Use the Venafi task to automatically assign and manage machine identity security certificates. The step allows you to select from any of the accounts that have been connected and set configurations for certificate renewal.
You can issue security certificates from Venafi TrustAuthority and DevOpsACCELERATE accounts.
Your deployment pipeline must contain an Application Component and a Destination step. Use the Application Component step to select the application components to be deployed. Use the Destination step to provision the infrastructure required to run your application. Note that only one Application Component step is allowed in a deployment pipeline.
Click the Deploy tab. Clickto create a new deployment pipeline or click Edit on an existing pipeline.
Add a Venafi step. (If you've accidentally deleted this step, you can add it to the pipeline.) Complete the following steps to configure the step. When you’re done, Save.
Bind Component Click on the drop-down to select an application component to bind to the certificate.
Select Bind Select the bind type that will be used to bind the application to the Venafi package.
Credential Select a credential that had been configured in the Venafi Connect step.
Common Name Use to specify the common name. This is required for Enrollment.
Zone Use to specify the folder path where the certificate object will be placed. Venafi prepends \VED\Policy, so you only need to specify child folders under the root Policy folder. Example: -z DevOps\CorpApp-z DevOps\CorpApp.
Renew Threshold Select the number of days before a certificate expires to request a certificate renewal.
Expiry Check Select the frequency period for which the system will check for certificate expiry.
Once added, ShuttleOps will automatically update the deployment pipeline to reflect the Venafi bind to the application component and cloud instance.
Remove an Application Component
To remove the Venafi task from the pipeline, click the Edit on the pipeline tile, navigate to the Venafi task, then click
on the Venafi tile and click Delete.