Compatible with
account required
Envoy
Envoy deployment SDS-compatible secret delivery. No arbitrary admin commands. ssh/WinRM sessions use pinned host keys. SDS or file secret
Verification: test_verified. Connection: unknown. Credentials: none. Live E2E: no.
No disposable Envoy host with pinned known_hosts and a TLS listener is configured.
What sslcertificates.io can do
Envoy deployment SDS-compatible secret delivery. No arbitrary admin commands. ssh/WinRM sessions use pinned host keys. SDS or file secret Capabilities: atomic_write, config_test, reload, tls_verify, rollback. Authentication uses api_token.
Required permissions
Restricted service account. Commands are allowlisted: SDS or file secret. Known-host verification is mandatory.
Setup
Open Dashboard → Integrations → Envoy. Enter the credentials described on this page. Values are encrypted at rest and never shown again. Run Test connection. Discovery runs only after authentication succeeds. Select a discovered resource. Do not paste opaque IDs unless the provider cannot enumerate them. Perform the certificate or notification action, then confirm the external system matches. Disconnect removes stored credentials and owned test resources created by sslcertificates.io.
Known limitations
User-supplied shell is rejected. A successful file write is not enough; the TLS endpoint must present the new fingerprint.
Official sources
Fact checked 2026-09-20. https://www.haproxy.com/documentation/ Envoy is a trademark of its owner. sslcertificates.io is not a partner or certified reseller unless a written agreement exists.
Capabilities
Connect
Envoy is a trademark of its owner. sslcertificates.io is not a partner or certified reseller unless a written agreement exists.