Secure Apps Inventory

In KUBE+, Enroll Certificates and Download Certificates refer to the process of creating a Kubernetes resource known as "Cert" (Enroll new certs), “SecretProviderClass (Pod Certificates)", and “CertLoad” (Download existing certs) which represents an SSL/TLS certificate deployed in Secrets and Pods respectively. The Cert resource is generated by the cert-orchestrator and includes an associated certificate signing request and CertLoad resource is generated by the cert-orchestrator. The SecretProviderClass resource is consumed by the appviewx-csi-provider which also includes an associated certificate signing request. This request is then sent to the Certificate Authority (CA) for signing through the KUBE+ platform.

To go to Enroll Certificate inventory, go to menu > KUBE+ > Cluster Security > Secure Apps.

The Enroll Certificate inventory list includes the following information:
Table 1. Enroll Certificate Inventory - Column Description Table
Column Name Description
Certificate Name Name of the certificate.
Common Name The common name of the certificate. Click on the desired common name to be redirected to the certificate inventory page, which displays the certificates associated with the common name.
Cluster Name Name of the cluster.
CA Settings Type Type of the CA settings.
Enroll To The endpoint to which the certificate is deployed. The options are:

  • Secret

  • Pod
Auto Renew The status of auto-renewal for the enrolled certificates. The options are:

  • True

  • False
Created By User ID who enrolled the certificate.
Created Source The source of the certificate enrollment request.
Updated Time Last updated Timestamp.