OSDOCS-15110 incorporated edits #95399

wgabor0427 · 2025-06-27T21:21:48Z

Version(s):
4.18+

Issue:
https://issues.redhat.com/browse/OSDOCS-15110

Link to docs preview:
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-configuration.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-features.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-install.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-monitoring.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-overview.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-uninstall.html

QE review:

QE has approved this change.

Additional information:

ocpdocs-previewbot · 2025-06-27T21:31:30Z

🤖 Thu Sep 04 12:21:02 - Prow CI generated the docs preview:

https://95399--ocpdocs-pr.netlify.app/
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-configuration.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-install.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-monitoring.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-overview.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-release-notes.html
https://95399--ocpdocs-pr.netlify.app/openshift-enterprise/latest/security/zero_trust_workload_identity_manager/zero-trust-manager-uninstall.html

snarayan-redhat

Left one suggestion. Rest look good.

snarayan-redhat · 2025-07-03T06:51:20Z

modules/zero-trust-manager-uninstall-resources.adoc

 .Procedure

-. Uninstall the operand objects by running each of the following commands:
+. Delete the `ZeroTrustWorkloadIdentityManager`` cluster by running the following command:


Suggested change

. Delete the `ZeroTrustWorkloadIdentityManager`` cluster by running the following command:

. Delete the `ZeroTrustWorkloadIdentityManager` cluster by running the following command:

snarayan-redhat · 2025-07-03T06:54:09Z

modules/zero-trust-manager-uninstall-resources.adoc

 .Procedure

-. Uninstall the operand objects by running each of the following commands:
+. Delete the `ZeroTrustWorkloadIdentityManager`` cluster by running the following command:


we can have a parent step Uninstall the operand objects... and then have each of these as sub steps.

same applies to all instances below

snarayan-redhat · 2025-07-03T12:38:48Z

modules/zero-trust-manager-uninstall-resources.adoc

 $ oc delete ZeroTrustWorkloadIdentityManager cluster
+----
+
+. Delete the `SpireOIDCDiscoveryProvider`` cluster by running the following command:


Suggested change

. Delete the `SpireOIDCDiscoveryProvider`` cluster by running the following command:

. Delete the `SpireOIDCDiscoveryProvider` cluster by running the following command:

snarayan-redhat · 2025-07-03T12:39:28Z

modules/zero-trust-manager-uninstall-resources.adoc

 ----

-. Delete the Custom Resource Definitions (CRDs) by running each of the following commands:
+. Delete the SPIRE server Custom Resource Definitions (CRD) by running the following command:


Suggested change

. Delete the SPIRE server Custom Resource Definitions (CRD) by running the following command:

. Delete the SPIRE server custom resource definitions (CRD) by running the following command:

wgabor0427 · 2025-07-03T21:03:01Z

/merge-review-needed

lunarwhite · 2025-07-04T02:24:44Z

modules/zero-trust-manager-enable-metrics-server.adoc

 = Configuring metrics collection for SPIRE server by using a Service Monitor

-The SPIRE Server operand exposes metrics by default on port `9402` at the `/metrics` endpoint. You can configure metrics collection for the SPIRE Server by creating a `ServiceMonitor` custom resource (CR) that enables Prometheus Operator to collect custom metrics.
+The SPIRE server operand exposes metrics by default on port `9402` at the `/metrics` endpoint. You can configure metrics collection for the SPIRE server by creating a `ServiceMonitor` custom resource (CR) that enables Prometheus Operator to collect custom metrics.


@snarayan-redhat Any specific reason to use server instead of Server? I think we should keep the consistency - use "server, agent" or "Server, Agent", both capitalized or both not.

@wgabor0427 I believe you concluded based on some discussion with an engineer, right?

@lunarwhite When I looked in the file, it was already lowercase, unless Shuba fixed it.

@wgabor0427 I think @lunarwhite is suggesting that both agent and server be kept similar. Currently it's Agent and server. Let's keep both lowercase if it wasn't a guideline-driven decision.

Sorry for the frequent changes in requirements. I think it's more appropriate to keep it capitalized Agent Server. This is because "SPIRE Server/Agent" often appears as a proper noun, just like it's used in the upstream documentation https://spiffe.io/docs/latest/spire-about/spire-concepts/

lunarwhite · 2025-07-04T02:30:46Z

modules/zero-trust-manager-uninstall-resources.adoc

 $ oc delete clusterrolebinding -l=app.kubernetes.io/managed-by=zero-trust-workload-identity-manager
+----
+
+.. Delete the cluster-wide cluster role by running the following command:


Suggested change

.. Delete the cluster-wide cluster role by running the following command:

.. Delete the cluster role by running the following command:

lunarwhite · 2025-07-04T02:31:04Z

modules/zero-trust-manager-uninstall-resources.adoc

 ----

-. Delete the cluster-wide role-based access control (RBAC) by running each of the following commands:
+.. Delete the cluster-wide role binding by running the following command:


Suggested change

.. Delete the cluster-wide role binding by running the following command:

.. Delete the cluster role binding by running the following command:

wgabor0427 · 2025-07-07T18:03:23Z

@lunarwhite @snarayan-redhat I've changed all instances of server and agent to lowercase. It can be peer-reviewed again

lunarwhite · 2025-07-08T01:35:51Z

@wgabor0427 Could you please address my legacy comment first before moving forward

For Uninstalling section, could you open a PR to change the "Procedure 1"'s commands order on enterprise-4.18 branch to be the same as main branch?

That's what https://issues.redhat.com/browse/OCPBUGS-57776 is reporting, the fix has been patched to 4.19, 4,20, main branches, but not 4.18 yet. Without fixing it first, this PR's auto cherrypick would still fail on 4.18 branch.

wgabor0427 · 2025-07-10T13:35:51Z

@lunarwhite Since https://issues.redhat.com/browse/OCPBUGS-57776 has been closed, can we move forward with this.

lunarwhite

Thanks for your work. Left some suggestions

lunarwhite · 2025-07-18T04:10:38Z

modules/zero-trust-manager-uninstall-resources.adoc

I think it may not be very user-friendly to have each command in separated blocks. Because for this operator, the uninstallation commands would be quite lengthy. If we keep them separated, users need to do a lot more copy-paste.

We already grouped these commands by resources type, so I think current middle ground is acceptable, for both UX and documentation conventions. What do you think?

@lunarwhite I'm not sure what to do about this. Let me check around and see if there is something similar somewhere

We can only have one command per block so we cannot group the commands.

lunarwhite · 2025-07-18T04:18:11Z

modules/zero-trust-manager-enable-metrics-server.adoc

 = Configuring metrics collection for SPIRE server by using a Service Monitor

-The SPIRE Server operand exposes metrics by default on port `9402` at the `/metrics` endpoint. You can configure metrics collection for the SPIRE Server by creating a `ServiceMonitor` custom resource (CR) that enables Prometheus Operator to collect custom metrics.
+The SPIRE server operand exposes metrics by default on port `9402` at the `/metrics` endpoint. You can configure metrics collection for the SPIRE server by creating a `ServiceMonitor` custom resource (CR) that enables Prometheus Operator to collect custom metrics.


Sorry for the frequent changes in requirements. I think it's more appropriate to keep it capitalized Agent Server. This is because "SPIRE Server/Agent" often appears as a proper noun, just like it's used in the upstream documentation https://spiffe.io/docs/latest/spire-about/spire-concepts/

lunarwhite · 2025-07-18T04:27:14Z

security/zero_trust_workload_identity_manager/zero-trust-manager-overview.adoc

+== Zero Trust Workload Identity Manager components and features
+
+// SPIFFE SPIRE components
+include::modules/zero-trust-manager-about-components.adoc[leveloffset=+1]
+
+//SPIRE features
+include::modules/zero-trust-manager-about-features.adoc[leveloffset=+1]
+
+== Zero Trust Workload Identity Manager Workflow


Suggested change

== Zero Trust Workload Identity Manager components and features

// SPIFFE SPIRE components

include::modules/zero-trust-manager-about-components.adoc[leveloffset=+1]

//SPIRE features

include::modules/zero-trust-manager-about-features.adoc[leveloffset=+1]

== Zero Trust Workload Identity Manager Workflow

// SPIFFE SPIRE components

include::modules/zero-trust-manager-about-components.adoc[leveloffset=+1]

//SPIRE features

include::modules/zero-trust-manager-about-features.adoc[leveloffset=+1]

It seems that we don't need "==" headline in this file

I need to have "==" in the title or I get an error that I cannot have level 0 sections

lunarwhite

Thanks for your patience. Left minor suggestions otherwise I think it's in good shape now!

lunarwhite · 2025-08-01T01:42:55Z

modules/zero-trust-manager-about-spire.adoc



-A SPIRE server is responsible for managing and issuing SPIFFE identities within a trust domain. It stores registration entries (selectors that determine under what conditions a SPIFFE ID should be issued) and signing keys. The SPIRE server works in conjunction with the SPIRE agent to perform node attestion via node plugins. For more information, see link:https://spiffe.io/docs/latest/spire-about/spire-concepts/#all-about-the-server[About the SPIRE server].
+A SPIRE Server is responsible for managing and issuing SPIFFE identities within a trust domain. It stores registration entries (selectors that determine under what conditions a SPIFFE ID should be issued) and signing keys. The SPIRE Server works in conjunction with the SPIRE Agent to perform node attestion via node plugins. For more information, see link:https://spiffe.io/docs/latest/spire-about/spire-concepts/#all-about-the-server[About the SPIRE server].


Suggested change

A SPIRE Server is responsible for managing and issuing SPIFFE identities within a trust domain. It stores registration entries (selectors that determine under what conditions a SPIFFE ID should be issued) and signing keys. The SPIRE Server works in conjunction with the SPIRE Agent to perform node attestion via node plugins. For more information, see link:https://spiffe.io/docs/latest/spire-about/spire-concepts/#all-about-the-server[About the SPIRE server].

A SPIRE Server is responsible for managing and issuing SPIFFE identities within a trust domain. It stores registration entries (selectors that determine under what conditions a SPIFFE ID should be issued) and signing keys. The SPIRE Server works in conjunction with the SPIRE Agent to perform node attestion via node plugins. For more information, see link:https://spiffe.io/docs/latest/spire-about/spire-concepts/#all-about-the-server[About the SPIRE Server].

lunarwhite · 2025-08-01T01:43:26Z

modules/zero-trust-manager-about-components.adoc

 [id="spire-controller-manager_{context}"]
 == SPIRE Controller Manager

 The SPIRE Controller Manager uses custom resource definitions (CRDs) to facilitate the registration of workloads. To facilitate workload registration, the SPIRE Controller Manager registers controllers against pods and CRDs. When changes are detected on these resources, a workload reconciliation process is triggered. This process determines which SPIRE entries should exist based on the existing pods and CRDs. The reconciliation process creates, updates, and deletes entries on the SPIRE server as appropriate.


Suggested change

The SPIRE Controller Manager uses custom resource definitions (CRDs) to facilitate the registration of workloads. To facilitate workload registration, the SPIRE Controller Manager registers controllers against pods and CRDs. When changes are detected on these resources, a workload reconciliation process is triggered. This process determines which SPIRE entries should exist based on the existing pods and CRDs. The reconciliation process creates, updates, and deletes entries on the SPIRE server as appropriate.

The SPIRE Controller Manager uses custom resource definitions (CRDs) to facilitate the registration of workloads. To facilitate workload registration, the SPIRE Controller Manager registers controllers against pods and CRDs. When changes are detected on these resources, a workload reconciliation process is triggered. This process determines which SPIRE entries should exist based on the existing pods and CRDs. The reconciliation process creates, updates, and deletes entries on the SPIRE Server as appropriate.

lunarwhite · 2025-08-01T01:49:25Z

security/zero_trust_workload_identity_manager/zero-trust-manager-overview.adoc

 //Attestation
 include::modules/zero-trust-manager-about-attestation.adoc[leveloffset=+1]

+== Zero Trust Workload Identity Manager components and features


Suggested change

== Zero Trust Workload Identity Manager components and features

I need to have "==" in the title or I get an error that I cannot have level 0 sections

@wgabor0427 these two comments are to remove the headings; do you want to update before merge?

lunarwhite · 2025-08-01T01:49:34Z

security/zero_trust_workload_identity_manager/zero-trust-manager-overview.adoc

+//SPIRE features
+include::modules/zero-trust-manager-about-features.adoc[leveloffset=+1]
+
+== Zero Trust Workload Identity Manager workflow


Suggested change

== Zero Trust Workload Identity Manager workflow

lunarwhite · 2025-08-01T01:57:56Z

modules/zero-trust-manager-uninstall-resources.adoc

 .Procedure

-. Uninstall the operand objects by running each of the following commands:
+. Uninstall the operands by running each of the following commands:


This line of change is still helpful. Apart from that, could we keep them in this file as-is for now? As I said https://github.com/openshift/openshift-docs/pull/95399/files#r2214848484, maybe separate each single command would not be a user-friendly idea.

cc @anirudhAgniRedhat @ldhananj in case you have any suggestions

We can only have one command per step. We cannot combine commands.

lunarwhite · 2025-08-29T07:57:05Z

Hi @wgabor0427, any updates on this PR? I think we could proceed with merge once my last group of comments are addressed. This can go as part of 0.2.0 release

lunarwhite · 2025-09-03T03:01:42Z

/lgtm

lunarwhite · 2025-09-03T03:02:35Z

/label peer-review-needed

openshift-ci · 2025-09-03T03:02:38Z

@lunarwhite: The label(s) /label peer-review-needed cannot be applied. These labels are supported: acknowledge-critical-fixes-only, platform/aws, platform/azure, platform/baremetal, platform/google, platform/libvirt, platform/openstack, ga, tide/merge-method-merge, tide/merge-method-rebase, tide/merge-method-squash, px-approved, docs-approved, qe-approved, ux-approved, no-qe, downstream-change-needed, rebase/manual, cluster-config-api-changed, run-integration-tests, approved, backport-risk-assessed, bugzilla/valid-bug, cherry-pick-approved, cloud-experts, cnv, dev-tools, distributed-tracing, ims, jira/valid-bug, merge-review-in-progress, merge-review-needed, mtc, multi-arch, oadp, ok-to-test, rhacs, rhv, sd-docs, serverless, service-mesh, sme-review-done, sme-review-needed, stability-fix-approved, staff-eng-approved, telco. Is this label configured under labels -> additional_labels or labels -> restricted_labels in plugin.yaml?

In response to this:

/label peer-review-needed

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

lunarwhite · 2025-09-03T03:05:10Z

/label merge-review-needed

wgabor0427 · 2025-09-03T16:24:00Z

/label merge-review-needed

wgabor0427 · 2025-09-03T16:24:25Z

/label merge-review-needed

openshift-ci · 2025-09-04T12:12:52Z

New changes are detected. LGTM label has been removed.

openshift-ci · 2025-09-04T12:23:00Z

@wgabor0427: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

ShaunaDiaz · 2025-09-04T13:00:06Z

/cherrypick enterprise-4.20

ShaunaDiaz · 2025-09-04T13:00:13Z

/cherrypick enterprise-4.19

ShaunaDiaz · 2025-09-04T13:00:19Z

/cherrypick enterprise-4.18

openshift-cherrypick-robot · 2025-09-04T13:00:58Z

@ShaunaDiaz: new pull request created: #98501

In response to this:

/cherrypick enterprise-4.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-cherrypick-robot · 2025-09-04T13:01:03Z

@ShaunaDiaz: new pull request created: #98502

In response to this:

/cherrypick enterprise-4.19

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-cherrypick-robot · 2025-09-04T13:01:05Z

@ShaunaDiaz: #95399 failed to apply on top of branch "enterprise-4.18":

Applying: OSDOCS_15110 deleted headings in assembly
.git/rebase-apply/patch:186: new blank line at EOF.
+
warning: 1 line adds whitespace errors.
Using index info to reconstruct a base tree...
M	_topic_maps/_topic_map.yml
M	modules/zero-trust-manager-about-agent.adoc
M	modules/zero-trust-manager-about-attestation.adoc
M	modules/zero-trust-manager-about-components.adoc
M	modules/zero-trust-manager-about-spire.adoc
M	modules/zero-trust-manager-how-it-works.adoc
M	modules/zero-trust-manager-install-cli.adoc
M	modules/zero-trust-manager-install-console.adoc
M	modules/zero-trust-manager-oidc-config.adoc
M	modules/zero-trust-manager-spiffe-csidriver-config.adoc
M	modules/zero-trust-manager-spire-agent-config.adoc
M	modules/zero-trust-manager-spire-server-config.adoc
M	modules/zero-trust-manager-uninstall-console.adoc
M	modules/zero-trust-manager-uninstall-resources.adoc
M	security/zero_trust_workload_identity_manager/zero-trust-manager-configuration.adoc
M	security/zero_trust_workload_identity_manager/zero-trust-manager-overview.adoc
M	security/zero_trust_workload_identity_manager/zero-trust-manager-release-notes.adoc
Falling back to patching base and 3-way merge...
Auto-merging security/zero_trust_workload_identity_manager/zero-trust-manager-release-notes.adoc
Auto-merging security/zero_trust_workload_identity_manager/zero-trust-manager-overview.adoc
Auto-merging security/zero_trust_workload_identity_manager/zero-trust-manager-configuration.adoc
Auto-merging modules/zero-trust-manager-uninstall-resources.adoc
Auto-merging modules/zero-trust-manager-uninstall-console.adoc
CONFLICT (content): Merge conflict in modules/zero-trust-manager-uninstall-console.adoc
Auto-merging modules/zero-trust-manager-spire-server-config.adoc
Auto-merging modules/zero-trust-manager-spire-agent-config.adoc
Auto-merging modules/zero-trust-manager-spiffe-csidriver-config.adoc
Auto-merging modules/zero-trust-manager-oidc-config.adoc
Auto-merging modules/zero-trust-manager-install-console.adoc
CONFLICT (content): Merge conflict in modules/zero-trust-manager-install-console.adoc
Auto-merging modules/zero-trust-manager-install-cli.adoc
Auto-merging modules/zero-trust-manager-how-it-works.adoc
CONFLICT (content): Merge conflict in modules/zero-trust-manager-how-it-works.adoc
Auto-merging modules/zero-trust-manager-about-spire.adoc
CONFLICT (content): Merge conflict in modules/zero-trust-manager-about-spire.adoc
Auto-merging modules/zero-trust-manager-about-components.adoc
CONFLICT (content): Merge conflict in modules/zero-trust-manager-about-components.adoc
Auto-merging modules/zero-trust-manager-about-attestation.adoc
CONFLICT (content): Merge conflict in modules/zero-trust-manager-about-attestation.adoc
Auto-merging modules/zero-trust-manager-about-agent.adoc
CONFLICT (content): Merge conflict in modules/zero-trust-manager-about-agent.adoc
Auto-merging _topic_maps/_topic_map.yml
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config advice.mergeConflict false"
Patch failed at 0001 OSDOCS_15110 deleted headings in assembly

In response to this:

/cherrypick enterprise-4.18

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

wgabor0427 changed the title ~~OSDOCS-15110 incorporated edits~~ [WIP] OSDOCS-15110 incorporated edits Jun 27, 2025

openshift-ci bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. labels Jun 27, 2025

wgabor0427 force-pushed the OSDOCS-15110 branch 3 times, most recently from 454aa8f to 7b227f8 Compare July 2, 2025 12:58

wgabor0427 changed the title ~~[WIP] OSDOCS-15110 incorporated edits~~ OSDOCS-15110 incorporated edits Jul 2, 2025

openshift-ci bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jul 2, 2025

snarayan-redhat reviewed Jul 3, 2025

View reviewed changes

snarayan-redhat added the peer-review-done Signifies that the peer review team has reviewed this PR label Jul 3, 2025

snarayan-redhat reviewed Jul 3, 2025

View reviewed changes

wgabor0427 force-pushed the OSDOCS-15110 branch 3 times, most recently from f5372fe to 89c5933 Compare July 3, 2025 20:20

lunarwhite reviewed Jul 4, 2025

View reviewed changes

wgabor0427 force-pushed the OSDOCS-15110 branch 2 times, most recently from bf16470 to 046e2ee Compare July 7, 2025 17:22

lunarwhite reviewed Jul 18, 2025

View reviewed changes

wgabor0427 force-pushed the OSDOCS-15110 branch 3 times, most recently from 2ebd88e to 35db145 Compare July 21, 2025 14:51

lunarwhite reviewed Aug 1, 2025

View reviewed changes

wgabor0427 force-pushed the OSDOCS-15110 branch from 09b6582 to bb1d2da Compare September 2, 2025 20:11

openshift-ci bot assigned lunarwhite Sep 3, 2025

openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Sep 3, 2025

openshift-ci bot added the merge-review-needed Signifies that the merge review team needs to review this PR label Sep 3, 2025

ShaunaDiaz added branch/enterprise-4.18 branch/enterprise-4.19 branch/enterprise-4.20 ok-to-merge and removed merge-review-needed Signifies that the merge review team needs to review this PR labels Sep 4, 2025

ShaunaDiaz added this to the Continuous Release milestone Sep 4, 2025

OSDOCS_15110 deleted headings in assembly

c43ef63

wgabor0427 force-pushed the OSDOCS-15110 branch from bb1d2da to c43ef63 Compare September 4, 2025 12:11

openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Sep 4, 2025

ShaunaDiaz merged commit d1e92a1 into openshift:main Sep 4, 2025
2 checks passed

openshift-cherrypick-robot mentioned this pull request Sep 4, 2025

[enterprise-4.20] OSDOCS-15110 incorporated edits #98501

Merged

openshift-cherrypick-robot mentioned this pull request Sep 4, 2025

[enterprise-4.19] OSDOCS-15110 incorporated edits #98502

Merged

	. Delete the `ZeroTrustWorkloadIdentityManager`` cluster by running the following command:
	. Delete the `ZeroTrustWorkloadIdentityManager` cluster by running the following command:

	. Delete the `SpireOIDCDiscoveryProvider`` cluster by running the following command:
	. Delete the `SpireOIDCDiscoveryProvider` cluster by running the following command:

	. Delete the SPIRE server Custom Resource Definitions (CRD) by running the following command:
	. Delete the SPIRE server custom resource definitions (CRD) by running the following command:

	.. Delete the cluster-wide cluster role by running the following command:
	.. Delete the cluster role by running the following command:

	.. Delete the cluster-wide role binding by running the following command:
	.. Delete the cluster role binding by running the following command:



		A SPIRE server is responsible for managing and issuing SPIFFE identities within a trust domain. It stores registration entries (selectors that determine under what conditions a SPIFFE ID should be issued) and signing keys. The SPIRE server works in conjunction with the SPIRE agent to perform node attestion via node plugins. For more information, see link:https://spiffe.io/docs/latest/spire-about/spire-concepts/#all-about-the-server[About the SPIRE server].
		A SPIRE Server is responsible for managing and issuing SPIFFE identities within a trust domain. It stores registration entries (selectors that determine under what conditions a SPIFFE ID should be issued) and signing keys. The SPIRE Server works in conjunction with the SPIRE Agent to perform node attestion via node plugins. For more information, see link:https://spiffe.io/docs/latest/spire-about/spire-concepts/#all-about-the-server[About the SPIRE server].

OSDOCS-15110 incorporated edits #95399

OSDOCS-15110 incorporated edits #95399

Uh oh!

Conversation

wgabor0427 commented Jun 27, 2025 • edited by ShaunaDiaz Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ocpdocs-previewbot commented Jun 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

snarayan-redhat left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

wgabor0427 commented Jul 3, 2025

Uh oh!

lunarwhite Jul 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

wgabor0427 commented Jul 7, 2025

Uh oh!

lunarwhite commented Jul 8, 2025

Uh oh!

wgabor0427 commented Jul 10, 2025

Uh oh!

lunarwhite left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

lunarwhite left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

wgabor0427 commented Jun 27, 2025 •

edited by ShaunaDiaz

Loading

ocpdocs-previewbot commented Jun 27, 2025 •

edited

Loading

lunarwhite Jul 4, 2025 •

edited

Loading