> ## Documentation Index > Fetch the complete documentation index at: https://docs.celum.io/llms.txt > Use this file to discover all available pages before exploring further. # Get certs status > Mirrors the Storage step: install / status / recover-rollback **Authorisation:** `certs:GetStatus` on `krn:celum:supervisor:{name}:certs:*`. **Assistant tool:** `get_component_status` ## OpenAPI ````yaml /openapi.json get /api/supervisors/{name}/certs/status openapi: 3.0.3 info: description: >- The HTTP surface of the Celum backend, generated from its own router and authorisation map — so this list cannot drift from the server that serves it. **Every operation states the IAM action and resource it is authorised against.** That pairing is the part worth reading: a policy naming the right action against the wrong resource matches nothing, and fails silently. Request and response bodies come from the Go types the handlers send and decode. Where those types do not determine the shape (an interface, a map[string]any, an unknown custom encoding), the operation says so in `x-celum-schema-gap` instead of carrying a guessed schema. title: Celum API version: 1.0.0 servers: - description: Your Celum deployment url: https://{host} variables: host: default: celum.example.com description: The host your Celum backend is served from security: - sessionCookie: [] - bearerToken: [] tags: - description: AI assistant & MCP name: ai-assistant - description: Clusters & CAPI lifecycle name: capi - description: Certificates & external secrets name: certs - description: GitOps & apps name: gitops - description: IAM, audit & auth name: iam - description: Image library name: images - description: Infrastructure & supervisors name: infrastructure - description: Networking name: networking - description: Observability & platform health name: observability - description: Platform onboarding & settings name: platform-settings - description: Projects name: projects - description: Registries & mirroring name: registries - description: Security & flows name: security - description: Storage name: storage - description: Templates & addons name: templates - description: Virtualization platform (KubeVirt/CDI) name: virt - description: Virtual machines name: vms - description: Workloads & topology name: workloads paths: /api/supervisors/{name}/certs/status: get: tags: - certs summary: Get certs status description: >- Mirrors the Storage step: install / status / recover-rollback **Authorisation:** `certs:GetStatus` on `krn:celum:supervisor:{name}:certs:*`. **Assistant tool:** `get_component_status` operationId: get_supervisors_byName_certs_status parameters: - description: >- The supervisor's name, as registered under Administration → Supervisors. in: path name: name required: true schema: type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/api.certsStatusResponse' description: Success. '401': description: Not authenticated — no valid session cookie or API token. '403': description: >- Authenticated, but no policy allows this action on this resource. The body carries the action and resource that were evaluated. components: schemas: api.certsStatusResponse: properties: appliancePKI: $ref: '#/components/schemas/api.certsAppliancePKIStatus' certManager: $ref: '#/components/schemas/api.helmReleaseStatus' coreWebhook: $ref: '#/components/schemas/api.certsCoreWebhookStatus' desired: $ref: '#/components/schemas/api.certsDesiredState' gatewayIssuer: $ref: '#/components/schemas/api.certsGatewayIssuerStatus' issuer: $ref: '#/components/schemas/api.certsClusterIssuerStatus' signingIssuer: $ref: '#/components/schemas/api.certsSigningIssuerStatus' supervisorDomain: type: string webhook: $ref: '#/components/schemas/api.helmReleaseStatus' required: - certManager - coreWebhook - issuer - signingIssuer - webhook type: object x-go-type: backend/internal/api.certsStatusResponse api.certsAppliancePKIStatus: properties: available: type: boolean grantable: type: boolean intermediate: type: string mount: type: string notAfter: type: string reason: type: string root: type: string required: - available - grantable type: object x-go-type: backend/internal/api.certsAppliancePKIStatus api.helmReleaseStatus: properties: conditions: items: $ref: '#/components/schemas/api.helmReleaseCondition' type: array error: type: string exists: type: boolean installFailures: format: int64 type: integer lastAttemptedRevision: type: string message: type: string ready: type: boolean reason: type: string revision: type: string upgradeFailures: format: int64 type: integer required: - exists - ready type: object x-go-type: backend/internal/api.helmReleaseStatus api.certsCoreWebhookStatus: properties: exists: type: boolean message: type: string ready: type: boolean reason: type: string via: type: string required: - exists - ready type: object x-go-type: backend/internal/api.certsCoreWebhookStatus api.certsDesiredState: properties: acmeEmail: type: string acmeServer: type: string adcsCaBundle: type: string adcsInsecure: type: boolean adcsTemplate: type: string adcsUrl: type: string certDomain: type: string dnsProvider: type: string enableGatewayAPI: type: boolean issuerName: type: string issuerType: type: string webhookGroupName: type: string required: - acmeEmail - acmeServer - certDomain - enableGatewayAPI - issuerName - issuerType - webhookGroupName type: object x-go-type: backend/internal/api.certsDesiredState api.certsGatewayIssuerStatus: properties: active: type: string gateway: type: string mismatch: type: boolean missing: type: boolean pinned: type: string required: - mismatch - missing type: object x-go-type: backend/internal/api.certsGatewayIssuerStatus api.certsClusterIssuerStatus: properties: exists: type: boolean message: type: string ready: type: boolean reason: type: string required: - exists - ready type: object x-go-type: backend/internal/api.certsClusterIssuerStatus api.certsSigningIssuerStatus: properties: fixed: type: boolean missing: type: boolean name: type: string source: type: string required: - fixed - missing type: object x-go-type: backend/internal/api.certsSigningIssuerStatus api.helmReleaseCondition: properties: message: type: string reason: type: string status: type: string type: type: string required: - message - reason - status - type type: object x-go-type: backend/internal/api.helmReleaseCondition securitySchemes: sessionCookie: description: >- The session cookie issued by the OIDC sign-in flow. This is what a browser uses. in: cookie name: k8s-gate-session type: apiKey bearerToken: description: >- An API token, minted from your own identity page. A token carries the IAM groups you held **when it was minted**, and cannot bypass deletion approval — except for guest clusters inside a project that same token created. scheme: bearer type: http ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.