// Module included in the following assemblies:
//
// * security/zero_trust_workload_identity_manageer/zero-trust-manager-oidc-federation.adoc

:_mod-docs-content-type: PROCEDURE
[id="zero-trust-manager-create-demo-app_{context}"]
= Creating the demonstration application

[role="_abstract"]
Create the demonstration application to verify that the entire system functions correctly. This process validates the configuration of your application secrets and namespaces.

.Procedure

. Set the application name and namespace by running the following commands:
+
[source,terminal]
----
$ export APP_NAME=workload-app
----
+
[source,terminal]
----
$ export APP_NAMESPACE=demo
----

. Create the namespace by running the following command:
+
[source,terminal]
----
$ oc create namespace $APP_NAMESPACE
----

. Create the application Secret by running the following command:
+
[source,terminal]
----
$ oc apply -f - << EOF
apiVersion: v1
kind: Secret
metadata:
  name: $APP_NAME
  namespace: $APP_NAMESPACE
stringData:
  AAD_AUTHORITY: https://login.microsoftonline.com/
  AZURE_AUDIENCE: "api://AzureADTokenExchange"
  AZURE_TENANT_ID: "${TENANT_ID}"
  AZURE_CLIENT_ID: "${IDENTITY_CLIENT_ID}"
  BLOB_STORE_ACCOUNT: "${STORAGE_ACCOUNT}"
  BLOB_STORE_CONTAINER: "${STORAGE_CONTAINER}"
EOF
----
