1. Packages
  2. Fastly Provider
  3. API Docs
  4. TlsSubscription
Fastly v8.13.0 published on Wednesday, Nov 13, 2024 by Pulumi

fastly.TlsSubscription

Explore with Pulumi AI

fastly logo
Fastly v8.13.0 published on Wednesday, Nov 13, 2024 by Pulumi

    Enables TLS on a domain using a certificate managed by Fastly.

    DNS records need to be modified on the domain being secured, in order to respond to the ACME domain ownership challenge.

    There are two options for doing this: the managed_dns_challenges, which is the default method; and the managed_http_challenges, which points production traffic to Fastly.

    See the Fastly documentation for more information on verifying domain ownership.

    The examples below demonstrate usage with AWS Route53 to configure DNS, and the fastly.TlsSubscriptionValidation resource to wait for validation to complete.

    Create TlsSubscription Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new TlsSubscription(name: string, args: TlsSubscriptionArgs, opts?: CustomResourceOptions);
    @overload
    def TlsSubscription(resource_name: str,
                        args: TlsSubscriptionArgs,
                        opts: Optional[ResourceOptions] = None)
    
    @overload
    def TlsSubscription(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        certificate_authority: Optional[str] = None,
                        domains: Optional[Sequence[str]] = None,
                        common_name: Optional[str] = None,
                        configuration_id: Optional[str] = None,
                        force_destroy: Optional[bool] = None,
                        force_update: Optional[bool] = None)
    func NewTlsSubscription(ctx *Context, name string, args TlsSubscriptionArgs, opts ...ResourceOption) (*TlsSubscription, error)
    public TlsSubscription(string name, TlsSubscriptionArgs args, CustomResourceOptions? opts = null)
    public TlsSubscription(String name, TlsSubscriptionArgs args)
    public TlsSubscription(String name, TlsSubscriptionArgs args, CustomResourceOptions options)
    
    type: fastly:TlsSubscription
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args TlsSubscriptionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TlsSubscriptionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TlsSubscriptionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TlsSubscriptionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TlsSubscriptionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var tlsSubscriptionResource = new Fastly.TlsSubscription("tlsSubscriptionResource", new()
    {
        CertificateAuthority = "string",
        Domains = new[]
        {
            "string",
        },
        CommonName = "string",
        ConfigurationId = "string",
        ForceDestroy = false,
        ForceUpdate = false,
    });
    
    example, err := fastly.NewTlsSubscription(ctx, "tlsSubscriptionResource", &fastly.TlsSubscriptionArgs{
    	CertificateAuthority: pulumi.String("string"),
    	Domains: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	CommonName:      pulumi.String("string"),
    	ConfigurationId: pulumi.String("string"),
    	ForceDestroy:    pulumi.Bool(false),
    	ForceUpdate:     pulumi.Bool(false),
    })
    
    var tlsSubscriptionResource = new TlsSubscription("tlsSubscriptionResource", TlsSubscriptionArgs.builder()
        .certificateAuthority("string")
        .domains("string")
        .commonName("string")
        .configurationId("string")
        .forceDestroy(false)
        .forceUpdate(false)
        .build());
    
    tls_subscription_resource = fastly.TlsSubscription("tlsSubscriptionResource",
        certificate_authority="string",
        domains=["string"],
        common_name="string",
        configuration_id="string",
        force_destroy=False,
        force_update=False)
    
    const tlsSubscriptionResource = new fastly.TlsSubscription("tlsSubscriptionResource", {
        certificateAuthority: "string",
        domains: ["string"],
        commonName: "string",
        configurationId: "string",
        forceDestroy: false,
        forceUpdate: false,
    });
    
    type: fastly:TlsSubscription
    properties:
        certificateAuthority: string
        commonName: string
        configurationId: string
        domains:
            - string
        forceDestroy: false
        forceUpdate: false
    

    TlsSubscription Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The TlsSubscription resource accepts the following input properties:

    CertificateAuthority string
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    Domains List<string>
    List of domains on which to enable TLS.
    CommonName string
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    ConfigurationId string
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    ForceDestroy bool

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    ForceUpdate bool
    Always update subscription, even when active domains are present. Defaults to false.
    CertificateAuthority string
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    Domains []string
    List of domains on which to enable TLS.
    CommonName string
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    ConfigurationId string
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    ForceDestroy bool

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    ForceUpdate bool
    Always update subscription, even when active domains are present. Defaults to false.
    certificateAuthority String
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    domains List<String>
    List of domains on which to enable TLS.
    commonName String
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    configurationId String
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    forceDestroy Boolean

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    forceUpdate Boolean
    Always update subscription, even when active domains are present. Defaults to false.
    certificateAuthority string
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    domains string[]
    List of domains on which to enable TLS.
    commonName string
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    configurationId string
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    forceDestroy boolean

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    forceUpdate boolean
    Always update subscription, even when active domains are present. Defaults to false.
    certificate_authority str
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    domains Sequence[str]
    List of domains on which to enable TLS.
    common_name str
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    configuration_id str
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    force_destroy bool

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    force_update bool
    Always update subscription, even when active domains are present. Defaults to false.
    certificateAuthority String
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    domains List<String>
    List of domains on which to enable TLS.
    commonName String
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    configurationId String
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    forceDestroy Boolean

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    forceUpdate Boolean
    Always update subscription, even when active domains are present. Defaults to false.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the TlsSubscription resource produces the following output properties:

    CertificateId string
    The certificate ID associated with the subscription.
    CreatedAt string
    Timestamp (GMT) when the subscription was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    ManagedDnsChallenge Dictionary<string, string>
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    ManagedDnsChallenges List<TlsSubscriptionManagedDnsChallenge>
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    ManagedHttpChallenges List<TlsSubscriptionManagedHttpChallenge>
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    State string
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    UpdatedAt string
    Timestamp (GMT) when the subscription was updated.
    CertificateId string
    The certificate ID associated with the subscription.
    CreatedAt string
    Timestamp (GMT) when the subscription was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    ManagedDnsChallenge map[string]string
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    ManagedDnsChallenges []TlsSubscriptionManagedDnsChallenge
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    ManagedHttpChallenges []TlsSubscriptionManagedHttpChallenge
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    State string
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    UpdatedAt string
    Timestamp (GMT) when the subscription was updated.
    certificateId String
    The certificate ID associated with the subscription.
    createdAt String
    Timestamp (GMT) when the subscription was created.
    id String
    The provider-assigned unique ID for this managed resource.
    managedDnsChallenge Map<String,String>
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    managedDnsChallenges List<TlsSubscriptionManagedDnsChallenge>
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    managedHttpChallenges List<TlsSubscriptionManagedHttpChallenge>
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    state String
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    updatedAt String
    Timestamp (GMT) when the subscription was updated.
    certificateId string
    The certificate ID associated with the subscription.
    createdAt string
    Timestamp (GMT) when the subscription was created.
    id string
    The provider-assigned unique ID for this managed resource.
    managedDnsChallenge {[key: string]: string}
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    managedDnsChallenges TlsSubscriptionManagedDnsChallenge[]
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    managedHttpChallenges TlsSubscriptionManagedHttpChallenge[]
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    state string
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    updatedAt string
    Timestamp (GMT) when the subscription was updated.
    certificate_id str
    The certificate ID associated with the subscription.
    created_at str
    Timestamp (GMT) when the subscription was created.
    id str
    The provider-assigned unique ID for this managed resource.
    managed_dns_challenge Mapping[str, str]
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    managed_dns_challenges Sequence[TlsSubscriptionManagedDnsChallenge]
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    managed_http_challenges Sequence[TlsSubscriptionManagedHttpChallenge]
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    state str
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    updated_at str
    Timestamp (GMT) when the subscription was updated.
    certificateId String
    The certificate ID associated with the subscription.
    createdAt String
    Timestamp (GMT) when the subscription was created.
    id String
    The provider-assigned unique ID for this managed resource.
    managedDnsChallenge Map<String>
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    managedDnsChallenges List<Property Map>
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    managedHttpChallenges List<Property Map>
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    state String
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    updatedAt String
    Timestamp (GMT) when the subscription was updated.

    Look up Existing TlsSubscription Resource

    Get an existing TlsSubscription resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: TlsSubscriptionState, opts?: CustomResourceOptions): TlsSubscription
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            certificate_authority: Optional[str] = None,
            certificate_id: Optional[str] = None,
            common_name: Optional[str] = None,
            configuration_id: Optional[str] = None,
            created_at: Optional[str] = None,
            domains: Optional[Sequence[str]] = None,
            force_destroy: Optional[bool] = None,
            force_update: Optional[bool] = None,
            managed_dns_challenge: Optional[Mapping[str, str]] = None,
            managed_dns_challenges: Optional[Sequence[TlsSubscriptionManagedDnsChallengeArgs]] = None,
            managed_http_challenges: Optional[Sequence[TlsSubscriptionManagedHttpChallengeArgs]] = None,
            state: Optional[str] = None,
            updated_at: Optional[str] = None) -> TlsSubscription
    func GetTlsSubscription(ctx *Context, name string, id IDInput, state *TlsSubscriptionState, opts ...ResourceOption) (*TlsSubscription, error)
    public static TlsSubscription Get(string name, Input<string> id, TlsSubscriptionState? state, CustomResourceOptions? opts = null)
    public static TlsSubscription get(String name, Output<String> id, TlsSubscriptionState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CertificateAuthority string
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    CertificateId string
    The certificate ID associated with the subscription.
    CommonName string
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    ConfigurationId string
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    CreatedAt string
    Timestamp (GMT) when the subscription was created.
    Domains List<string>
    List of domains on which to enable TLS.
    ForceDestroy bool

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    ForceUpdate bool
    Always update subscription, even when active domains are present. Defaults to false.
    ManagedDnsChallenge Dictionary<string, string>
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    ManagedDnsChallenges List<TlsSubscriptionManagedDnsChallenge>
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    ManagedHttpChallenges List<TlsSubscriptionManagedHttpChallenge>
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    State string
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    UpdatedAt string
    Timestamp (GMT) when the subscription was updated.
    CertificateAuthority string
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    CertificateId string
    The certificate ID associated with the subscription.
    CommonName string
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    ConfigurationId string
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    CreatedAt string
    Timestamp (GMT) when the subscription was created.
    Domains []string
    List of domains on which to enable TLS.
    ForceDestroy bool

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    ForceUpdate bool
    Always update subscription, even when active domains are present. Defaults to false.
    ManagedDnsChallenge map[string]string
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    ManagedDnsChallenges []TlsSubscriptionManagedDnsChallengeArgs
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    ManagedHttpChallenges []TlsSubscriptionManagedHttpChallengeArgs
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    State string
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    UpdatedAt string
    Timestamp (GMT) when the subscription was updated.
    certificateAuthority String
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    certificateId String
    The certificate ID associated with the subscription.
    commonName String
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    configurationId String
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    createdAt String
    Timestamp (GMT) when the subscription was created.
    domains List<String>
    List of domains on which to enable TLS.
    forceDestroy Boolean

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    forceUpdate Boolean
    Always update subscription, even when active domains are present. Defaults to false.
    managedDnsChallenge Map<String,String>
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    managedDnsChallenges List<TlsSubscriptionManagedDnsChallenge>
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    managedHttpChallenges List<TlsSubscriptionManagedHttpChallenge>
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    state String
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    updatedAt String
    Timestamp (GMT) when the subscription was updated.
    certificateAuthority string
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    certificateId string
    The certificate ID associated with the subscription.
    commonName string
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    configurationId string
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    createdAt string
    Timestamp (GMT) when the subscription was created.
    domains string[]
    List of domains on which to enable TLS.
    forceDestroy boolean

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    forceUpdate boolean
    Always update subscription, even when active domains are present. Defaults to false.
    managedDnsChallenge {[key: string]: string}
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    managedDnsChallenges TlsSubscriptionManagedDnsChallenge[]
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    managedHttpChallenges TlsSubscriptionManagedHttpChallenge[]
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    state string
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    updatedAt string
    Timestamp (GMT) when the subscription was updated.
    certificate_authority str
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    certificate_id str
    The certificate ID associated with the subscription.
    common_name str
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    configuration_id str
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    created_at str
    Timestamp (GMT) when the subscription was created.
    domains Sequence[str]
    List of domains on which to enable TLS.
    force_destroy bool

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    force_update bool
    Always update subscription, even when active domains are present. Defaults to false.
    managed_dns_challenge Mapping[str, str]
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    managed_dns_challenges Sequence[TlsSubscriptionManagedDnsChallengeArgs]
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    managed_http_challenges Sequence[TlsSubscriptionManagedHttpChallengeArgs]
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    state str
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    updated_at str
    Timestamp (GMT) when the subscription was updated.
    certificateAuthority String
    The entity that issues and certifies the TLS certificates for your subscription. Valid values are lets-encrypt or globalsign.
    certificateId String
    The certificate ID associated with the subscription.
    commonName String
    The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
    configurationId String
    The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
    createdAt String
    Timestamp (GMT) when the subscription was created.
    domains List<String>
    List of domains on which to enable TLS.
    forceDestroy Boolean

    Always delete subscription, even when active domains are present. Defaults to false.

    !> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of force_update and force_destroy will override these protections. Take extra care using these options if you are handling production traffic.

    forceUpdate Boolean
    Always update subscription, even when active domains are present. Defaults to false.
    managedDnsChallenge Map<String>
    The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.

    Deprecated: Use 'managed_dns_challenges' attribute instead

    managedDnsChallenges List<Property Map>
    A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
    managedHttpChallenges List<Property Map>
    A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a for expression to filter the relevant record.
    state String
    The current state of the subscription. The list of possible states are: pending, processing, issued, and renewing.
    updatedAt String
    Timestamp (GMT) when the subscription was updated.

    Supporting Types

    TlsSubscriptionManagedDnsChallenge, TlsSubscriptionManagedDnsChallengeArgs

    RecordName string
    The name of the DNS record to add. For example _acme-challenge.example.com.
    RecordType string
    The type of DNS record to add, e.g. A, or CNAME.
    RecordValue string
    The value to which the DNS record should point, e.g. xxxxx.fastly-validations.com.
    RecordName string
    The name of the DNS record to add. For example _acme-challenge.example.com.
    RecordType string
    The type of DNS record to add, e.g. A, or CNAME.
    RecordValue string
    The value to which the DNS record should point, e.g. xxxxx.fastly-validations.com.
    recordName String
    The name of the DNS record to add. For example _acme-challenge.example.com.
    recordType String
    The type of DNS record to add, e.g. A, or CNAME.
    recordValue String
    The value to which the DNS record should point, e.g. xxxxx.fastly-validations.com.
    recordName string
    The name of the DNS record to add. For example _acme-challenge.example.com.
    recordType string
    The type of DNS record to add, e.g. A, or CNAME.
    recordValue string
    The value to which the DNS record should point, e.g. xxxxx.fastly-validations.com.
    record_name str
    The name of the DNS record to add. For example _acme-challenge.example.com.
    record_type str
    The type of DNS record to add, e.g. A, or CNAME.
    record_value str
    The value to which the DNS record should point, e.g. xxxxx.fastly-validations.com.
    recordName String
    The name of the DNS record to add. For example _acme-challenge.example.com.
    recordType String
    The type of DNS record to add, e.g. A, or CNAME.
    recordValue String
    The value to which the DNS record should point, e.g. xxxxx.fastly-validations.com.

    TlsSubscriptionManagedHttpChallenge, TlsSubscriptionManagedHttpChallengeArgs

    RecordName string
    The name of the DNS record to add. For example example.com. Best accessed through a for expression to filter the relevant record.
    RecordType string
    The type of DNS record to add, e.g. A, or CNAME.
    RecordValues List<string>
    A list with the value(s) to which the DNS record should point.
    RecordName string
    The name of the DNS record to add. For example example.com. Best accessed through a for expression to filter the relevant record.
    RecordType string
    The type of DNS record to add, e.g. A, or CNAME.
    RecordValues []string
    A list with the value(s) to which the DNS record should point.
    recordName String
    The name of the DNS record to add. For example example.com. Best accessed through a for expression to filter the relevant record.
    recordType String
    The type of DNS record to add, e.g. A, or CNAME.
    recordValues List<String>
    A list with the value(s) to which the DNS record should point.
    recordName string
    The name of the DNS record to add. For example example.com. Best accessed through a for expression to filter the relevant record.
    recordType string
    The type of DNS record to add, e.g. A, or CNAME.
    recordValues string[]
    A list with the value(s) to which the DNS record should point.
    record_name str
    The name of the DNS record to add. For example example.com. Best accessed through a for expression to filter the relevant record.
    record_type str
    The type of DNS record to add, e.g. A, or CNAME.
    record_values Sequence[str]
    A list with the value(s) to which the DNS record should point.
    recordName String
    The name of the DNS record to add. For example example.com. Best accessed through a for expression to filter the relevant record.
    recordType String
    The type of DNS record to add, e.g. A, or CNAME.
    recordValues List<String>
    A list with the value(s) to which the DNS record should point.

    Import

    A subscription can be imported using its Fastly subscription ID, e.g.

    $ pulumi import fastly:index/tlsSubscription:TlsSubscription demo xxxxxxxxxxx
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Fastly pulumi/pulumi-fastly
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the fastly Terraform Provider.
    fastly logo
    Fastly v8.13.0 published on Wednesday, Nov 13, 2024 by Pulumi