Amazon EKS

Overview

QCecuring integrates with Amazon EKS to manage TLS certificates for Kubernetes workloads, ingress controllers, and service mesh endpoints. This ensures that containerized applications maintain strong encryption without manual certificate handling by development teams.

Key capabilities

• Automated certificate provisioning for EKS ingress controllers and load balancers.
• Integration with cert-manager running on EKS clusters for in-cluster certificate issuance.
• Discovery of certificates across namespaces, secrets, and ingress resources.
• Policy enforcement for certificate standards across development, staging, and production clusters.
• Centralized visibility into certificate health for all EKS workloads.

Typical use cases

• Platform teams managing certificate infrastructure for microservices on EKS.
• Organizations requiring enterprise CA-issued certificates for Kubernetes ingress endpoints.
• Security teams needing visibility into certificate sprawl across multiple EKS clusters.

High-level integration flow

1. Deploy the QCecuring agent or configure cert-manager integration within EKS clusters.
2. The platform discovers existing certificates in Kubernetes secrets and ingress configurations.
3. Certificate policies are applied based on namespace, cluster, and workload classification.
4. QCecuring orchestrates issuance and renewal through approved CAs, storing certificates as Kubernetes secrets.
5. Dashboards provide cluster-level and organization-wide certificate posture reporting.

CBOM Discovery

QCecuring discovers certificates and keys within EKS clusters — Kubernetes Secrets, cert-manager resources, and service mesh mTLS certificates — feeding them into your CBOM for PQC readiness tracking.