CLI tool for CyberArk Certificate Manager releases¶

Learn about current and past releases of the CLI tool for CyberArk Certificate Manager (formerly known as the Venafi CLI tool).

Latest release¶

The latest stable version of CLI tool for CyberArk Certificate Manager is v1.23.0.

Select the file appropriate for your platform below:

Verifying CLI tool for CyberArk Certificate Manager archives after download¶

Once you have downloaded the CLI tool for CyberArk Certificate Manager archive and its corresponding signature file, you can verify by executing a command similar to the following:

gpg --verify venctl-linux-amd64.zip.sig venctl-linux-amd64.zip

For a valid signature, the output is similar to the example below:

gpg: Signature made Wed Dec  6 11:09:05 2023 UTC
gpg:                using RSA key BA2F4B4442D945F0A2810A686B99EC1CEEE83892
gpg:                issuer "gpg-vaas@venafi.com"
gpg: Good signature from "Venafi, Inc. <gpg-vaas@venafi.com>" [ultimate]

Release 1.23.0¶

CLI tool for CyberArk Certificate Manager 1.23.0 was released on 4 November, 2025.

Key features¶

• The version of Go used was updated to v.1.25.3.

• The following is a full list of the component versions installable by default in release 1.23.0.

  Component	Default version for this release
  Approver Policy	v0.22.2
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.22.0
  AWS Private CA Issuer	v1.7.0
  cert-manager	v1.19.1
  CSI Driver	v0.11.1
  CSI Driver for SPIFFE	v0.10.1
  CyberArk Workload Identity Manager	v1.9.3
  Istio CSR	v0.14.3
  OpenShift Routes for cert-manager	v0.8.3
  Trust Manager	v0.20.2
  Connection for CyberArk Certificate Manager	v0.5.1
  Enterprise Issuer for CyberArk Certificate Manager	v0.17.2
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.7.1.

Release 1.22.0¶

CLI tool for CyberArk Certificate Manager 1.22.0 was released on 6 October, 2025.

Key features¶

• New API for JWT authentication

  This release adds support for the new JWT_STANDARD_CLAIMS clientAuthentication type released in CyberArk Workload Identity Manager v1.9.0, and also adds migration logic to migrate the Policies field.

• JSON Unmarshal error fix

  Release v1.22.0 fixes a JSON Unmarshal error affecting the venctl installation cluster connect and venctl components kubernetes apply commands. The fix separates any warnings and extracts only the JSON array before unmarshalling.

• Error handling for duplicated names in cluster

  This release provides correct error handling for duplicated names in a cluster. This affected the venctl installation cluster connect command. When a duplicated name in cluster connection workflow is detected the CLI now returns a comprehensive error.

• Go updates

  The Go toolchain was upgraded to v1.24.5 along with synced ancillary build tools. Go dependencies were also updated.

• venctl installation cluster connect command update

  The venctl installation cluster connect command no longer installs Connection for CyberArk Certificate Manager by default.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.22.0.

  Component	Default version for this release
  Approver Policy	v0.21.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.21.0
  AWS Private CA Issuer	v1.7.0
  cert-manager	v1.18.2
  CSI Driver	v0.11.0
  CSI Driver for SPIFFE	v0.10.0
  CyberArk Workload Identity Manager	v1.9.1
  Istio CSR	v0.14.2
  OpenShift Routes for cert-manager	v0.8.2
  Trust Manager	v0.19.0
  Connection for CyberArk Certificate Manager	v0.5.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.17.1
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.6.0.

Release 1.21.0¶

CLI tool for CyberArk Certificate Manager 1.21.0 was released on 9 July, 2025.

Key features¶

• Workload Identity Manager configuration fixes

  This release contains fixes for issues with the advanced settings object generated in the Workload Identity Manager configuration file.

• Go dependency updates

  Several Go dependencies were updated in this release, including github.com/go-viper/mapstructure/v2 which was updated to address GHSA-fv92-fjc5-jj9h.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.21.0.

  Component	Default version for this release
  Approver Policy	v0.21.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.21.0
  AWS Private CA Issuer	v1.6.0
  cert-manager	v1.18.2
  CSI Driver	v0.10.4
  CSI Driver for SPIFFE	v0.10.0
  CyberArk Workload Identity Manager	v1.8.1
  Istio CSR	v0.14.2
  OpenShift Routes for cert-manager	v0.8.0
  Trust Manager	v0.18.0
  Connection for CyberArk Certificate Manager	v0.4.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.16.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.6.0.

Release 1.20.0¶

CLI tool for CyberArk Certificate Manager 1.20.0 was released on 16 June, 2025.

Key features¶

• UK and AU registry support updates

  Updates were made in this release for upcoming new CyberArk OCI registries for United Kingdom (UK) and Australia (AU) CyberArk Certificate Manager - SaaS regions.

• Error reporting improvements

  This release includes improved error messages and installation prompts when either Helm or the helm-diff plugin are missing if using commands which require them.

• Go updated

  The version of Go used was updated to v1.24.4 in this release.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.20.0.

  Component	Default version for this release
  Approver Policy	v0.20.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.20.0
  AWS Private CA Issuer	v1.5.0
  cert-manager	v1.17.2
  CSI Driver	v0.10.3
  CSI Driver for SPIFFE	v0.9.1
  CyberArk Workload Identity Manager	v1.7.0
  Istio CSR	v0.14.0
  OpenShift Routes for cert-manager	v0.7.0
  Trust Manager	v0.17.1
  Connection for CyberArk Certificate Manager	v0.4.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.15.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.5.0.

Release 1.19.0¶

CLI tool for CyberArk Certificate Manager 1.19.0 was released on 28 May, 2025.

Key features¶

• Canada and Singapore registry and CyberArk Certificate Manager - SaaS support

  This release introduces support for the upcoming Canada and Singapore private OCI registries by adding ca and sgoptions for the --region flag for the venctl components kubernetes manifest generate and venctl components kubernetes apply commands. In addition, when the upcoming connection features for Canada and Singapore become available, support for connection to Certificate Manager - SaaS in Canada and Singapore for commands such as venctl installation cluster connect and venctl iam service-accounts firefly create. For more information, see the CLI tool for CyberArk Certificate Manager reference guide.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.19.0.

  Component	Default version for this release
  Approver Policy	v0.19.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.20.0
  AWS Private CA Issuer	v1.4.1
  cert-manager	v1.17.1
  CSI Driver	v0.10.2
  CSI Driver for SPIFFE	v0.8.2
  CyberArk Workload Identity Manager	v1.6.0
  Istio CSR	v0.14.0
  OpenShift Routes for cert-manager	v0.7.0
  Trust Manager	v0.16.0
  Connection for CyberArk Certificate Manager	v0.4.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.15.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.4.1

Release 1.18.1¶

CLI tool for CyberArk Certificate Manager 1.18.1 was released on April 17, 2025.

Key features¶

• Release 1.18.1 includes improved validation for the Workload Identity Manager security configuration. Several bugs were fixed, and the error messages improved.
• More commands now support the --insecure-skip-tls-verify flag. Note that this flag eliminates the server certificate validity check, which makes the HTTPS connection insecure. For more information, see the Reference: venctl commands page.
• This release also includes a new venafi configuration firefly delete command for deleting Workload Identity Manager security configurations from Certificate Manager - Self-Hosted. For more information, see the Reference: venctl commands page.

• CyberArk Certificate Manager Operator for Red Hat OpenShift now warns you when the user stores its PKCS11 pin in the Workload Identity Manager security configuration file. For privacy reasons, it's preferable that the pin is not stored there, but entered manually on push instead.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.18.1.

  Component	Default version for this release
  Approver Policy	v0.19.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.20.0
  AWS Private CA Issuer	v1.4.1
  cert-manager	v1.17.1
  CSI Driver	v0.10.2
  CSI Driver for SPIFFE	v0.8.2
  CyberArk Workload Identity Manager	v1.6.0
  Istio CSR	v0.14.0
  OpenShift Routes for cert-manager	v0.7.0
  Trust Manager	v0.16.0
  Connection for CyberArk Certificate Manager	v0.4.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.15.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.4.1

Release 1.18.0¶

CLI tool for CyberArk Certificate Manager 1.18.0 was released on April 3, 2025.

Key features¶

• CyberArk Workload Identity Manager configuration commands

  This release introduces three new configuration commands for Workload Identity Manager.

  The venctl configuration firefly command has been added to assist users to configure Workload Identity Manager security settings when managed by Certificate Manager - Self-Hosted. This command includes subcommands to generate a sample security configuration file, which can be modified according to the user's needs and then pushed to or pulled from the Certificate Manager - Self-Hosted. Workload Identity Manager can be configured to pull and bootstrap the security configuration directly from Certificate Manager - Self-Hosted.

  For more information on all these commands, see the venctl command reference page.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.18.0.

  Component	Default version for this release
  Approver Policy	v0.19.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.20.0
  AWS Private CA Issuer	v1.4.1
  cert-manager	v1.17.1
  CSI Driver	v0.10.2
  CSI Driver for SPIFFE	v0.8.2
  CyberArk Workload Identity Manager	v1.5.2
  Istio CSR	v0.14.0
  OpenShift Routes for cert-manager	v0.7.0
  Trust Manager	v0.16.0
  Connection for CyberArk Certificate Manager	v0.3.1
  Enterprise Issuer for CyberArk Certificate Manager	v0.15.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.4.0

Release 1.17.0¶

CLI tool for CyberArk Certificate Manager 1.17.0 was released on February 25, 2025.

Key features¶

• United Kingdom registry and CyberArk Certificate Manager - SaaS support

  This release introduces support for the upcoming United Kingdom private OCI registry by adding an uk option for the --region flag for the venctl components kubernetes manifest generate and venctl components kubernetes apply commands. In addition, when the upcoming connection features for United Kingdom become available, support for connection to Certificate Manager - SaaS in United Kingdom for commands such as venctl installation cluster connect and venctl iam service-accounts firefly create. For more information, see the CLI tool for CyberArk Certificate Manager reference guide.

• Dependency updates

  • Go was updated to 1.23.6
  • github.com/Khan/genqlient was updated to v0.8.0
  • github.com/Masterminds/semver/v3 was updated to v3.3.1
  • github.com/docker/cli was updated to v27.5.1+incompatible
  • github.com/evertras/bubble-table was updated to v0.17.1
  • github.com/fatih/color was updated to v1.18.0
  • github.com/goccy/go-yaml was updated to v1.15.20
  • github.com/lmittmann/tint was updated to v1.0.7
  • github.com/oapi-codegen/runtime was updated to v1.1.1
  • github.com/spf13/pflag was updated to v1.0.6
  • github.com/spf13/viper was updated to v1.19.0
  • golang.org/x/crypto was updated to v0.33.0
  • golang.org/x/exp was updated to v0.0.0-20250210185358-939b2ce775ac
  • golang.org/x/mod was updated to v0.23.0
  • helm.sh/helm/v3 was updated to v3.17.0
  • k8s.io/api was updated to v0.32.1
  • k8s.io/apimachinery was updated to v0.32.1
  • k8s.io/client-go was updated to v0.32.1
  • k8s.io/utils was updated to v0.0.0-20241210054802-24370beab758

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.17.0.

  Component	Default version for this release
  Approver Policy	v0.19.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.20.0
  AWS Private CA Issuer	v1.4.1
  cert-manager	v1.17.1
  CSI Driver	v0.10.2
  CSI Driver for SPIFFE	v0.8.2
  CyberArk Workload Identity Manager	v1.5.2
  Istio CSR	v0.14.0
  OpenShift Routes for cert-manager	v0.7.0
  Trust Manager	v0.16.0
  Connection for CyberArk Certificate Manager	v0.3.1
  Enterprise Issuer for CyberArk Certificate Manager	v0.15.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.4.0

Release 1.16.0¶

CLI tool for CyberArk Certificate Manager 1.16.0 was released on January 23, 2025.

Key features¶

• Australian registry and CyberArk Certificate Manager - SaaS support

  This release includes support for the upcoming Australian private OCI registry by adding an au option for the --region flag for the venctl components kubernetes manifest generate and venctl components kubernetes apply commands. In addition, when the upcoming connection features for Australia become available, support for connection to Certificate Manager - SaaS in Australia for commands such as venctl installation cluster connect and venctl iam service-accounts firefly create. For more information, see the CLI tool for CyberArk Certificate Manager reference guide.

• --vcp-region flag updates

  The --vcp-region is no longer a global flag and has been removed from commands therefore for which it is not relevant.

• Dependency updates

  • Go was updated to v1.23.5
  • k8s.io/api was updated to v0.31.1
  • k8s.io/apimachinery was updated to v0.31.1
  • k8s.io/client-go was updated to v0.31.1
  • k8s.io/utils was updated to v0.0.0-20240921022957-49e7df575cb6
  • sigs.k8s.io/controller-runtime was updated to v0.19.0

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.16.0.

  Component	Default version for this release
  Approver Policy	v0.18.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.20.0
  AWS Private CA Issuer	v1.4.0
  cert-manager	v1.16.3
  CSI Driver	v0.10.2
  CSI Driver for SPIFFE	v0.8.2
  CyberArk Workload Identity Manager	v1.5.0
  Istio CSR	v0.14.0
  OpenShift Routes for cert-manager	v0.7.0
  Trust Manager	v0.15.0
  Connection for CyberArk Certificate Manager	v0.3.1
  Enterprise Issuer for CyberArk Certificate Manager	v0.15.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.4.0

Release 1.15.4¶

CLI tool for CyberArk Certificate Manager 1.15.4 was released on November 25, 2024.

Key features¶

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.15.4.

  Component	Default version for this release
  Approver Policy	v0.17.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.19.0
  AWS Private CA Issuer	v1.4.0
  cert-manager	v1.16.2
  CSI Driver	v0.10.1
  CSI Driver for SPIFFE	v0.8.1
  CyberArk Workload Identity Manager	v1.5.0
  Istio CSR	v0.12.0
  OpenShift Routes for cert-manager	v0.7.0
  Trust Manager	v0.13.0
  Connection for CyberArk Certificate Manager	v0.2.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.4.0

Release 1.15.3¶

CLI tool for CyberArk Certificate Manager 1.15.3 was released on November 21, 2024.

Key features¶

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.15.3.

  Component	Default version for this release
  Approver Policy	v0.16.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.19.0
  AWS Private CA Issuer	v1.4.0
  cert-manager	v1.16.1
  CSI Driver	v0.10.1
  CSI Driver for SPIFFE	v0.8.1
  CyberArk Workload Identity Manager	v1.5.0
  Istio CSR	0.12.0
  OpenShift Routes for cert-manager	0.7.0
  Trust Manager	v0.13.0
  Connection for CyberArk Certificate Manager	v0.2.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.3.0

Release 1.15.2¶

CLI tool for CyberArk Certificate Manager 1.15.2 was released on October 30, 2024.

Key features¶

• venctl installation cluster connect command updates

  This release includes an update to the venctl installation cluster connect command to improve the connectivity process to Certificate Manager - SaaS.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.15.2.

  Component	Default version for this release
  Approver Policy	v0.16.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.18.1
  AWS Private CA Issuer	v1.4.0
  cert-manager	v1.16.1
  CSI Driver	v0.10.1
  CSI Driver for SPIFFE	v0.8.1
  CyberArk Workload Identity Manager	v1.5.0
  Istio CSR	0.12.0
  OpenShift Routes for cert-manager	0.7.0
  Trust Manager	v0.12.0
  Connection for CyberArk Certificate Manager	v0.2.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.1.0

Release 1.15.1¶

CLI tool for CyberArk Certificate Manager 1.15.1 was released on October 15, 2024.

Key features¶

• Version output fix

  This release fixes an issue where the venctl version command and the associated auto update feature of venctl mistakenly reported the version as being dev.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.15.1.

  Component	Default version for this release
  Approver Policy	v0.15.2
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.18.1
  AWS Private CA Issuer	v1.3.0
  cert-manager	v1.16.1
  CSI Driver	v0.10.1
  CSI Driver for SPIFFE	v0.8.1
  CyberArk Workload Identity Manager	v1.5.0
  Istio CSR	0.12.0
  OpenShift Routes for cert-manager	0.7.0
  Trust Manager	v0.12.0
  Connection for CyberArk Certificate Manager	v0.1.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.0.0

Release 1.15.0¶

CLI tool for CyberArk Certificate Manager 1.15.0 was released on October 4, 2024.

Key features¶

• Manifest tool for CyberArk Certificate Manager environment variable support

  The Manifest tool now supports the VENAFI_KUBERNETES_AGENT_CLUSTER_NAME environment variable for setting the cluster name when installing the agent. This means you no longer have to create a custom values.yaml per cluster.

• Manifest tool for CyberArk Certificate Manager bug fix

  Release 1.15.0 corrects an issue where the Manifest tool attempted to set the topologySpreadConstraints field for the cert-manager startupapicheck, which doesn't exist.

• Go version updated

  The version of Go used was updated to v1.23.2.

• Default component versions for this release

  This release upgrades some dependency versions proactively to address CVEs reported by scanners but which weren't exploitable.

  The following is a full list of the component versions installable by default in release 1.15.0.

  Component	Default version for this release
  Approver Policy	v0.15.2
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.18.1
  AWS Private CA Issuer	v1.3.0
  cert-manager	v1.16.0
  CSI Driver	v0.10.1
  CSI Driver for SPIFFE	v0.8.1
  CyberArk Workload Identity Manager	v1.5.0
  Istio CSR	0.12.0
  OpenShift Routes for cert-manager	0.7.0
  Trust Manager	v0.12.0
  Connection for CyberArk Certificate Manager	v0.1.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.0.0

Release 1.14.1¶

CLI tool for CyberArk Certificate Manager 1.14.1 was released on September 11, 2024.

Key features¶

• Bug fixes An issue where venctl installation cluster connect failed in release v1.14.0.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.14.1.

  Component	Default version for this release
  Approver Policy	v0.15.1
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.18.1
  AWS Private CA Issuer	v1.3.0
  cert-manager	v1.15.3
  CSI Driver	v0.10.1
  CSI Driver for SPIFFE	v0.8.1
  CyberArk Workload Identity Manager	v1.5.0
  Istio CSR	0.12.0
  OpenShift Routes for cert-manager	0.6.0
  Trust Manager	v0.12.0
  Connection for CyberArk Certificate Manager	v0.1.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.0.0

Release 1.14.0¶

CLI tool for CyberArk Certificate Manager 1.14.0 was released on September 11, 2024.

Key features¶

• OpenShift Routes for cert-manager support Release v1.14.0 adds support for installing the OpenShift Routes for cert-manager component.
• Discovery Agent manifest improvements You can now generate manifests for agents without needing to specify a client ID.
• Manifest comments Generated manifests now include a comment at the top containing the command used to generate the manifest. This helps you to edit or recreate a manifest if required later..
• Istio CSR support This release adds support for Istio CSR with extra objects defined at manifest generation time.
• Bug fixes An issue where the CLI tool for CyberArk Certificate Manager incorrectly required a TTY when the --no-prompts flags is used was corrected.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.14.0.

  Component	Default version for this release
  Approver Policy	v0.15.1
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.18.1
  AWS Private CA Issuer	v1.3.0
  cert-manager	v1.15.3
  CSI Driver	v0.10.1
  CSI Driver for SPIFFE	v0.8.1
  CyberArk Workload Identity Manager	v1.5.0
  Istio CSR	0.12.0
  OpenShift Routes for cert-manager	0.6.0
  Trust Manager	v0.12.0
  Connection for CyberArk Certificate Manager	v0.1.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v1.0.0

Release 1.13.0¶

CLI tool for CyberArk Certificate Manager 1.13.0 was released on August 6, 2024.

app:
tls:
    certificateDNSNames:
    - cert-manager-istio-csr.venafi.svc

venctl components kubernetes manifest generate --cert-manager --istio-csr --istio-csr-values-files values.yaml --default-approver

Key features¶

• Istio CSR support

  The CLI tool for CyberArk Certificate Manager now allows you to install Istio CSR in addition to the other CyberArk Kubernetes components.

• New Helm custom chart repository CA options added

  The CLI tool for CyberArk Certificate Manager includes new custom chart repository CA flags for the venctl components kubernetes manifest generate and venctl components kubernetes apply commands to indicate the path to PEM-formatted CA bundles used to validate the Helm repository for component charts. Learn more

• Go version updated

  The version of Go used was updated to v1.22.5.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.13.0.

  Component	Default version for this release
  Approver Policy	v0.15.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.18.0
  AWS Private CA Issuer	v1.3.0
  cert-manager	v1.15.2
  CSI Driver	v0.10.0
  CSI Driver for SPIFFE	v0.8.0
  CyberArk Workload Identity Manager	v1.4.2
  Istio CSR	0.11.0
  Trust Manager	v0.12.0
  Connection for CyberArk Certificate Manager	v0.1.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v0.1.49

Release 1.12.0¶

CLI tool for CyberArk Certificate Manager 1.12.0 was released on July 18, 2024.

Key features¶

• Helm chart repository authentication

  This release adds new authentication parameters for protected OCI (credential configuration) and non-OCI (username and password) Helm chart repositories. Learn more.

  If you are using a protected Helm registry you may be required to provide additional authentication. New flags for the venctl components kubernetes manifest generate and venctl components kubernetes apply commands allow you to authenticate to protected Helm registries.

  For an OCI-based Helm registry you can provide a docker_config.json file containing authentication credentials:

  venctl components kubernetes apply \
    --cert-manager \
    --custom-chart-repository oci://my-registry.example.com/charts \
    --custom-chart-repository-config docker_config.json
  

  For HTTPs-based Helm registry you can specify the username and password:

  venctl components kubernetes apply \
    --cert manager \
    --custom-chart-repository https://my-charts.example.com/ \
    --custom-chart-repository-username <username> \
    --custom-chart-repository-password <password>
  

• enterprise-cert-manager scope renamed to cert-manager-components

  The enterprise-cert-manager value for the --scopes flag used with the venctl iam service-accounts registry create command is deprecated in favor of cert-manager-components.

  A sample venctl iam service-accounts registry create command using the new flag:

  venctl iam service-accounts registry create --name "My Service Account" --output-file "venafi-image-pull-secret.json" --owning-team "My Platform Team" --scopes "cert-manager-components" --validity 365 --api-key xyz
  

  An example of the same command in previous releases:

  venctl iam service-accounts registry create --name "My Service Account" --output-file "venafi-image-pull-secret.json" --owning-team "My Platform Team" --scopes "enterprise-cert-manager" --validity 365 --api-key xyz
  

• Repository updates for livenessprobe and csi-node-driver-registrar images

  CLI tool for CyberArk Certificate Manager was updated to install the livenessprobe and csi-node-driver-registrar images from the private-registry.venafi.cloud/csi-driver-spiffe repository.

• Connection for CyberArk Certificate Manager dependency for Enterprise Approver Policy for CyberArk Certificate Manager added to the Manifest tool for CyberArk Certificate Manager

  This release includes a fix for an issue where the Connection for CyberArk Certificate Manager dependency for Enterprise Approver Policy for CyberArk Certificate Manager was not installed by the Manifest tool by default.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.12.0.

  Component	Default version for this release
  Approver Policy	v0.14.1
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.17.2
  AWS Private CA Issuer	v1.2.7
  cert-manager	v1.15.1
  CSI Driver	v0.9.0
  CSI Driver for SPIFFE	v0.7.0
  CyberArk Workload Identity Manager	v1.4.1
  Trust Manager	v0.11.1
  Connection for CyberArk Certificate Manager	v0.1.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v0.1.49

Release 1.11.0¶

CLI tool for CyberArk Certificate Manager 1.11.0 was released on June 6, 2024.

Key features¶

• Default component versions for this release

  Release 1.11.0 updates the Manifest tool for CyberArk Certificate Manager to allow you to install the latest version of cert-manager and Trust Manager.

  The following is a full list of the component versions installable by default in release 1.11.0.

  Component	Default version for this release
  Approver Policy	v0.14.1
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.17.0
  AWS Private CA Issuer	v1.2.7
  cert-manager	v1.15.0
  CSI Driver	v0.8.1
  CSI Driver for SPIFFE	v0.6.0
  CyberArk Workload Identity Manager	v1.3.4
  Trust Manager	v0.11.0
  Connection for CyberArk Certificate Manager	v0.1.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v0.1.48

• Go dependency updated

  This release also updates the version of Go used for the build to 1.22.4.

Release 1.10.0¶

CLI tool for CyberArk Certificate Manager 1.10.0 was released on May 22, 2024.

Key features¶

• Install CSI Driver for SPIFFE

  Release 1.10.0 updates the Manifest tool for CyberArk Certificate Manager to allow you to install the CSI Driver for SPIFFE component. Learn more

• Minor improvements

  This release introduces improvements to the venctl command:

  • When deploying the Discovery Agent using venctl installation cluster connect, you can now modify the agent's deployment without encountering errors.
  • A pre-requisite check for the minimum required Helm version has been added to commands that use the Helm binary. This ensures compatibility and avoids potential issues.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.10.0.

  Component	Default version for this release
  Approver Policy	v0.14.1
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.17.0
  AWS Private CA Issuer	v1.2.7
  cert-manager	v1.14.5
  CSI Driver	v0.8.1
  CSI Driver for SPIFFE	v0.6.0
  CyberArk Workload Identity Manager	v1.3.4
  Trust Manager	v0.10.0
  Connection for CyberArk Certificate Manager	v0.1.0
  Enterprise Issuer for CyberArk Certificate Manager	v0.14.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v0.1.48

Release 1.9.0¶

CLI tool for CyberArk Certificate Manager 1.9.0 was released on May 8, 2024.

Breaking Changes¶

This release contains the following breaking changes:

• The following flags have been renamed in all commands to which they apply:

  • --output has been renamed to --log-format.

    A sample command using the new flag:

    venctl iam service-accounts describe --api-key xyz -n myaccount --log-format json --no-prompts >> accinfo.json
    

    An example of the same command in previous releases:

    venctl iam service-accounts describe --api-key xyz -n myaccount --output json --no-prompts >> accinfo.json
    

  • --credential-format has been renamed to --output.

    A sample command using the new flag:

    venctl iam service-accounts firefly create --output secret --name sa-firefly --api-key xyz
    

    An example of the same command in previous releases:

    venctl iam service-accounts firefly create --credential-format secret --name sa-firefly --api-key xyz
    

  • --credential-file has been renamed to --output-file.

    A sample command using the new flag:

    venctl iam service-accounts registry create --name "My Service Account" --output-file "venafi-image-pull-secret.json" --owning-team "My Platform Team" --scopes "enterprise-cert-manager" --validity 365 --api-key xyz
    

    An example of the same command in previous releases:

    venctl iam service-accounts registry create --name "My Service Account" --credential-file "venafi-image-pull-secret.json" --owning-team "My Platform Team" --scopes "enterprise-cert-manager" --validity 365 --api-key xyz
    

• The output from the iam service-accounts registry create output dockerconfig has been updated to contain only dockerconfig content rather than being nested in a JSON object.

  The following is a sample of the output in this release:

  {
      "auths": {
              "private-registry.venafi.cloud": {
                      "username": "sa-us@1cef4d3d-f28b-11ee-9365-c29bc6f4bab0",
                      "auth": "c2EtdXNAMWNlZjRkM2QtZjI4Yi0xMWVlLTkzNjUtYzI5YmM2ZjRiYWIwOnlWNE5jZHZ5SG1jY2FYU2thQ1FKbUJzZktsZERqRVA5eW11dW5XY1V6c0d2ZWtpamVhZWNBR3o5MlppQ0d5eXVJRmVua2RqalpGY3NrWXZ6WXFPdWlQZnVPd2NCRlRYRVJJcXEyaEloNDVHaEx2c01HNkRtNVJNZHJzNUVCd2Zx"
              }
      }
  }
  

  The following is an example of the output from previous releases:

  {
      "client_id": "f95b37ac-f28c-11ee-a4ea-bad1c4de4f71",
      "image_pull_secret": "{\"auths\":{\"private-registry.venafi.cloud\":{\"username\":\"sa-us@f95b37ac-f28c-11ee-a4ea-bad1c4de4f71\",\"auth\":\"c2EtdXNAZjk1YjM3YWMtZjI4Yy0xMWVlLWE0ZWEtYmFkMWM0ZGU0ZjcxOkVXVFlLTHFRZ0o3U2M4UTlSTDg2SEh2SldVTWlvT2VZSEhDaWpwRmVVRENNM2FIbEhQdURDb1p3RE1pQ0pRVGZOWlpxWExId3VGb0RLS1NrYW9tbDVsUEdxSG1zeVl2cWc2UURFSFlWSVdzblZ2S2ZSZHdvbnhldjF5NG5iUW5V\"}}}\n"
  }
  

The --name, --validity, and --owning-team flags are now only available in the subcommands where they are relevant. These flags have been removed from the main venctl iam service-accounts command and added to each applicable subcommand.

Key features¶

• Dependency updates

  This release updates the version of Go used to 1.22.3. This release also includes a fix for the following Hashicorp go-getter library vulnerability: CVE-2024-3817.

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.9.0.

  Component	Default version for this release
  Approver Policy	v0.14.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.16.0
  AWS Private CA Issuer	v1.2.7
  cert-manager	v1.14.5
  CSI Driver	v0.8.0
  CyberArk Workload Identity Manager	v1.3.4
  Trust Manager	v0.9.2
  Connection for CyberArk Certificate Manager	v0.0.20
  Enterprise Issuer for CyberArk Certificate Manager	v0.13.3
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v0.1.47

Release 1.8.0¶

CLI tool for CyberArk Certificate Manager 1.8.0 was released on April 5, 2024.

Breaking changes¶

The output from the venctl iam service-accounts agent create and venctl iam service-accounts firefly create commands now return the raw private key rather than a base64-encoded string.

The following is a sample of the output in this release:

{
        "client_id": "7dd207f4-f1ae-11ee-83f9-3a7af823c704",
        "private_key": "-----BEGIN PRIVATE KEY-----\nMHcCAQEEIKcGfBGimDbNqTrv0zw2h8W2OavVY8WHATEH89VIrQmBoAoGCCqGSM49\nAwEHoUQDQgAEzwbbEkbMMxvRBPLkmAJ/jkJZIHwpskxtBNXZU18jqAW+J8TSfuv6\nkPGe/frubEqyT+w496F45Vqi3Y9ha/6Ozg==\n-----END PRIVATE KEY-----\n"
}

The following is an example of the output from previous releases:

{
        "client_id": "7dd207f4-f1ae-11ee-83f9-3a7af823c704",
        "private_key": "LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tXG5NSGNDQVFFRUlLY0dmQkdpbURiTnFUcnYwencyaDhXMk9hdlZZOFdIQVRFSDg5VklyUW1Cb0FvR0NDcUdTTTQ5XG5Bd0VIb1VRRFFnQUV6d2JiRWtiTU14dlJCUExrbUFKL2prSlpJSHdwc2t4dEJOWFpVMThqcUFXK0o4VFNmdXY2XG5rUEdlL2ZydWJFcXlUK3c0OTZGNDVWcWkzWTloYS82T3pnPT1cbi0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS1cbgo="
}

Key features¶

• New service account custom integration functionality

  A new venctl iam service-accounts custom-integration createcommand has been added that allows you to create service accounts for custom integrations with Certificate Manager - SaaS. For more information, see the venctl iam service-accounts custom-integration create command reference documentation.

• New service account authentication functionality

  New --auth.client-id, --auth.key, and --auth.key-file flags have been added to the venctl iam service-account agent create command to support service account authentication to Certificate Manager - SaaS. This is useful for non-interactive sessions when service accounts for Discovery Agent are needed. For more information, see the venctl iam service-account agent create command reference documentation.

• Support for global tolerations

  This release includes a new flag, --global-tolerations-file, for the venctl components kubernetes manifest generate command. This flag points to a YAML file containing an array of Kubernetes corev1.Toleration objects. For more information, see Global tolerations.

• Support for global affinities

  This release includes a new flag, --global-affinities-file, for the venctl components kubernetes manifest generate command. This flag points to a YAML file containing an array of Kubernetes corev1.Affinity objects, which is validated in the same way that Kubernetes validates affinities in-cluster. For more information, see Global affinities.

• Support for global topology spread constraints

  This release includes a new flag, --global-topology-spread-constraints-file, for the venctl components kubernetes manifest generate command. This flag allows the configuration of global topology spread constraints which can be applied to all components for which topology spread constraints are configurable. For more information, see Global topology spread constraints.

• Support for High Availability (HA)

  This release includes a new flag, --ha-file-dir, for the venctl components kubernetes manifest generate command that allows you to set default values for HA deployments for the following CyberArk Kubernetes components:

  • cert-manager
  • Enterprise Approver Policy for CyberArk Certificate Manager
  • CSI Driver
  • Trust Manager
  • Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments
  • Enterprise Issuer for CyberArk Certificate Manager

  For more information, see Setting default values for HA deployments using the CLI tool for CyberArk Certificate Manager, and the venctl components kubernetes manifest generate command reference documentation..

• Default component versions for this release

  The following is a full list of the component versions installable by default in release 1.8.0.

  Component	Default version for this release
  Approver Policy	v0.13.1
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.15.0
  AWS Private CA Issuer	v1.2.7
  cert-manager	v1.14.4
  CSI Driver	v0.8.0
  CyberArk Workload Identity Manager	v1.3.3
  Trust Manager	v0.9.2
  Connection for CyberArk Certificate Manager	v0.0.20
  Enterprise Issuer for CyberArk Certificate Manager	v0.13.3
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v0.1.47

Release 1.7.0¶

CLI tool for CyberArk Certificate Manager 1.7.0 was released on March 14, 2024.

Key features¶

• New Manifest tool for CyberArk Certificate Manager commands

  Two new manifest tool commands have been added:

  • venctl components kubernetes manifest tool diff - Use this command as a convenient way to visualize the changes between the active deployment and the updated manifest.
  • venctl components kubernetes manifest tool template - Use this command to template releases defined in the state file.

  For more information, see the venafi components kubernetes manifest tool diff and venafi components kubernetes manifest tool template reference documentation.

• Quick install/uninstall commands

  This release introduces two new commands that allow you to set up and tear down a cert-manager environment quickly and easily. This installation method is not recommended for production environments. For more information, see the CLI tool for CyberArk Certificate Manager command reference documentation.

• Custom registry support

  You can now specify your own custom registry when connecting to CyberArk Certificate Manager - SaaS using the venctl installation cluster connect command.

• Bug fixes

  The current release includes fix for an issue with the venctl components kubernetes manifest generate command when the default version of a component was specified.

• Default component versions for this release

  Below is a full list of the component versions installable by default in release 1.7.0.

  Component	Default version for this release
  Approver Policy	v0.13.0
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.14.0
  AWS Private CA Issuer	v1.2.7
  cert-manager	v1.14.4
  CSI Driver	v0.7.1
  CyberArk Workload Identity Manager	v1.3.2
  Trust Manager	v0.9.1
  Connection for CyberArk Certificate Manager	v0.0.19
  Enterprise Issuer for CyberArk Certificate Manager	v0.13.1
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v0.1.45

Release 1.6.0¶

CLI tool for CyberArk Certificate Manager 1.6.0 was released on February 23, 2024.

Key features¶

• Service account creation for CyberArk Workload Identity Manager

  Release 1.6.0 allows you to create services accounts that allow Workload Identity Manager to connect to CyberArk Certificate Manager - SaaS using the new venctl iam service-accounts firefly create command. For more information, see the CyberArk CLI command reference documentation.

• FIPS support for CSI Driver

  This release includes support for FIPS-compliant versions of Docker images for CSI Driver.

• New positional arguments

  Instead of having to use the --name flag with the following commands, you can now also use positional arguments:

  • venctl iam service-accounts describe
  • venctl iam service-accounts registry create
  • venctl iam service-accounts delete
  • venctl installation cluster connect

  For example:

  venctl iam service-accounts describe my-service-account
  

• Logging and error messages improvements

  Several updates have been made that improve error messages and logging in the CLI tool for CyberArk Certificate Manager.

• Default component versions for this release

  The venctl components kubernetes manifest generate command now installs Enterprise Issuer for CyberArk Certificate Manager v0.12.0 and Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments v0.1.45.

  Below is a full list of the component versions installable by default in release 1.6.0.

  Component	Default version for this release
  Approver Policy	v0.12.1
  Enterprise Approver Policy for CyberArk Certificate Manager	v0.13.0
  AWS Private CA Issuer	v1.2.7
  cert-manager	v1.14.3
  CSI Driver	v0.7.1
  CyberArk Workload Identity Manager	v1.3.1
  Trust Manager	v0.8.0
  Connection for CyberArk Certificate Manager	v0.0.19
  Enterprise Issuer for CyberArk Certificate Manager	v0.12.0
  Discovery Agent for CyberArk Certificate Manager in Kubernetes and OpenShift Environments	v0.1.45

Release 1.5.0¶

CLI tool for CyberArk Certificate Manager 1.5.0 was released on February 9, 2024.

Breaking Changes¶

Updated flags in venctl iam service-accounts registry create¶

As of this version, the CLI tool for CyberArk Certificate Manager introduces two critical flag changes that impact how you create service accounts for CyberArk OCI registry access:

• Renamed Flag: --image-pull-secret-file is now --credential-file.
• Renamed Flag: --image-pull-secret-format is now --credential-format.

This change aligns with broader terminology within the CLI tool for CyberArk Certificate Manager, and aims to simplify usage. Remember to update your commands accordingly to avoid errors.

Example:

• CLI tool for CyberArk Certificate Manager 1.2.0 - 1.4.0:

  venctl iam service-accounts registry create --name sa --image-pull-secret-file my-secret.yaml --image-pull-secret-format secret
  

• CLI tool for CyberArk Certificate Manager 1.5.0:

  venctl iam service-accounts registry create --name sa --credential-file my-credential.json --credential-format secret
  

Updated the output format of --credential-format secret for venctl iam service-accounts registry create¶

This update impacts how CLI tool for CyberArk Certificate Manager generates service accounts for registry access with the --credential-format secret flag.

Previously, only the Kubernetes secret (in YAML format) was included in the output. Now, both client_id and the Kubernetes secret for image pulling (in YAML format) are provided under a JSON structure.

Output details

Upon successful execution of venctl iam service-accounts registry create --name sa --credential-file my-credential.json --credential-format secret, the output will include:

• client_id: The client identifier used for authentication with the registry.
• image_pull_secret: The Kubernetes secret encoded in YAML format, granting access to CyberArk OCI registry artifacts.

Accessing the client ID and secret

To extract the image_pull_secret from the JSON output, use the following command:

jq -r '.image_pull_secret' < my-credential.json

To extract the client_id from the JSON output, use the following command:

jq -r '.client_id' < my-credential.json

Key features¶

• Service account creation for Discovery Agent

  A venctl iam service-accounts agent create command was added. This command allows you to create service accounts in CyberArk Certificate Manager - SaaS for your CyberArk Kubernetes Agents.

• Service account listing

  A new venctl iam service-accounts list command was added. This command lists all service accounts in Certificate Manager - SaaS. For more information, see the venctl reference page.

• Service account description

  The venctl iam service-accounts show command has been renamed venctl iam service-accounts describe. It provides a description of a named service account in Certificate Manager - SaaS. For more information, see the venctl reference page.

• CyberArk Improvements to the Manifest tool for CLI tool for CyberArk Certificate Manager

  This release also sees updates to the way that the Manifest tool for CyberArk Certificate Manager deploys cert-manager, and adds support for cert-manager v1.14.1 and later.

• Flag changes

  The --image-pull-secret-file and --image-pull-secret-format flags for the venctl iam service-accounts registry create command have been renamed to --credential-file and --credential-format, respectively.

Release 1.4.0¶

CLI tool for CyberArk Certificate Manager 1.4.0 was released on January 25, 2024.

Key features¶

• FIPS support

This release includes support for FIPS-compliant versions of Docker images for CyberArk components for Kubernetes. A --use-fips-images flag has been added to the venctl components kubernetes manifest generate command to install the desired component using the FIPS-compliant version of the component Docker image.

Release 1.3.2¶

CLI tool for CyberArk Certificate Manager 1.3.2 was released on January 15, 2024.

Key features¶

• Service accounts show command

  A new venctl iam service-accounts show command was added. This command provides information on a named service account in Certificate Manager - SaaS. For more information, see the venctl reference page.

• Logging improvements

  This release sees improvements in logging to support the venctl iam service-accounts show command.

• Miscellaneous minor bug fixes

  Several minor bugs were also fixed in this release.

Release 1.3.1¶

CLI tool for CyberArk Certificate Manager 1.3.1 was released on December 20, 2023.

Key features¶

• EU region service account deletion issue

  Release 1.3.1 fixes an issue where the venctl iam service-accounts delete command didn't work for service accounts using the EU Certificate Manager - SaaS region.

Release 1.3.0¶

CLI tool for CyberArk Certificate Manager 1.3.0 was released on December 15, 2023.

Key features¶

• Service account deletion

  Release 1.3.0 adds a new venctl iam service-accounts delete command for deleting service accounts in Certificate Manager - SaaS.

  For more information on how to use this feature, see CLI tool for CyberArk Certificate Manager reference page.

• CyberArk Kubernetes manifest for Trust Manager

  This release addresses an issue in the CyberArk Kubernetes manifest for the Trust Manager. Previously, the generated manifest pulled the open-source image for the default trust package, now the enterprise Trust Manager version is used unless another registry is configured.

Release 1.2.1¶

CLI tool for CyberArk Certificate Manager 1.2.1 was released on December 7, 2023.

Key features¶

• macOS install script fix

  This release fixes an issue with the Bash script used to install the utility on the macOS platform when no GPG tool is installed.

Release 1.2.0¶

CLI tool for CyberArk Certificate Manager 1.2.0 was released on December 6, 2023.

Key features¶

• Manifest tool for CyberArk Certificate Manager functionality

  This release sees the addition of Manifest tool functionality to the CLI tool for CyberArk Certificate Manager. You can now install CyberArk Kubernetes components using the CLI tool for CyberArk Certificate Manager utility.

  For more information on how to use this feature, see CLI tool for CyberArk Certificate Manager reference page.

• Service account creation

  Release 1.2.0 adds a new venctl iam service-accounts registry create command for creating service accounts in Certificate Manager - SaaS for accessing container images from the private CyberArk OCI registry.

  For more information on how to use this feature, see CLI tool for CyberArk Certificate Manager reference page.

• Utility updates

  The release adds the venctl update command to update the venctl binary to the latest available stable version.

  For more information on how to use this feature, see CLI tool for CyberArk Certificate Manager reference page.

Release 1.1.0¶

CLI tool for CyberArk Certificate Manager 1.1.0 was released on November 3, 2023.

Key features¶

• Code signing

  This release introduces GPG code signing for the CLI tool for CyberArk Certificate Manager binaries, enabling them to be verified for authenticity.

Release 1.0.2¶

CLI tool for CyberArk Certificate Manager 1.0.2 was released on November 1, 2023.

Key features¶

• Bug fixes and enhancements

  This release of the CLI tool for CyberArk Certificate Manager contains some bug fixes, and some small under-the-hood enhancements.

Release 1.0.0¶

CLI tool for CyberArk Certificate Manager 1.0.0 was released on October 15, 2023.

Key features¶

• Connect Kubernetes clusters to CyberArk Certificate Manager - SaaS

  CLI tool for CyberArk Certificate Manager provides a convenient way to connect Kubernetes clusters to Certificate Manager - SaaS.

  To learn more, use the venctl installation cluster connect --help command.

Related links¶

• CLI tool for CyberArk Certificate Manager overview
• CLI tool for CyberArk Certificate Manager reference
• Installing the CLI tool for CyberArk Certificate Manager