Installing while connected online

Verify that the identity configuration management for Kubernetes operator is not already installed on your OpenShift Container Platform cluster. The identity configuration management for Kubernetes operator allows only one single installation on each OpenShift Container Platform cluster. Continue with the following steps if there is no installation.

To ensure that the OpenShift Container Platform cluster is set up correctly, access the OpenShift Container Platform web console with the following command:

kubectl -n openshift-console get route

openshift-console console console-openshift-console.apps.new-coral.purple-chesterfield.com
console   https   reencrypt/Redirect     None

Open the URL in your browser and check the result. If the console URL displays console-openshift-console.router.default.svc.cluster.local, set the value for openshift_master_default_subdomain when you install OpenShift Container Platform. See the following example of a URL: https://console-openshift-console.apps.new-coral.purple-chesterfield.com.

Select Operators > OperatorHub to access the list of available operators, and select identity configuration management for Kubernetes operator.

On the Operator subscription page, select the options for your installation:

Select Install to apply your changes and create the operator.

After installing the operator, create an instance of the IDPConfig resource to install the necessary components that provide the IDP configuration management APIs. Here’s an example:

apiVersion: identityconfig.identitatem.io/v1alpha1
kind: IDPConfig
metadata:
  name: idp-config
  namespace: idp-mgmt-config
spec:

Create a identity configuration management for Kubernetes namespace where the operator requirements are contained. Run the following command, where namespace is the name for your identity configuration management for Kubernetes namespace. A value of idp-mgmt-config is recommended. The value for namespace might be referred to as Project in the OpenShift Container Platform environment:

oc create namespace <namespace>

Switch your project namespace to the one that you created. Replace namespace with the name of the identity configuration management for Kubernetes namespace that you created in step 1.

oc project <namespace>

Create a YAML file to configure an OperatorGroup resource. Each namespace can have only one operator group. Replace default with the name of your operator group. Replace namespace with the name of your project namespace. See the following example:

apiVersion: operators.coreos.com/v1
kind: OperatorGroup
metadata:
  name: <default>
spec:
  targetNamespaces:
  - <namespace>

Run the following command to create the OperatorGroup resource. Replace operator-group with the name of the operator group YAML file that you created:

oc apply -f <path-to-file>/<operator-group>.yaml

Create a YAML file to configure an OpenShift Container Platform Subscription. Your file should look similar to the following example:

apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  name: idp-mgmt-operator-subscription
spec:
  sourceNamespace: openshift-marketplace
  source: redhat-operators
  channel: alpha
  installPlanApproval: Automatic
  name: idp-mgmt-operator

Run the following command to create the OpenShift Container Platform Subscription. Replace subscription with the name of the subscription file that you created:

oc apply -f <path-to-file>/<subscription>.yaml

Create an instance of the IDPConfig resource to install the necessary components that provide the IDP configuration management APIs. Here’s an example:

apiVersion: identityconfig.identitatem.io/v1alpha1
kind: IDPConfig
metadata:
  name: idp-config
  namespace: idp-mgmt-config
spec: