fastly.TlsSubscription
Explore with Pulumi AI
Enables TLS on a domain using a certificate managed by Fastly.
DNS records need to be modified on the domain being secured, in order to respond to the ACME domain ownership challenge.
There are two options for doing this: the managed_dns_challenges
, which is the default method; and the managed_http_challenges
, which points production traffic to Fastly.
See the Fastly documentation for more information on verifying domain ownership.
The examples below demonstrate usage with AWS Route53 to configure DNS, and the fastly.TlsSubscriptionValidation
resource to wait for validation to complete.
Create TlsSubscription Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new TlsSubscription(name: string, args: TlsSubscriptionArgs, opts?: CustomResourceOptions);
@overload
def TlsSubscription(resource_name: str,
args: TlsSubscriptionArgs,
opts: Optional[ResourceOptions] = None)
@overload
def TlsSubscription(resource_name: str,
opts: Optional[ResourceOptions] = None,
certificate_authority: Optional[str] = None,
domains: Optional[Sequence[str]] = None,
common_name: Optional[str] = None,
configuration_id: Optional[str] = None,
force_destroy: Optional[bool] = None,
force_update: Optional[bool] = None)
func NewTlsSubscription(ctx *Context, name string, args TlsSubscriptionArgs, opts ...ResourceOption) (*TlsSubscription, error)
public TlsSubscription(string name, TlsSubscriptionArgs args, CustomResourceOptions? opts = null)
public TlsSubscription(String name, TlsSubscriptionArgs args)
public TlsSubscription(String name, TlsSubscriptionArgs args, CustomResourceOptions options)
type: fastly:TlsSubscription
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args TlsSubscriptionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args TlsSubscriptionArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args TlsSubscriptionArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args TlsSubscriptionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args TlsSubscriptionArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var tlsSubscriptionResource = new Fastly.TlsSubscription("tlsSubscriptionResource", new()
{
CertificateAuthority = "string",
Domains = new[]
{
"string",
},
CommonName = "string",
ConfigurationId = "string",
ForceDestroy = false,
ForceUpdate = false,
});
example, err := fastly.NewTlsSubscription(ctx, "tlsSubscriptionResource", &fastly.TlsSubscriptionArgs{
CertificateAuthority: pulumi.String("string"),
Domains: pulumi.StringArray{
pulumi.String("string"),
},
CommonName: pulumi.String("string"),
ConfigurationId: pulumi.String("string"),
ForceDestroy: pulumi.Bool(false),
ForceUpdate: pulumi.Bool(false),
})
var tlsSubscriptionResource = new TlsSubscription("tlsSubscriptionResource", TlsSubscriptionArgs.builder()
.certificateAuthority("string")
.domains("string")
.commonName("string")
.configurationId("string")
.forceDestroy(false)
.forceUpdate(false)
.build());
tls_subscription_resource = fastly.TlsSubscription("tlsSubscriptionResource",
certificate_authority="string",
domains=["string"],
common_name="string",
configuration_id="string",
force_destroy=False,
force_update=False)
const tlsSubscriptionResource = new fastly.TlsSubscription("tlsSubscriptionResource", {
certificateAuthority: "string",
domains: ["string"],
commonName: "string",
configurationId: "string",
forceDestroy: false,
forceUpdate: false,
});
type: fastly:TlsSubscription
properties:
certificateAuthority: string
commonName: string
configurationId: string
domains:
- string
forceDestroy: false
forceUpdate: false
TlsSubscription Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The TlsSubscription resource accepts the following input properties:
- string
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - Domains List<string>
- List of domains on which to enable TLS.
- Common
Name string - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- Configuration
Id string - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- Force
Destroy bool Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- Force
Update bool - Always update subscription, even when active domains are present. Defaults to false.
- string
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - Domains []string
- List of domains on which to enable TLS.
- Common
Name string - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- Configuration
Id string - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- Force
Destroy bool Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- Force
Update bool - Always update subscription, even when active domains are present. Defaults to false.
- String
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - domains List<String>
- List of domains on which to enable TLS.
- common
Name String - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- configuration
Id String - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- force
Destroy Boolean Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- force
Update Boolean - Always update subscription, even when active domains are present. Defaults to false.
- string
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - domains string[]
- List of domains on which to enable TLS.
- common
Name string - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- configuration
Id string - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- force
Destroy boolean Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- force
Update boolean - Always update subscription, even when active domains are present. Defaults to false.
- str
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - domains Sequence[str]
- List of domains on which to enable TLS.
- common_
name str - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- configuration_
id str - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- force_
destroy bool Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- force_
update bool - Always update subscription, even when active domains are present. Defaults to false.
- String
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - domains List<String>
- List of domains on which to enable TLS.
- common
Name String - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- configuration
Id String - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- force
Destroy Boolean Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- force
Update Boolean - Always update subscription, even when active domains are present. Defaults to false.
Outputs
All input properties are implicitly available as output properties. Additionally, the TlsSubscription resource produces the following output properties:
- Certificate
Id string - The certificate ID associated with the subscription.
- Created
At string - Timestamp (GMT) when the subscription was created.
- Id string
- The provider-assigned unique ID for this managed resource.
- Managed
Dns Dictionary<string, string>Challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- Managed
Dns List<TlsChallenges Subscription Managed Dns Challenge> - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- Managed
Http List<TlsChallenges Subscription Managed Http Challenge> - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - State string
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - Updated
At string - Timestamp (GMT) when the subscription was updated.
- Certificate
Id string - The certificate ID associated with the subscription.
- Created
At string - Timestamp (GMT) when the subscription was created.
- Id string
- The provider-assigned unique ID for this managed resource.
- Managed
Dns map[string]stringChallenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- Managed
Dns []TlsChallenges Subscription Managed Dns Challenge - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- Managed
Http []TlsChallenges Subscription Managed Http Challenge - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - State string
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - Updated
At string - Timestamp (GMT) when the subscription was updated.
- certificate
Id String - The certificate ID associated with the subscription.
- created
At String - Timestamp (GMT) when the subscription was created.
- id String
- The provider-assigned unique ID for this managed resource.
- managed
Dns Map<String,String>Challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Dns List<TlsChallenges Subscription Managed Dns Challenge> - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Http List<TlsChallenges Subscription Managed Http Challenge> - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - state String
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - updated
At String - Timestamp (GMT) when the subscription was updated.
- certificate
Id string - The certificate ID associated with the subscription.
- created
At string - Timestamp (GMT) when the subscription was created.
- id string
- The provider-assigned unique ID for this managed resource.
- managed
Dns {[key: string]: string}Challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Dns TlsChallenges Subscription Managed Dns Challenge[] - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Http TlsChallenges Subscription Managed Http Challenge[] - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - state string
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - updated
At string - Timestamp (GMT) when the subscription was updated.
- certificate_
id str - The certificate ID associated with the subscription.
- created_
at str - Timestamp (GMT) when the subscription was created.
- id str
- The provider-assigned unique ID for this managed resource.
- managed_
dns_ Mapping[str, str]challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed_
dns_ Sequence[Tlschallenges Subscription Managed Dns Challenge] - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed_
http_ Sequence[Tlschallenges Subscription Managed Http Challenge] - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - state str
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - updated_
at str - Timestamp (GMT) when the subscription was updated.
- certificate
Id String - The certificate ID associated with the subscription.
- created
At String - Timestamp (GMT) when the subscription was created.
- id String
- The provider-assigned unique ID for this managed resource.
- managed
Dns Map<String>Challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Dns List<Property Map>Challenges - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Http List<Property Map>Challenges - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - state String
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - updated
At String - Timestamp (GMT) when the subscription was updated.
Look up Existing TlsSubscription Resource
Get an existing TlsSubscription resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: TlsSubscriptionState, opts?: CustomResourceOptions): TlsSubscription
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
certificate_authority: Optional[str] = None,
certificate_id: Optional[str] = None,
common_name: Optional[str] = None,
configuration_id: Optional[str] = None,
created_at: Optional[str] = None,
domains: Optional[Sequence[str]] = None,
force_destroy: Optional[bool] = None,
force_update: Optional[bool] = None,
managed_dns_challenge: Optional[Mapping[str, str]] = None,
managed_dns_challenges: Optional[Sequence[TlsSubscriptionManagedDnsChallengeArgs]] = None,
managed_http_challenges: Optional[Sequence[TlsSubscriptionManagedHttpChallengeArgs]] = None,
state: Optional[str] = None,
updated_at: Optional[str] = None) -> TlsSubscription
func GetTlsSubscription(ctx *Context, name string, id IDInput, state *TlsSubscriptionState, opts ...ResourceOption) (*TlsSubscription, error)
public static TlsSubscription Get(string name, Input<string> id, TlsSubscriptionState? state, CustomResourceOptions? opts = null)
public static TlsSubscription get(String name, Output<String> id, TlsSubscriptionState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- string
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - Certificate
Id string - The certificate ID associated with the subscription.
- Common
Name string - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- Configuration
Id string - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- Created
At string - Timestamp (GMT) when the subscription was created.
- Domains List<string>
- List of domains on which to enable TLS.
- Force
Destroy bool Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- Force
Update bool - Always update subscription, even when active domains are present. Defaults to false.
- Managed
Dns Dictionary<string, string>Challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- Managed
Dns List<TlsChallenges Subscription Managed Dns Challenge> - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- Managed
Http List<TlsChallenges Subscription Managed Http Challenge> - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - State string
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - Updated
At string - Timestamp (GMT) when the subscription was updated.
- string
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - Certificate
Id string - The certificate ID associated with the subscription.
- Common
Name string - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- Configuration
Id string - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- Created
At string - Timestamp (GMT) when the subscription was created.
- Domains []string
- List of domains on which to enable TLS.
- Force
Destroy bool Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- Force
Update bool - Always update subscription, even when active domains are present. Defaults to false.
- Managed
Dns map[string]stringChallenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- Managed
Dns []TlsChallenges Subscription Managed Dns Challenge Args - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- Managed
Http []TlsChallenges Subscription Managed Http Challenge Args - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - State string
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - Updated
At string - Timestamp (GMT) when the subscription was updated.
- String
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - certificate
Id String - The certificate ID associated with the subscription.
- common
Name String - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- configuration
Id String - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- created
At String - Timestamp (GMT) when the subscription was created.
- domains List<String>
- List of domains on which to enable TLS.
- force
Destroy Boolean Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- force
Update Boolean - Always update subscription, even when active domains are present. Defaults to false.
- managed
Dns Map<String,String>Challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Dns List<TlsChallenges Subscription Managed Dns Challenge> - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Http List<TlsChallenges Subscription Managed Http Challenge> - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - state String
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - updated
At String - Timestamp (GMT) when the subscription was updated.
- string
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - certificate
Id string - The certificate ID associated with the subscription.
- common
Name string - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- configuration
Id string - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- created
At string - Timestamp (GMT) when the subscription was created.
- domains string[]
- List of domains on which to enable TLS.
- force
Destroy boolean Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- force
Update boolean - Always update subscription, even when active domains are present. Defaults to false.
- managed
Dns {[key: string]: string}Challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Dns TlsChallenges Subscription Managed Dns Challenge[] - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Http TlsChallenges Subscription Managed Http Challenge[] - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - state string
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - updated
At string - Timestamp (GMT) when the subscription was updated.
- str
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - certificate_
id str - The certificate ID associated with the subscription.
- common_
name str - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- configuration_
id str - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- created_
at str - Timestamp (GMT) when the subscription was created.
- domains Sequence[str]
- List of domains on which to enable TLS.
- force_
destroy bool Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- force_
update bool - Always update subscription, even when active domains are present. Defaults to false.
- managed_
dns_ Mapping[str, str]challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed_
dns_ Sequence[Tlschallenges Subscription Managed Dns Challenge Args] - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed_
http_ Sequence[Tlschallenges Subscription Managed Http Challenge Args] - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - state str
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - updated_
at str - Timestamp (GMT) when the subscription was updated.
- String
- The entity that issues and certifies the TLS certificates for your subscription. Valid values are
lets-encrypt
orglobalsign
. - certificate
Id String - The certificate ID associated with the subscription.
- common
Name String - The common name associated with the subscription generated by Fastly TLS. If you do not pass a common name on create, we will default to the first TLS domain included. If provided, the domain chosen as the common name must be included in TLS domains.
- configuration
Id String - The ID of the set of TLS configuration options that apply to the enabled domains on this subscription.
- created
At String - Timestamp (GMT) when the subscription was created.
- domains List<String>
- List of domains on which to enable TLS.
- force
Destroy Boolean Always delete subscription, even when active domains are present. Defaults to false.
!> Warning: by default, the Fastly API protects you from disabling production traffic by preventing updating or deleting subscriptions with active domains. The use of
force_update
andforce_destroy
will override these protections. Take extra care using these options if you are handling production traffic.- force
Update Boolean - Always update subscription, even when active domains are present. Defaults to false.
- managed
Dns Map<String>Challenge - The details required to configure DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Dns List<Property Map>Challenges - A list of options for configuring DNS to respond to ACME DNS challenge in order to verify domain ownership.
- managed
Http List<Property Map>Challenges - A list of options for configuring DNS to respond to ACME HTTP challenge in order to verify domain ownership. Best accessed through a
for
expression to filter the relevant record. - state String
- The current state of the subscription. The list of possible states are:
pending
,processing
,issued
, andrenewing
. - updated
At String - Timestamp (GMT) when the subscription was updated.
Supporting Types
TlsSubscriptionManagedDnsChallenge, TlsSubscriptionManagedDnsChallengeArgs
- Record
Name string - The name of the DNS record to add. For example
_acme-challenge.example.com
. - Record
Type string - The type of DNS record to add, e.g.
A
, orCNAME
. - Record
Value string - The value to which the DNS record should point, e.g.
xxxxx.fastly-validations.com
.
- Record
Name string - The name of the DNS record to add. For example
_acme-challenge.example.com
. - Record
Type string - The type of DNS record to add, e.g.
A
, orCNAME
. - Record
Value string - The value to which the DNS record should point, e.g.
xxxxx.fastly-validations.com
.
- record
Name String - The name of the DNS record to add. For example
_acme-challenge.example.com
. - record
Type String - The type of DNS record to add, e.g.
A
, orCNAME
. - record
Value String - The value to which the DNS record should point, e.g.
xxxxx.fastly-validations.com
.
- record
Name string - The name of the DNS record to add. For example
_acme-challenge.example.com
. - record
Type string - The type of DNS record to add, e.g.
A
, orCNAME
. - record
Value string - The value to which the DNS record should point, e.g.
xxxxx.fastly-validations.com
.
- record_
name str - The name of the DNS record to add. For example
_acme-challenge.example.com
. - record_
type str - The type of DNS record to add, e.g.
A
, orCNAME
. - record_
value str - The value to which the DNS record should point, e.g.
xxxxx.fastly-validations.com
.
- record
Name String - The name of the DNS record to add. For example
_acme-challenge.example.com
. - record
Type String - The type of DNS record to add, e.g.
A
, orCNAME
. - record
Value String - The value to which the DNS record should point, e.g.
xxxxx.fastly-validations.com
.
TlsSubscriptionManagedHttpChallenge, TlsSubscriptionManagedHttpChallengeArgs
- Record
Name string - The name of the DNS record to add. For example
example.com
. Best accessed through afor
expression to filter the relevant record. - Record
Type string - The type of DNS record to add, e.g.
A
, orCNAME
. - Record
Values List<string> - A list with the value(s) to which the DNS record should point.
- Record
Name string - The name of the DNS record to add. For example
example.com
. Best accessed through afor
expression to filter the relevant record. - Record
Type string - The type of DNS record to add, e.g.
A
, orCNAME
. - Record
Values []string - A list with the value(s) to which the DNS record should point.
- record
Name String - The name of the DNS record to add. For example
example.com
. Best accessed through afor
expression to filter the relevant record. - record
Type String - The type of DNS record to add, e.g.
A
, orCNAME
. - record
Values List<String> - A list with the value(s) to which the DNS record should point.
- record
Name string - The name of the DNS record to add. For example
example.com
. Best accessed through afor
expression to filter the relevant record. - record
Type string - The type of DNS record to add, e.g.
A
, orCNAME
. - record
Values string[] - A list with the value(s) to which the DNS record should point.
- record_
name str - The name of the DNS record to add. For example
example.com
. Best accessed through afor
expression to filter the relevant record. - record_
type str - The type of DNS record to add, e.g.
A
, orCNAME
. - record_
values Sequence[str] - A list with the value(s) to which the DNS record should point.
- record
Name String - The name of the DNS record to add. For example
example.com
. Best accessed through afor
expression to filter the relevant record. - record
Type String - The type of DNS record to add, e.g.
A
, orCNAME
. - record
Values List<String> - A list with the value(s) to which the DNS record should point.
Import
A subscription can be imported using its Fastly subscription ID, e.g.
$ pulumi import fastly:index/tlsSubscription:TlsSubscription demo xxxxxxxxxxx
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Fastly pulumi/pulumi-fastly
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
fastly
Terraform Provider.