TLS / certificates
2 min
In transit
- TLS for agent ↔ control plane communication
- TLS for web UI/API access
- TLS for integration calls (Git, observability, identity providers)
Enterprise requirements
Document support for:
- Custom CA trust bundles
- Internal PKI certificates (on-prem)
- TLS termination models (if self-hosted)
- Certificate rotation practices
Best practice
- Never disable certificate verification in production
- Rotate credentials/certs on schedule
- Separate certs per environment where possible