steampipe plugin install ocisteampipe plugin install oci

Table: oci_certificates_management_ca_bundle - Query OCI Certificate Management CA Bundles using SQL

Oracle Cloud Infrastructure (OCI) Certificate Management is a feature that allows you to manage and deploy SSL/TLS certificates. It provides a centralized way to manage certificates, ensuring secure and encrypted communication between the client and the server. OCI Certificate Management helps in maintaining the trust and integrity of your applications and infrastructure.

Table Usage Guide

The oci_certificates_management_ca_bundle table provides insights into Certificate Management CA Bundles within OCI. As a Security Engineer, explore bundle-specific details through this table, including certificate data, validity, and associated metadata. Utilize it to uncover information about certificate bundles, such as those with expired certificates, the trust relationships between certificates, and the verification of trust policies.

Examples

Basic info

Explore which certificates are active or inactive by analyzing their lifecycle state and details. This can help you understand the status and creation time of certificates for better management and timely renewal.

select
  id,
  name,
  lifecycle_state,
  lifecycle_details,
  description,
  time_created
from
  oci_certificates_management_ca_bundle;

select
  id,
  name,
  lifecycle_state,
  lifecycle_details,
  description,
  time_created
from
  oci_certificates_management_ca_bundle;

List bundles created between a specific time

Discover the segments that were created within a specific time frame. This query is useful in tracking the lifecycle of your resources, allowing you to manage and optimize their utilization effectively.

select
  name,
  id,
  lifecycle_state,
  time_created
from
  oci_certificates_management_ca_bundle
where
  time_created between '2023-05-01' and '2023-07-01';

select
  name,
  id,
  lifecycle_state,
  time_created
from
  oci_certificates_management_ca_bundle
where
  time_created between '2023-05-01' and '2023-07-01';

List failed bundles

Determine the areas in which certificate management bundles have failed, allowing you to identify and address issues in your OCI environment.

select
  name,
  id,
  lifecycle_state,
  lifecycle_details
from
  oci_certificates_management_ca_bundle
where
  lifecycle_state = 'FAILED';

select
  name,
  id,
  lifecycle_state,
  lifecycle_details
from
  oci_certificates_management_ca_bundle
where
  lifecycle_state = 'FAILED';

Schema for oci_certificates_management_ca_bundle

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form, e.g. connection_name.
compartment_id	text	=	The OCID of the compartment in Tenant in which the resource is located.
defined_tags	jsonb		Defined tags for this resource.
description	text		A brief description of the CA bundle.
freeform_tags	jsonb		Free-form tags for this resource.
id	text	=	The OCID of the CA bundle.
lifecycle_details	text		Additional information about the current lifecycle state of the CA bundle.
lifecycle_state	text	=	The current lifecycle state of the CA bundle.
name	text	=	A user-friendly name for the CA bundle.
tags	jsonb		A map of tags for the resource.
tenant_id	text		The OCID of the Tenant in which the resource is located.
time_created	timestamp with time zone		Time that the Ca Bundle was created.
title	text		Title of the resource.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- oci

You can pass the configuration to the command with the --config argument:

steampipe_export_oci --config '<your_config>' oci_certificates_management_ca_bundle