// Module included in the following assemblies:
//
// *

:_mod-docs-content-type: REFERENCE
[id="security-crs_{context}"]
= Security reference CRs

[role="_abstract"]
The following table lists the security reference configuration custom resources (CRs) for the hub cluster.

.Security CRs
[cols="4*", options="header", format=csv]
|====
Component,Reference CR,Description,Optional
Cert-Manager,`certManagerNS.yaml`,Defines the cert-manager-operator namespace.,Yes
Cert-Manager,`certManagerOperatorgroup.yaml`,Defines the OperatorGroup for cert-manager.,Yes
Cert-Manager,`certManagerSubscription.yaml`,Installs the OpenShift cert-manager operator.,Yes
Cert-Manager,`certManagerClusterIssuer.yaml`,Configures an ACME ClusterIssuer using Let's Encrypt with DNS-01 challenge.,Yes
Cert-Manager,`apiServerCertificate.yaml`,Creates a certificate for the API Server endpoint.,Yes
Cert-Manager,`ingressCertificate.yaml`,Creates a wildcard certificate for the Ingress/Router.,Yes
Cert-Manager,`apiServerConfig.yaml`,Configures OpenShift to use the cert-manager generated API Server certificate.,Yes
Cert-Manager,`ingressControllerConfig.yaml`,Configures OpenShift to use the cert-manager generated Ingress certificate.,Yes
Cert-Manager,`certManagerCertificatePolicy.yaml`,Defines CertificatePolicy for monitoring certificate expiration and compliance across managed clusters.,Yes
Cert-Manager,`certManagerCertificatePolicyPlacement.yaml`,Defines Placement for CertificatePolicy targeting clusters with the common label.,Yes
Cert-Manager,`certManagerCertificatePolicyPlacementBinding.yaml`,Binds the CertificatePolicy to the Placement for policy distribution.,Yes
|====
