Skip to content

Control Plane Documentation

Overview of Kubernetes integration with TLS Protect Cloud

Initializing search

Home
What's New
All Products
Developers
Troubleshooting

Control Plane Documentation

Home
What's New
What's New
- Product Capabilities
- Product Enhancements
All Products
All Products
- TLS Protect Cloud
  TLS Protect Cloud
  - Getting started
    
    Getting started
    
    Signing in
  - Discover certificates
    
    Discover certificates
    
    Overview: Discovery Services
    
    Discover certificates on private networks
    
    Discover certificates on private networks
    
    Create a Basic Discovery service
    
    Create an Enhanced Discovery service
    
    Create an Enhanced Discovery service
    
    Run discovery immediately
    
    Connecting a Kubernetes cluster
    
    Viewing Kubernetes cluster information
    
    Discover certificates on public networks
    
    Discover certificates on machines
    
    Discover certificates on cloud keystores
    Discover certificates on cloud keystores
    
    Discover certificates on Azure Key Vault
    
    Discover certificates on AWS
    
    Discover certificates on Google Cloud Platform
    
    Discover TLS server endpoints
    
    Other discovery methods
  - Integrations
    
    Integrations
    
    Cloud Providers
    Cloud Providers
    
    Configure AWS Connection
    
    Configure Azure Key Vault Connection
    
    Configure Google Cloud Connection
    
    Configure Google Cloud Connection
    
    Workload Identity Federation authentication
    
    Venafi Generated Key authentication
    
    Venafi user permissions for GCP
    
    Credential Managers
    Credential Managers
    
    Configure CyberArk Connection
  - Issue certificates
    
    Issue certificates
    
    Overview
    
    Certificate authorities
    
    Certificate authorities
    
    Using the Built-in CA
    
    Using DigiCert
    
    Refresh DigiCert configuration
    
    Using Entrust
    
    Using GlobalSign Atlas
    
    Using GlobalSign MSSL
    
    Using TLS Protect Datacenter
    
    Using Zero Touch PKI
    
    Using ACMEv2
    
    Let's Encrypt
    
    Microsoft AD CS
    
    Configuring AD CS permissions
    
    Setting up Microsoft AD CS for issuing and importing certificates
    
    CA Connector Framework CAs
    
    CA Connector Framework CAs
    
    Create a CA connector
    
    Create an EJBCA connector
    
    Create an EJBCA connector
    
    EJBCA's client auth and root certificates
    
    Create a Sectigo connector
    
    Create a Sectigo connector
    
    About Sectigo issuance terms
    
    Editing custom CA connectors
    
    Certificate Issuing Templates
    
    Certificate Issuing Templates
    
    Creating Issuing Templates
    
    Advanced rule settings using regular expressions
    
    Adding recommended settings to an issuing template
    
    Edit or delete a template
    
    Applications
    
    Applications
    
    Create an application
    
    Working with Applications
    
    Assign an Issuing Template to an application
    
    Requesting certificates
    
    Requesting certificates
    
    About certificate approval workflows
    
    Certificate approval rules
    
    Creating an approval workflow
    
    Approving or rejecting certificate requests
    
    Reference: DNS SANS injection
    
    Automated Secure Keypair
    
    Automated Secure Keypair
    
    Using Automated Secure Keypair to request certificates
  - Installations
    
    Installations
    
    Cloud Keystores
    Cloud Keystores
    
    Add a Cloud Keystore to AWS
    
    Add a Cloud Keystore to Azure Key Vault
    
    Add a Cloud Keystore to Google Cloud Platform
    
    Provision certificates to Cloud Keystores
    
    Machines
    Machines
    
    Creating a machine
    
    Creating a machine
    
    F5 BIG IP LTM
    
    Microsoft IIS
    
    Common KeyStore
    
    Citrix ADC
    
    Imperva WAF
    
    VMware NSX (AVI)
    
    A10 Thunder ADC
    
    Cloudflare
    
    Provision certificates
    
    Provision certificates
    
    F5 BIG IP LTM
    
    Microsoft IIS
    
    Common KeyStore
    
    Citrix ADC
    
    Imperva WAF
    
    VMware NSX (AVI)
    
    A10 Thunder ADC
    
    Cloudflare
  - Manage certificates
    Manage certificates
    
    About the Dashboard
    
    About the Next Gen Certificate Inventory
    
    Managing certificate lifecycle settings
    
    Managing approval workflows
    
    Managing approval workflows
    
    Workflow approval rules
    
    Issuance workflows
    
    Issuance workflows
    
    Create issuance rules
    
    Revocation workflows
    
    Revocation workflows
    
    Create revocation rules
    
    Take action on a request
    
    Renewing certificates
    
    Renewing certificates
    
    Manually renewing certificates
    
    About automating certificate renewal and provisioning
    
    Set global auto-renewal settings
    
    Enabling auto-renewal and provisioning
    
    Starting auto-renewal manually
    
    Tagging certificates
    
    Tagging certificates
    
    Adding and deleting tags
    
    Tagging event logs
    
    Tagging features of the certificate inventory
    
    Downloading certificates
    
    Retiring certificates
    
    Revoking certificates overview
    
    Revoking certificates overview
    
    Revoking certificates
    
    About revocation workflows
    
    Approval Rules list
    
    Certificate revocation approval workflows
    
    Finding certificates
    
    Importing EJBCA certificates
    
    About certificate validations
    
    About certificate validations
    
    Viewing validation status
    
    Running a validation manually
    
    Discovering TLS server endpoints
  - Manage VSatellites
    Manage VSatellites
    
    Overview
    
    Get started
    
    Security
    
    Security
    
    Hardening VSatellites
    
    Installation
    
    Installation
    
    System requirements
    
    System requirements
    
    Deploying on RHEL, Oracle, and Rocky Linux
    
    Proxy server considerations
    
    Network connections (US)
    
    Network connections (EMEA)
    
    Allowlisting domains rather than IP addresses
    
    Trust Venafi public key
    
    Managing existing VSatellites
    
    Managing existing VSatellites
    
    Monitoring VSatellites
    
    Renaming a VSatellite
    
    Deleting one or more VSatellites
    
    Deleting one or more VSatellites
    
    About deleting the last available VSatellite
    
    Backup and restore VSatellite
    
    Backup and restore VSatellite
    
    What is the Data Encryption Key (DEK)?
    
    Backing up your data encryption key (DEK)
    
    Restoring your data encryption key (DEK)
    
    Upgrading K3s used by VSatellites
    
    Reference: vsatctl tool
    Reference: vsatctl tool
    
    Release notes
    
    vsatctl
    
    preflight
    
    install
    
    upgrade
    
    diagnostics
    
    uninstall
    
    export
    
    import
    
    update
    
    restart
    
    support-bundle
    
    version
    
    update proxy-config
  - Protecting machine identities
    
    Protecting machine identities
    
    Overview
    
    Request, download, and install certificates
    
    View failed or pending CSRs
    
    Working with Trusted CA Certificates
    
    Assign or reassign a certificate to an application
    
    Save a certificate search
    
    View TLS server endpoints
    
    Set up certificate expiration notifications
    
    Set up certificate expiration reports
    
    Set up email digests
  - Administration guide
    
    Administration guide
    
    Overview
    
    Overview
    
    System requirements
    
    Allowing Venafi's NAT gateways
    
    Viewing total certificate instances for your account
    
    Managing user accounts
    
    Managing user accounts
    
    About user roles
    
    Email sign-in accounts
    
    Email sign-in accounts
    
    Setting email sign-in passwords
    
    Signing in to Control Plane
    
    Enabling or disabling a user's email sign-in
    
    Enabling or disabling a specific user account
    
    Single sign-on
    
    Single sign-on
    
    Overview
    
    Configuring supported SSO integrations
    
    Configuring Auth0 SSO integration
    
    Configuring Azure AD SSO integration
    
    Configuring Okta integration
    
    Configuring PingOne integration
    
    Configuring Microsoft AD FS integration
    
    Using service accounts
    
    Using service accounts
    
    Overview
    
    Create Firefly or Kubernetes service accounts
    
    Create Venafi Registry service accounts
    
    Create TLS Protect Datacenter service accounts
    
    Overview: Custom API Integration service accounts
    
    Overview: Custom API Integration service accounts
    
    Create a Custom API Integration service account
    
    What is workload identity federation?
    
    Reference: Supported JWT signing algorithms
    
    Reference: Scopes
    
    Creating service accounts dynamically
    
    Enabling or disabling accounts
    
    Editing an account
    
    Deleting an account
    
    Renewing an account's validity period
    
    Event logging
    
    Event logging
    
    Overview
    
    Finding event log data through filtering
    
    Export event logs as an API endpoint
    
    Forwarding logged events to another service
    
    About teams
    
    About teams
    
    Creating teams
    
    Creating teams
    
    Reference: Team membership rule operators
    
    Invite team members
    
    Editing or deleting teams
- Firefly
  Firefly
  - Getting started
    
    Getting started
    
    CA Accounts
    
    Sub CA Providers
    
    Policies
    
    Teams
    
    Service Accounts
    
    Configurations
    
    Configurations
    
    Reference: Aliases for custom claims
    
    HSMs and Firefly
    
    HSMs and Firefly
    
    Setting up HSM with Firefly
    
    About HSM cleanup
  - Deploy a Firefly
    
    Deploy a Firefly
    
    Releases
    
    On Kubernetes using Helm
    
    On OpenShift using the Venafi Control Plane Operator
    
    Using Docker
    
    Network Requirements
    
    Troubleshooting
    
    Metrics
  - Issuer Certificates
- Venafi CLI tool
  Venafi CLI tool
- Venafi Kubernetes components
  Venafi Kubernetes components
Developers
Developers
Troubleshooting

Overview of Kubernetes integration with TLS Protect Cloud¶

Use the TLS Protect Cloud Kubernetes cert-manager plug in to deploy certificates to your containers.

Copyright © 2021-2024 Venafi

Made with Material for MkDocs

Quick Links

Get started with a TLS Protect Cloud free trial

TLS Protect Cloud login

TLS Protect Cloud 3rd party dependencies

Company

Cookie consent

We use cookies to recognize your repeated visits and preferences, as well as to measure the effectiveness of our documentation and whether users find what they're searching for. With your consent, you're helping us to make our documentation better.

Google Analytics

Manage settings