Installing Venafi Connection using the Venafi Control Plane Operator¶

Venafi Control Plane Operator for Red Hat OpenShift is designed to assist customers in installing, maintaining, and upgrading Venafi cluster components.

Follow the steps below to deploy the default version of cert-manager and Venafi Connection using the Venafi Control Plane Operator.

Prerequisites¶

To install Venafi Kubernetes Connection using the Venafi Control Plane Operator, you'll need to ensure you have the following:

Access to the Venafi OCI registry (or your own mirror).
Venafi Control Plane Operator already installed on your system.
Red Hat OpenShift CLI tool oc installed on your system.

Step 1: Configure access to the Venafi OCI registry¶

Important

Follow the instructions in Configuring access to the Venafi OCI registry to enable access to the artifacts required for this component (cert-manager Components is the default scope for cert-manager). Use venafi as the namespace.

For the example below, it's assumed that you created the following Kubernetes Secret:

namespace: venafi
name: venafi-image-pull-secret

Step 2: Create and apply the manifest¶

The default version of Venafi Connection is installed automatically when you install Approver Policy Enterprise or Venafi Enhanced Issuer, and generally, you do NOT need to install it independently of one or both of these components. However, to install Venafi Connection on its own, follow the steps below:

Create a manifest venafi-components.yaml. You can use one of the samples below:

US RegionEU RegionOwn Registry

venafi-components.yaml

apiVersion: installer.venafi.com/v1alpha1
kind: VenafiInstall
metadata:
  name: venafi-components
spec:
  globals:
    namespace: venafi
    vcpRegion: US
  venafiConnection:
    install: true

venafi-components.yaml

apiVersion: installer.venafi.com/v1alpha1
kind: VenafiInstall
metadata:
  name: venafi-components
spec:
  globals:
    namespace: venafi
    vcpRegion: EU
  venafiConnection:
    install: true

venafi-components.yaml

apiVersion: installer.venafi.com/v1alpha1
kind: VenafiInstall
metadata:
  name: venafi-components
spec:
  globals:
    customChartRepository: oci://myregistry.example.com/charts
    customImageRegistry: myregistry.example.com
    namespace: venafi
  venafiConnection:
    install: true

Note

Set the spec.certManager.skip parameter to true and the spec.certManager.install parameter to false if you have already installed and configured cert-manager.

Tip

For a complete list of Venafi Control Plane Operator configuration parameters, refer to the Venafi Control Plane Operator API reference.

Apply the manifest by running the following command:
```
oc apply -f venafi-components.yaml
```

Step 3: Verify the installation¶

Verify whether Venafi Connection is successfully installed by running the following command:
```
oc get venafiinstall
```
Sample output:
```
NAME                STATUS   LAST SYNC
venafi-components   Synced   65s
```