Skip to content

Installing Connection for Next-Gen Trust Security using Helm

In this tutorial, you'll use Helm to install Connection for Next-Gen Trust Security, which adds the VenafiConnection CRD to your cluster.

Connection resource is installed automatically by the Enterprise Issuer and Distributed Issuer Helm charts. You only need to install it separately if you disabled its creation in those charts, or if you are not using either component.

Prerequisites

To complete these steps, you must have:

  • A Kubernetes cluster with permissions to create namespaces and custom resource definitions.
  • helm and kubectl on your local machine.
  • Confirmation that Connection resource is not already installed. To check, run kubectl get crd venaficonnections.jetstack.io. If VenafiConnection already exists, skip these steps.

Install Connection resource

  1. Install the Connection resource Helm chart. The --version flag is required.

    helm upgrade venafi-connection oci://registry.ngts.paloaltonetworks.com/charts/venafi-connection \
  --install \
  --create-namespace \
  --namespace venafi \
  --version v0.6.0

  2. Confirm that VenafiConnection exists in your cluster:

    kubectl get crd venaficonnections.jetstack.io

    A successful install produces output similar to the following:

    NAME                              CREATED AT
venaficonnections.jetstack.io     2026-05-02T14:30:00Z