1. Packages
  2. Google Cloud Native
  3. API Docs
  4. certificatemanager
  5. certificatemanager/v1
  6. CertificateIssuanceConfig

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

google-native.certificatemanager/v1.CertificateIssuanceConfig

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

    Creates a new CertificateIssuanceConfig in a given project and location.

    Create CertificateIssuanceConfig Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CertificateIssuanceConfig(name: string, args: CertificateIssuanceConfigArgs, opts?: CustomResourceOptions);
    @overload
    def CertificateIssuanceConfig(resource_name: str,
                                  args: CertificateIssuanceConfigArgs,
                                  opts: Optional[ResourceOptions] = None)
    
    @overload
    def CertificateIssuanceConfig(resource_name: str,
                                  opts: Optional[ResourceOptions] = None,
                                  certificate_authority_config: Optional[CertificateAuthorityConfigArgs] = None,
                                  certificate_issuance_config_id: Optional[str] = None,
                                  key_algorithm: Optional[CertificateIssuanceConfigKeyAlgorithm] = None,
                                  lifetime: Optional[str] = None,
                                  rotation_window_percentage: Optional[int] = None,
                                  description: Optional[str] = None,
                                  labels: Optional[Mapping[str, str]] = None,
                                  location: Optional[str] = None,
                                  name: Optional[str] = None,
                                  project: Optional[str] = None)
    func NewCertificateIssuanceConfig(ctx *Context, name string, args CertificateIssuanceConfigArgs, opts ...ResourceOption) (*CertificateIssuanceConfig, error)
    public CertificateIssuanceConfig(string name, CertificateIssuanceConfigArgs args, CustomResourceOptions? opts = null)
    public CertificateIssuanceConfig(String name, CertificateIssuanceConfigArgs args)
    public CertificateIssuanceConfig(String name, CertificateIssuanceConfigArgs args, CustomResourceOptions options)
    
    type: google-native:certificatemanager/v1:CertificateIssuanceConfig
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args CertificateIssuanceConfigArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CertificateIssuanceConfigArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CertificateIssuanceConfigArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CertificateIssuanceConfigArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CertificateIssuanceConfigArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var certificateIssuanceConfigResource = new GoogleNative.CertificateManager.V1.CertificateIssuanceConfig("certificateIssuanceConfigResource", new()
    {
        CertificateAuthorityConfig = new GoogleNative.CertificateManager.V1.Inputs.CertificateAuthorityConfigArgs
        {
            CertificateAuthorityServiceConfig = new GoogleNative.CertificateManager.V1.Inputs.CertificateAuthorityServiceConfigArgs
            {
                CaPool = "string",
            },
        },
        CertificateIssuanceConfigId = "string",
        KeyAlgorithm = GoogleNative.CertificateManager.V1.CertificateIssuanceConfigKeyAlgorithm.KeyAlgorithmUnspecified,
        Lifetime = "string",
        RotationWindowPercentage = 0,
        Description = "string",
        Labels = 
        {
            { "string", "string" },
        },
        Location = "string",
        Name = "string",
        Project = "string",
    });
    
    example, err := certificatemanager.NewCertificateIssuanceConfig(ctx, "certificateIssuanceConfigResource", &certificatemanager.CertificateIssuanceConfigArgs{
    	CertificateAuthorityConfig: &certificatemanager.CertificateAuthorityConfigArgs{
    		CertificateAuthorityServiceConfig: &certificatemanager.CertificateAuthorityServiceConfigArgs{
    			CaPool: pulumi.String("string"),
    		},
    	},
    	CertificateIssuanceConfigId: pulumi.String("string"),
    	KeyAlgorithm:                certificatemanager.CertificateIssuanceConfigKeyAlgorithmKeyAlgorithmUnspecified,
    	Lifetime:                    pulumi.String("string"),
    	RotationWindowPercentage:    pulumi.Int(0),
    	Description:                 pulumi.String("string"),
    	Labels: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	Location: pulumi.String("string"),
    	Name:     pulumi.String("string"),
    	Project:  pulumi.String("string"),
    })
    
    var certificateIssuanceConfigResource = new CertificateIssuanceConfig("certificateIssuanceConfigResource", CertificateIssuanceConfigArgs.builder()
        .certificateAuthorityConfig(CertificateAuthorityConfigArgs.builder()
            .certificateAuthorityServiceConfig(CertificateAuthorityServiceConfigArgs.builder()
                .caPool("string")
                .build())
            .build())
        .certificateIssuanceConfigId("string")
        .keyAlgorithm("KEY_ALGORITHM_UNSPECIFIED")
        .lifetime("string")
        .rotationWindowPercentage(0)
        .description("string")
        .labels(Map.of("string", "string"))
        .location("string")
        .name("string")
        .project("string")
        .build());
    
    certificate_issuance_config_resource = google_native.certificatemanager.v1.CertificateIssuanceConfig("certificateIssuanceConfigResource",
        certificate_authority_config={
            "certificate_authority_service_config": {
                "ca_pool": "string",
            },
        },
        certificate_issuance_config_id="string",
        key_algorithm=google_native.certificatemanager.v1.CertificateIssuanceConfigKeyAlgorithm.KEY_ALGORITHM_UNSPECIFIED,
        lifetime="string",
        rotation_window_percentage=0,
        description="string",
        labels={
            "string": "string",
        },
        location="string",
        name="string",
        project="string")
    
    const certificateIssuanceConfigResource = new google_native.certificatemanager.v1.CertificateIssuanceConfig("certificateIssuanceConfigResource", {
        certificateAuthorityConfig: {
            certificateAuthorityServiceConfig: {
                caPool: "string",
            },
        },
        certificateIssuanceConfigId: "string",
        keyAlgorithm: google_native.certificatemanager.v1.CertificateIssuanceConfigKeyAlgorithm.KeyAlgorithmUnspecified,
        lifetime: "string",
        rotationWindowPercentage: 0,
        description: "string",
        labels: {
            string: "string",
        },
        location: "string",
        name: "string",
        project: "string",
    });
    
    type: google-native:certificatemanager/v1:CertificateIssuanceConfig
    properties:
        certificateAuthorityConfig:
            certificateAuthorityServiceConfig:
                caPool: string
        certificateIssuanceConfigId: string
        description: string
        keyAlgorithm: KEY_ALGORITHM_UNSPECIFIED
        labels:
            string: string
        lifetime: string
        location: string
        name: string
        project: string
        rotationWindowPercentage: 0
    

    CertificateIssuanceConfig Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CertificateIssuanceConfig resource accepts the following input properties:

    CertificateAuthorityConfig Pulumi.GoogleNative.CertificateManager.V1.Inputs.CertificateAuthorityConfig
    The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
    CertificateIssuanceConfigId string
    Required. A user-provided name of the certificate config.
    KeyAlgorithm Pulumi.GoogleNative.CertificateManager.V1.CertificateIssuanceConfigKeyAlgorithm
    The key algorithm to use when generating the private key.
    Lifetime string
    Workload certificate lifetime requested.
    RotationWindowPercentage int
    Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
    Description string
    One or more paragraphs of text description of a CertificateIssuanceConfig.
    Labels Dictionary<string, string>
    Set of labels associated with a CertificateIssuanceConfig.
    Location string
    Name string
    A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
    Project string
    CertificateAuthorityConfig CertificateAuthorityConfigArgs
    The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
    CertificateIssuanceConfigId string
    Required. A user-provided name of the certificate config.
    KeyAlgorithm CertificateIssuanceConfigKeyAlgorithm
    The key algorithm to use when generating the private key.
    Lifetime string
    Workload certificate lifetime requested.
    RotationWindowPercentage int
    Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
    Description string
    One or more paragraphs of text description of a CertificateIssuanceConfig.
    Labels map[string]string
    Set of labels associated with a CertificateIssuanceConfig.
    Location string
    Name string
    A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
    Project string
    certificateAuthorityConfig CertificateAuthorityConfig
    The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
    certificateIssuanceConfigId String
    Required. A user-provided name of the certificate config.
    keyAlgorithm CertificateIssuanceConfigKeyAlgorithm
    The key algorithm to use when generating the private key.
    lifetime String
    Workload certificate lifetime requested.
    rotationWindowPercentage Integer
    Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
    description String
    One or more paragraphs of text description of a CertificateIssuanceConfig.
    labels Map<String,String>
    Set of labels associated with a CertificateIssuanceConfig.
    location String
    name String
    A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
    project String
    certificateAuthorityConfig CertificateAuthorityConfig
    The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
    certificateIssuanceConfigId string
    Required. A user-provided name of the certificate config.
    keyAlgorithm CertificateIssuanceConfigKeyAlgorithm
    The key algorithm to use when generating the private key.
    lifetime string
    Workload certificate lifetime requested.
    rotationWindowPercentage number
    Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
    description string
    One or more paragraphs of text description of a CertificateIssuanceConfig.
    labels {[key: string]: string}
    Set of labels associated with a CertificateIssuanceConfig.
    location string
    name string
    A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
    project string
    certificate_authority_config CertificateAuthorityConfigArgs
    The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
    certificate_issuance_config_id str
    Required. A user-provided name of the certificate config.
    key_algorithm CertificateIssuanceConfigKeyAlgorithm
    The key algorithm to use when generating the private key.
    lifetime str
    Workload certificate lifetime requested.
    rotation_window_percentage int
    Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
    description str
    One or more paragraphs of text description of a CertificateIssuanceConfig.
    labels Mapping[str, str]
    Set of labels associated with a CertificateIssuanceConfig.
    location str
    name str
    A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
    project str
    certificateAuthorityConfig Property Map
    The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
    certificateIssuanceConfigId String
    Required. A user-provided name of the certificate config.
    keyAlgorithm "KEY_ALGORITHM_UNSPECIFIED" | "RSA_2048" | "ECDSA_P256"
    The key algorithm to use when generating the private key.
    lifetime String
    Workload certificate lifetime requested.
    rotationWindowPercentage Number
    Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
    description String
    One or more paragraphs of text description of a CertificateIssuanceConfig.
    labels Map<String>
    Set of labels associated with a CertificateIssuanceConfig.
    location String
    name String
    A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
    project String

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CertificateIssuanceConfig resource produces the following output properties:

    CreateTime string
    The creation timestamp of a CertificateIssuanceConfig.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdateTime string
    The last update timestamp of a CertificateIssuanceConfig.
    CreateTime string
    The creation timestamp of a CertificateIssuanceConfig.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdateTime string
    The last update timestamp of a CertificateIssuanceConfig.
    createTime String
    The creation timestamp of a CertificateIssuanceConfig.
    id String
    The provider-assigned unique ID for this managed resource.
    updateTime String
    The last update timestamp of a CertificateIssuanceConfig.
    createTime string
    The creation timestamp of a CertificateIssuanceConfig.
    id string
    The provider-assigned unique ID for this managed resource.
    updateTime string
    The last update timestamp of a CertificateIssuanceConfig.
    create_time str
    The creation timestamp of a CertificateIssuanceConfig.
    id str
    The provider-assigned unique ID for this managed resource.
    update_time str
    The last update timestamp of a CertificateIssuanceConfig.
    createTime String
    The creation timestamp of a CertificateIssuanceConfig.
    id String
    The provider-assigned unique ID for this managed resource.
    updateTime String
    The last update timestamp of a CertificateIssuanceConfig.

    Supporting Types

    CertificateAuthorityConfig, CertificateAuthorityConfigArgs

    CertificateAuthorityServiceConfig CertificateAuthorityServiceConfig
    Defines a CertificateAuthorityServiceConfig.
    certificateAuthorityServiceConfig CertificateAuthorityServiceConfig
    Defines a CertificateAuthorityServiceConfig.
    certificateAuthorityServiceConfig CertificateAuthorityServiceConfig
    Defines a CertificateAuthorityServiceConfig.
    certificateAuthorityServiceConfig Property Map
    Defines a CertificateAuthorityServiceConfig.

    CertificateAuthorityConfigResponse, CertificateAuthorityConfigResponseArgs

    certificateAuthorityServiceConfig Property Map
    Defines a CertificateAuthorityServiceConfig.

    CertificateAuthorityServiceConfig, CertificateAuthorityServiceConfigArgs

    CaPool string
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    CaPool string
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    caPool String
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    caPool string
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    ca_pool str
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    caPool String
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

    CertificateAuthorityServiceConfigResponse, CertificateAuthorityServiceConfigResponseArgs

    CaPool string
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    CaPool string
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    caPool String
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    caPool string
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    ca_pool str
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
    caPool String
    A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

    CertificateIssuanceConfigKeyAlgorithm, CertificateIssuanceConfigKeyAlgorithmArgs

    KeyAlgorithmUnspecified
    KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
    Rsa2048
    RSA_2048Specifies RSA with a 2048-bit modulus.
    EcdsaP256
    ECDSA_P256Specifies ECDSA with curve P256.
    CertificateIssuanceConfigKeyAlgorithmKeyAlgorithmUnspecified
    KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
    CertificateIssuanceConfigKeyAlgorithmRsa2048
    RSA_2048Specifies RSA with a 2048-bit modulus.
    CertificateIssuanceConfigKeyAlgorithmEcdsaP256
    ECDSA_P256Specifies ECDSA with curve P256.
    KeyAlgorithmUnspecified
    KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
    Rsa2048
    RSA_2048Specifies RSA with a 2048-bit modulus.
    EcdsaP256
    ECDSA_P256Specifies ECDSA with curve P256.
    KeyAlgorithmUnspecified
    KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
    Rsa2048
    RSA_2048Specifies RSA with a 2048-bit modulus.
    EcdsaP256
    ECDSA_P256Specifies ECDSA with curve P256.
    KEY_ALGORITHM_UNSPECIFIED
    KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
    RSA2048
    RSA_2048Specifies RSA with a 2048-bit modulus.
    ECDSA_P256
    ECDSA_P256Specifies ECDSA with curve P256.
    "KEY_ALGORITHM_UNSPECIFIED"
    KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
    "RSA_2048"
    RSA_2048Specifies RSA with a 2048-bit modulus.
    "ECDSA_P256"
    ECDSA_P256Specifies ECDSA with curve P256.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi