// Module included in the following assemblies:
//
// * service_mesh/v2x/installing-ossm.adoc

:_mod-docs-content-type: PROCEDURE
[id="ossm-control-plane-deploy-operatorhub_{context}"]
= Deploying the {SMProductShortName} control plane from the web console

You can deploy a basic `ServiceMeshControlPlane` by using the web console.  In this example, `istio-system` is the name of the {SMProductShortName} control plane project.

.Prerequisites

* The {SMProductName} Operator must be installed.
ifndef::openshift-rosa,openshift-rosa-hcp,openshift-dedicated[]
* You are logged in to the {product-title} web console as `cluster-admin`.
endif::openshift-rosa,openshift-rosa-hcp,openshift-dedicated[]
ifdef::openshift-rosa,openshift-rosa-hcp,openshift-dedicated[]
* You are logged in to the {product-title} web console as a user with the `dedicated-admin` role.
endif::openshift-rosa,openshift-rosa-hcp,openshift-dedicated[]

.Procedure

. Log in to the {product-title} web console as a user with the `cluster-admin` role. If you use {product-dedicated}, you must have an account with the `dedicated-admin` role.

. Create a project named `istio-system`.
+
.. Navigate to *Home* -> *Projects*.
+
.. Click *Create Project*.
ifndef::openshift-rosa,openshift-rosa-hcp,openshift-dedcated[]
+
.. In the *Name* field, enter `istio-system`. The `ServiceMeshControlPlane` resource must be installed in a project that is separate from your microservices and Operators.
+
These steps use `istio-system` as an example, but you can deploy your {SMProductShortName} control plane in any project as long as it is separate from the project that contains your services.
endif::openshift-rosa,openshift-rosa-hcp,openshift-dedcated[]
ifdef::openshift-rosa,openshift-rosa-hcp,openshift-dedcated[]
+
.. In the *Name* field, enter `istio-system`. The `ServiceMeshControlPlane` resource must be installed in the `istio-system` project, separate from your microservices and Operators.
endif::openshift-rosa,openshift-rosa-hcp,openshift-dedcated[]
+
.. Click *Create*.

. Navigate to *Ecosystem* -> *Installed Operators*.

. Click the {SMProductName} Operator, then click *Istio Service Mesh Control Plane*.

. On the *Istio Service Mesh Control Plane* tab, click *Create ServiceMeshControlPlane*.
+
--
.. Accept the default {SMProductShortName} control plane version to take advantage of the features available in the most current version of the product. The version of the control plane determines the features available regardless of the version of the Operator.

ifdef::openshift-rosa,openshift-rosa-hcp[]
.. Add the `spec.security.identity.type.ThirdParty` field, required by {product-rosa}.
endif::openshift-rosa,openshift-rosa-hcp[]
ifdef::openshift-dedicated[]
.. Add the `spec.security.identity.type.ThirdParty` field, required by {product-dedicated}.
endif::openshift-dedicated[]
+
.. Click *Create*.
--
+
The Operator creates pods, services, and {SMProductShortName} control plane components based on your configuration parameters. You can configure `ServiceMeshControlPlane` settings at a later time.

.Verification

* To verify the control plane installed correctly, click the *Istio Service Mesh Control Plane* tab.
+
.. Click the name of the new control plane.
+
.. Click the *Resources* tab to see the {SMProductName} control plane resources the Operator created and configured.
