKD web console, navigate to Operators → OperatorHub.

2. Search for the File Integrity Operator, then click Install.

3. Keep the default selection of Installation mode and namespace to ensure that the Operator will be installed to the openshift-file-integrity namespace.

4. Click Install.

Verification

To confirm that the installation is successful:

1. Navigate to the Operators → Installed Operators page.

2. Check that the Operator is installed in the openshift-file-integrity namespace and its status is Succeeded.

If the Operator is not installed successfully:

1. Navigate to the Operators → Installed Operators page and inspect the Status column for any errors or failures.

2. Navigate to the Workloads → Pods page and check the logs in any pods in the openshift-file-integrity project that are reporting issues.

Installing the File Integrity Operator using the CLI

Prerequisites

• You must have admin privileges.

Procedure

1. Create a Namespace object YAML file by running:

   $ oc create -f <file-name>.yaml

   Example output

   apiVersion: v1
   kind: Namespace
   metadata:
     labels:
       openshift.io/cluster-monitoring: "true"
       pod-security.kubernetes.io/enforce: privileged (1)
     name: openshift-file-integrity

   1	In OKD 4.12, the pod security label must be set to privileged at the namespace level.

2. Create the OperatorGroup object YAML file:

   $ oc create -f <file-name>.yaml

   Example output

   apiVersion: operators.coreos.com/v1
   kind: OperatorGroup
   metadata:
     name: file-integrity-operator
     namespace: openshift-file-integrity
   spec:
     targetNamespaces:
     - openshift-file-integrity

3. Create the Subscription object YAML file:

   $ oc create -f <file-name>.yaml

   Example output

   apiVersion: operators.coreos.com/v1alpha1
   kind: Subscription
   metadata:
     name: file-integrity-operator
     namespace: openshift-file-integrity
   spec:
     channel: "v1"
     installPlanApproval: Automatic
     name: file-integrity-operator
     source: redhat-operators
     sourceNamespace: openshift-marketplace

Verification

1. Verify the installation succeeded by inspecting the CSV file:

   $ oc get csv -n openshift-file-integrity

2. Verify that the File Integrity Operator is up and running:

   $ oc get deploy -n openshift-file-integrity

Additional resources

• The File Integrity Operator is supported in a restricted network environment. For more information, see Using Operator Lifecycle Manager on restricted networks.