Connect a Kubernetes cluster¶
Use the Kubernetes connection wizard to connect a Kubernetes cluster to Venafi Control Plane and view information about the cluster and related certificates.
Prerequisites¶
- Access to a Kubernetes cluster that you want to connect to Venafi Control Plane.
- The ability to install new components.
- The Kubernetes cluster must be able to connect to Venafi Control Plane.
- The Kubernetes cluster must be one of these supported Kubernetes flavors:
- AWS Elastic Kubernetes Service (EKS)
- Azure Kubernetes Service (AKS)
- Google Kubernetes Engine (GKE)
- Red Hat OpenShift
- Self-hosted Kubernetes distributions such as vanilla Kubernetes or Rancher
- The Kubernetes cluster must be able to connect to the API endpoints described in Venafi Kubernetes Agent network requirements.
To connect a Kubernetes cluster¶
- Sign in to Venafi Control Plane.
-
Click Installations > Kubernetes Clusters.
-
Click Connect.
- Under Prerequisites, click Continue.
- Under Install the Venafi CLI tool, select your operating system, copy the relevant command, and run it on your system.
- After you install the Venafi CLI tool, select Continue.
- Under Name the Cluster, enter a Name and Description.
-
In the text box, copy the CLI tool connection command and run it on your system.
The connection command does the following:
- Runs prerequisite checks to help ensure that cluster connection successfully completes.
- Creates a new service account on Venafi Control Plane.
- Adds a new cluster resource to Venafi Control Plane.
- Installs the Venafi Kubernetes Agent on the cluster.
- Ensures the Venafi Kubernetes Agent reports data to Venafi Control Plane.
-
When the command is complete, select The connection command has completed and click Continue. A message indicating a successful connection appears.
- Click Finish.
To disconnect a Kubernetes cluster¶
- Sign in to Venafi Control Plane.
- Click Installations > Kubernetes Clusters.
- Click the Name of the cluster to disconnect.
- In the panel that appears on the right, click Disconnect.