Create a CA Policy

Create Policy enables the Infosec teams / PKI administrators to create, define and enforce policies for one more cluster managed in the inventory.
Note: The certificate automations (creation, renewal, etc.) initiated from a specific cluster must adhere to the policy parameters outlined in this policy inventory. Any cluster that is not a part of or does not align with the Cluster Policy will be denied certificate automations.

Why is Cluster Policy Essential?

Cluster Policy is your toolbox of rules and guidelines that you set up to manage the safe issuance of SSL/TLS certificates within your Kubernetes cluster. AppViewX offers various ways to ensure that these policies are followed when certificates are issued.

  • CA Setting - When your application management teams work within a specific namespace, they often need access to a private CA to request certificates for their unique domains. The CA Setting policy type takes care of configuring this private CA and manages how certificates are provided within this specific namespace.

  • CA Setting Cluster - If your application teams are deploying across the entire cluster, no matter where their apps land, the CA Setting Cluster policy type steps in. It handles the configuration of the CA and ensures certificates are issued seamlessly, maintaining security and consistency throughout the cluster.
Prerequisites:

To create a cluster policy,

  1. Go to menu > KUBE+ > Groups & Policies > Cluster Policy
    On the Cluster Policy page, the created policies are displayed, if any.
  2. Click .
  3. On the Cluster Policy Information page, enter/select the policy information fields.
    Field Description
    Policy Name* Enter a unique policy name to be associated with one or more clusters.
    Type* Select a type from dropdown list. The options are:

    • CA Settings Cluster - cluster wide global policy.

    • CA Setting - Policy to be applied for a specific namespace or a project within a cluster.
    Clusters* Select preferred clusters from the dropdown list.
    Certificate Group* Select a certificate group from the dropdown list.
    Associate CA Policy* Select a CA policy from the dropdown list associated with certificate group.
    Certificate Authority* Select a Certificate Authority from the dropdown list.
    CA Settings* Select a CA Settings from the dropdown list.
  4. Click Add.