// Module included in the following assemblies:
//
// * storage/container_storage_interface/persistent-storage-csi-secrets-store.adoc
//

:_mod-docs-content-type: PROCEDURE
[id="persistent-storage-csi-secrets-store-driver-install_{context}"]
= Installing the {secrets-store-driver}

[role="_abstract"]
To enable {product-title} to mount secrets from external secret management systems, install the {secrets-store-operator} and create a `ClusterCSIDriver` instance.

.Prerequisites
* Access to the {product-title} web console.
* Administrator access to the cluster.

.Procedure
. Install the {secrets-store-operator}:
.. Log in to the web console.
.. Click *Ecosystem* -> *Software Catalog*.
.. Locate the {secrets-store-operator} by typing "Secrets Store CSI" in the filter box.
.. Click the *Secrets Store CSI Driver Operator* button.
.. On the *Secrets Store CSI Driver Operator* page, click *Install*.
.. On the *Install Operator* page, ensure that:
+
* *All namespaces on the cluster (default)* is selected.

* *Installed Namespace* is set to *openshift-cluster-csi-drivers*.
.. Click *Install*.
+
After the installation finishes, the {secrets-store-operator} is listed in the *Installed Operators* section of the web console.

. Create the `ClusterCSIDriver` instance for the driver (`secrets-store.csi.k8s.io`):
.. Click *Administration* -> *CustomResourceDefinitions* -> *ClusterCSIDriver*.
.. On the *Instances* tab, click *Create ClusterCSIDriver*.
+
Use the following YAML file:
+
[source,yaml]
----
apiVersion: operator.openshift.io/v1
kind: ClusterCSIDriver
metadata:
    name: secrets-store.csi.k8s.io
spec:
  managementState: Managed
----
.. Click *Create*.
