mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
98 lines
2.7 KiB
Plaintext
98 lines
2.7 KiB
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * networking/ingress-node-firewall-operator.adoc
|
|
|
|
:_mod-docs-content-type: PROCEDURE
|
|
[id="installing-infw-operator_{context}"]
|
|
= Installing the Ingress Node Firewall Operator
|
|
|
|
As a cluster administrator, you can install the Ingress Node Firewall Operator by using the {product-title} CLI or the web console.
|
|
|
|
[id="install-operator-cli_{context}"]
|
|
== Installing the Ingress Node Firewall Operator using the CLI
|
|
|
|
As a cluster administrator, you can install the Operator using the CLI.
|
|
|
|
.Prerequisites
|
|
|
|
* You have installed the OpenShift CLI (`oc`).
|
|
* You have an account with administrator privileges.
|
|
|
|
.Procedure
|
|
|
|
. To create the `openshift-ingress-node-firewall` namespace, enter the following command:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ cat << EOF| oc create -f -
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
labels:
|
|
pod-security.kubernetes.io/enforce: privileged
|
|
pod-security.kubernetes.io/enforce-version: v1.24
|
|
name: openshift-ingress-node-firewall
|
|
EOF
|
|
----
|
|
|
|
. To create an `OperatorGroup` CR, enter the following command:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ cat << EOF| oc create -f -
|
|
apiVersion: operators.coreos.com/v1
|
|
kind: OperatorGroup
|
|
metadata:
|
|
name: ingress-node-firewall-operators
|
|
namespace: openshift-ingress-node-firewall
|
|
EOF
|
|
----
|
|
|
|
. Subscribe to the Ingress Node Firewall Operator.
|
|
|
|
.. To create a `Subscription` CR for the Ingress Node Firewall Operator, enter the following command:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ cat << EOF| oc create -f -
|
|
apiVersion: operators.coreos.com/v1alpha1
|
|
kind: Subscription
|
|
metadata:
|
|
name: ingress-node-firewall-sub
|
|
namespace: openshift-ingress-node-firewall
|
|
spec:
|
|
name: ingress-node-firewall
|
|
channel: stable
|
|
source: redhat-operators
|
|
sourceNamespace: openshift-marketplace
|
|
EOF
|
|
----
|
|
|
|
. To verify that the Operator is installed, enter the following command:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc get ip -n openshift-ingress-node-firewall
|
|
----
|
|
+
|
|
.Example output
|
|
[source,terminal,subs="attributes+"]
|
|
----
|
|
NAME CSV APPROVAL APPROVED
|
|
install-5cvnz ingress-node-firewall.{product-version}.0-202211122336 Automatic true
|
|
----
|
|
|
|
. To verify the version of the Operator, enter the following command:
|
|
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc get csv -n openshift-ingress-node-firewall
|
|
----
|
|
+
|
|
.Example output
|
|
[source,terminal,subs="attributes+"]
|
|
----
|
|
NAME DISPLAY VERSION REPLACES PHASE
|
|
ingress-node-firewall.{product-version}.0-202211122336 Ingress Node Firewall Operator {product-version}.0-202211122336 ingress-node-firewall.{product-version}.0-202211102047 Succeeded
|
|
---- |