Root certificate delivery module (shturval-trust-manager)
About the service
| Parameter | Description |
|---|---|
| GUI name | Root Certificate Delivery Module |
| System name (identifier) | shturval-trust-manager |
| Cluster Assignment | Distribution of root and trusted certificates (CA bundle) to pods and nodes to trust the corporate CA or internal services. |
| Critical | Yes |
| Public repository | Trust Manager |
| Dependencies | shturval-cert-manager, shturval-trust-manager-crds |
| Namespace | shturval-trust-manager |
Purpose
shturval-trust-manager - root certificate delivery module based on cert-manager Trust Manager. Allows you to manage and distribute chains of trusted certificate authority (CA) certificates. Trusted roots are needed to verify the authenticity of certificates when establishing TLS connections with internal and corporate services.
The service adds shturval-cert-manager: cert-manager issues and updates TLS certificates, Trust Manager delivers the agreed CA bundle to pods and nodes where it is required by the trust policy.
Deployment and management
shturval-trust-manager is a critical platform service. In the Shturval platform, its inclusion and life cycle in the cluster is ensured by cluster-manager (platform service); ShturvalServiceConfig (SSC) objects for linked charts are created and maintained as part of the platform configuration.
In the working environment, the module is represented by two SSCs:
shturval-trust-manager-crds— CRD Trust Manager chart;shturval-trust-manager— the main chart of the module.
Note: The order of deployment at the platform level must take into account the dependency: first the CRD (shturval-trust-manager-crds), then the main controller (shturval-trust-manager). shturval-cert-manager must be available in the cluster (see dependency table above).
Where to configure
Services and repositories → Installed services → shturval-trust-manager → Manage.