// Module included in the following assemblies:
//
// * security/zero_trust_workload_identity_manager/zer-trust-manager-install.adoc

:_mod-docs-content-type: PROCEDURE
[id="zero-trust-manager-install-console_{context}"]
= Installing the {zero-trust-full} by using the web console

[role="_abstract"]
Use the Software Catalog in the {product-title} web console to install the {zero-trust-full}. This process streamlines deployment and helps ensure the Operator is installed in the correct namespace with the appropriate installation mode.

[NOTE]
====
A minimum of 1Gi persistent volume is required to install the SPIRE Server.
====

.Prerequisites

* You have access to the cluster with `cluster-admin` privileges.

* You have access to the {product-title} web console.

.Procedure

. Log in to the {product-title} web console.

. Go to *Ecosystem* -> *Software Catalog*.

. Search for *{zero-trust-full}*.

. On the *Install Operator* page:

.. Update the *Update channel*, if necessary. The channel defaults to `stable-v1`, which installs the latest `stable-v1` release of the {zero-trust-full}.

.. Choose the *Installed Namespace* for the Operator. The default Operator namespace is `zero-trust-workload-identity-manager`.
+
If the `zero-trust-workload-identity-manager` namespace does not exist, it is created for you.
+
[NOTE]
====
The Operator and operands are deployed in the same namespace.
====

.. Select an *Update Approval* strategy

* The *Automatic strategy* allows Operator Lifecycle Manager (OLM) to automatically update the Operator when a new version is available.

* The *Manual strategy* requires a user with appropriate credentials to approve the Operator update.

. Click *Install*.

.Verification

. Navigate to *Ecosystem* -> *Installed Operators*.

.. Verify that *Zero Trust Workload Identity Manager* is listed with a *Status* of *Succeeded* in the `zero-trust-workload-identity-manager` namespace.

.. Verify that Zero Trust Workload Identity Manager controller manager deployment is ready and available by running the following command:
+
[source,terminal]
----
$ oc get deployment -l name=zero-trust-workload-identity-manager -n zero-trust-workload-identity-manager
----
+
.Example output
[source,terminal]
----
NAME                                                           READY UP-TO-DATE AVAILABLE AGE
zero-trust-workload-identity-manager-controller-manager-6c4djb 1/1   1          1         43m
----

. To check the Operator logs, run the following command:
+
[source,terminal]
----
$ oc logs -f deployment/zero-trust-workload-identity-manager -n zero-trust-workload-identity-manager
----
