Chapter 10. External Secrets Management Console Plug-in
10.1. External Secrets Management Console Plug-in Copy linkLink copied to clipboard!
The External Secrets Management Console Plug-in is an Operator that manages the secrets and custom resource definitions (CRDs) for the secrets management Operators. Using External Secrets Management Console Plug-in, you can monitor and delete the custom resources (CRs) of all the installed secrets management Operators.
External Secrets Management Console Plug-in is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.
For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.
The following secrets management Operators can be managed with External Secrets Management Console Plug-in:
- External Secrets Operator for Red Hat OpenShift
- cert-manager Operator for Red Hat OpenShift
- Secrets Store CSI Driver Operator
You can use the plug-in to complete the following tasks:
- View and filter secrets-related CRs from all installed secrets management Operators in a unified dashboard.
- Inspect resource details including metadata, spec, status, and Kubernetes events.
- Delete CRs directly from the console with name-confirmation.
- View real-time resource health and status, including sync state, certificate expiry, and provider type.
- Automatic Operator detection that shows resources only from Operators that are installed on the cluster.
10.2. External Secrets Management Console Plug-in release notes Copy linkLink copied to clipboard!
The External Secrets Management Console Plug-in provides a unified OpenShift Console interface for viewing and managing secrets-related custom resources (CRs) from multiple Operators such as cert-manager, External Secrets Operator, and Secrets Store CSI Driver.
These release notes track the development of External Secrets Management Console Plug-in.
For more information, see External Secrets Operator overview.
External Secrets Management Console Plug-in is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.
For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.
10.2.1. External Secrets Management Console Plug-in 0.1.0 (Technology Preview) Copy linkLink copied to clipboard!
Issued: 9 July 2026
This initial release of External Secrets Management Console Plug-in is a Technology Preview.
10.3. Installing External Secrets Management Console Plug-in Copy linkLink copied to clipboard!
Install the External Secrets Management Console Plug-in from the OpenShift Container Platform web console Software Catalog to manage certificates and secrets across installed secrets management Operators.
External Secrets Management Console Plug-in is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.
For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.
10.3.1. Installing the External Secrets Management Console Plug-in by using the web console Copy linkLink copied to clipboard!
You can use the web console to install the External Secrets Management Console Plug-in.
Prerequisites
-
You have access to the cluster with
cluster-adminprivileges. - You have access to the OpenShift Container Platform web console.
Procedure
- Log in to the OpenShift Container Platform web console.
-
Navigate to Ecosystem
Software Catalog. - Enter External Secrets Management Console into the filter box.
- Select External Secrets Management Console.
- Select the External Secrets Management Console Plug-in version from the Version drop-down list, and click Install.
On the Install Operator page:
- Update the Update channel, if necessary. The channel defaults to tech-preview-v1.
Select an Update approval strategy.
- The Automatic strategy allows the Operator Lifecycle Manager (OLM) to automatically update the Operator when a new version is available.
- The Manual strategy requires a user with appropriate credentials to approve the Operator update.
- Click Install.
Verification
- Verify that External Secrets Management Console Plug-in is available under Plugins.
- Verify that all the installed secrets management Operators are listed when you click External Secrets Management Console Plug-in.
10.4. Monitoring the External Secrets Management Console Plug-in Copy linkLink copied to clipboard!
Monitor certificates, issuers, external secrets, and secret stores from installed secrets management Operators using the External Secrets Management Console Plug-in in the OpenShift Container Platform web console.
External Secrets Management Console Plug-in is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.
For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.
10.4.1. Monitoring secrets management Operators by using External Secrets Management Console Plug-in Copy linkLink copied to clipboard!
You can inspect custom resources for installed secrets management Operators in the OpenShift Container Platform web console.
Prerequisites
- You have installed the External Secrets Management Console Plug-in.
- You have installed at least one secrets management Operator.
Procedure
- Log in to the OpenShift Container Platform web console.
-
Navigate to Plugins
Secrets Management. -
Click
for the custom resource that you want to monitor, and then click Inspect.
Verification
You must be able to view the following sections:
- Metadata
- Labels
- Annotations
- Specifications
- Status
- Events
10.5. Uninstalling the External Secrets Management Console Plug-in Copy linkLink copied to clipboard!
Uninstall the External Secrets Management Console Plug-in from your OpenShift Container Platform cluster using the web console Installed Operators page.
External Secrets Management Console Plug-in is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.
For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.
10.5.1. Uninstalling the External Secrets Management Console Plug-in by using the web console Copy linkLink copied to clipboard!
You can uninstall the External Secrets Management Console Plug-in from your cluster using the OpenShift Container Platform web console.
Prerequisites
- You have access to the OpenShift Container Platform web console.
- The External Secrets Management Console Plug-in is installed.
Procedure
- Log in to the OpenShift Container Platform web console.
-
Navigate to Ecosystem
Installed Operators. -
Click the Options menu
next to the External Secrets Management Console entry, and then click Uninstall Operator.
- In the confirmation dialog, select the Delete all operand instances for this operator checkbox and then click Uninstall.
Verification
- Verify that Secrets Management no longer appears under Plugins.
10.6. Deleting certificates and secrets with External Secrets Management Console Plug-in Copy linkLink copied to clipboard!
Delete certificates and secrets from installed secrets management Operators using the External Secrets Management Console Plug-in in the OpenShift Container Platform web console.
External Secrets Management Console Plug-in is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.
For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.
10.6.1. Deleting certificates and secrets by using External Secrets Management Console Plug-in Copy linkLink copied to clipboard!
You can delete certificates and secrets from installed secrets management Operators across your clusters by using the OpenShift Container Platform web console.
External Secrets Management Console Plug-in is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.
For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.
Prerequisites
-
You have access to the OpenShift Container Platform cluster as a user with the
cluster-adminrole. - You have installed the External Secrets Management Console Plug-in.
- You have installed at least one secrets management Operator.
Procedure
- Log in to the OpenShift Container Platform web console.
-
Navigate to Plugins
Secrets Management. -
Click
for the custom resource that you want to delete, and then click Delete.
- Enter the name of the custom resource.
- Click Delete.
Verification
-
Navigate to Ecosystem
Installed Operators. - Select the secrets management Operator whose custom resource you deleted.
- Verify that the deleted custom resource no longer appears in the Operator details view.