>
    Strata Copilot
    Discover Certificates in Kubernetes Clusters
    Focus
    Focus
    1. Home
    2. Next‑Gen Trust Security
    3. Next-Gen Trust Security
    4. Next-Gen Trust Security Overview
    5. Discovery Overview
    6. Discover Certificates in Kubernetes Clusters
    Next‑Gen Trust Security

    Discover Certificates in Kubernetes Clusters

    Table of Contents

    Discover Certificates in Kubernetes Clusters

    Connect Kubernetes clusters to Next-Gen Trust Security to gain visibility into certificate activity in your Kubernetes environments. Use Next-Gen Trust Security to view discovered certificates and monitor their health, automate issuance and renewal, and identify risks.
    Note: Kubernetes cluster discovery configuration is a parent TSG resource. Only users with the Superuser role in the parent TSG can connect clusters and configure discovery. Discovered certificates are initially unowned and can be claimed by users in any TSG.
    Clusters appear on the Kubernetes Clusters page, accessible from Insights > Kubernetes Clusters.
    On the Kubernetes Clusters page, you can:
    • Connect Kubernetes clusters to Next-Gen Trust Security by installing the Discovery Agent for authentication to NGTS.
    • Disconnect Kubernetes clusters from the cluster row's right-hand menu.
    • View discovered certificates for all clusters connected to Next-Gen Trust Security.
    • View a status summary in the Summary panel, including unhealthy connections and unique certificates.
    • View cluster information including key details such as properties, issuers, and installed components.

    © 2026 Palo Alto Networks, Inc. All rights reserved.