Google Cloud Native is in preview. Google Cloud Classic is fully supported.
google-native.certificatemanager/v1.CertificateIssuanceConfig
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Creates a new CertificateIssuanceConfig in a given project and location.
Create CertificateIssuanceConfig Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new CertificateIssuanceConfig(name: string, args: CertificateIssuanceConfigArgs, opts?: CustomResourceOptions);
@overload
def CertificateIssuanceConfig(resource_name: str,
args: CertificateIssuanceConfigArgs,
opts: Optional[ResourceOptions] = None)
@overload
def CertificateIssuanceConfig(resource_name: str,
opts: Optional[ResourceOptions] = None,
certificate_authority_config: Optional[CertificateAuthorityConfigArgs] = None,
certificate_issuance_config_id: Optional[str] = None,
key_algorithm: Optional[CertificateIssuanceConfigKeyAlgorithm] = None,
lifetime: Optional[str] = None,
rotation_window_percentage: Optional[int] = None,
description: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
location: Optional[str] = None,
name: Optional[str] = None,
project: Optional[str] = None)
func NewCertificateIssuanceConfig(ctx *Context, name string, args CertificateIssuanceConfigArgs, opts ...ResourceOption) (*CertificateIssuanceConfig, error)
public CertificateIssuanceConfig(string name, CertificateIssuanceConfigArgs args, CustomResourceOptions? opts = null)
public CertificateIssuanceConfig(String name, CertificateIssuanceConfigArgs args)
public CertificateIssuanceConfig(String name, CertificateIssuanceConfigArgs args, CustomResourceOptions options)
type: google-native:certificatemanager/v1:CertificateIssuanceConfig
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var certificateIssuanceConfigResource = new GoogleNative.CertificateManager.V1.CertificateIssuanceConfig("certificateIssuanceConfigResource", new()
{
CertificateAuthorityConfig = new GoogleNative.CertificateManager.V1.Inputs.CertificateAuthorityConfigArgs
{
CertificateAuthorityServiceConfig = new GoogleNative.CertificateManager.V1.Inputs.CertificateAuthorityServiceConfigArgs
{
CaPool = "string",
},
},
CertificateIssuanceConfigId = "string",
KeyAlgorithm = GoogleNative.CertificateManager.V1.CertificateIssuanceConfigKeyAlgorithm.KeyAlgorithmUnspecified,
Lifetime = "string",
RotationWindowPercentage = 0,
Description = "string",
Labels =
{
{ "string", "string" },
},
Location = "string",
Name = "string",
Project = "string",
});
example, err := certificatemanager.NewCertificateIssuanceConfig(ctx, "certificateIssuanceConfigResource", &certificatemanager.CertificateIssuanceConfigArgs{
CertificateAuthorityConfig: &certificatemanager.CertificateAuthorityConfigArgs{
CertificateAuthorityServiceConfig: &certificatemanager.CertificateAuthorityServiceConfigArgs{
CaPool: pulumi.String("string"),
},
},
CertificateIssuanceConfigId: pulumi.String("string"),
KeyAlgorithm: certificatemanager.CertificateIssuanceConfigKeyAlgorithmKeyAlgorithmUnspecified,
Lifetime: pulumi.String("string"),
RotationWindowPercentage: pulumi.Int(0),
Description: pulumi.String("string"),
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
Location: pulumi.String("string"),
Name: pulumi.String("string"),
Project: pulumi.String("string"),
})
var certificateIssuanceConfigResource = new CertificateIssuanceConfig("certificateIssuanceConfigResource", CertificateIssuanceConfigArgs.builder()
.certificateAuthorityConfig(CertificateAuthorityConfigArgs.builder()
.certificateAuthorityServiceConfig(CertificateAuthorityServiceConfigArgs.builder()
.caPool("string")
.build())
.build())
.certificateIssuanceConfigId("string")
.keyAlgorithm("KEY_ALGORITHM_UNSPECIFIED")
.lifetime("string")
.rotationWindowPercentage(0)
.description("string")
.labels(Map.of("string", "string"))
.location("string")
.name("string")
.project("string")
.build());
certificate_issuance_config_resource = google_native.certificatemanager.v1.CertificateIssuanceConfig("certificateIssuanceConfigResource",
certificate_authority_config={
"certificate_authority_service_config": {
"ca_pool": "string",
},
},
certificate_issuance_config_id="string",
key_algorithm=google_native.certificatemanager.v1.CertificateIssuanceConfigKeyAlgorithm.KEY_ALGORITHM_UNSPECIFIED,
lifetime="string",
rotation_window_percentage=0,
description="string",
labels={
"string": "string",
},
location="string",
name="string",
project="string")
const certificateIssuanceConfigResource = new google_native.certificatemanager.v1.CertificateIssuanceConfig("certificateIssuanceConfigResource", {
certificateAuthorityConfig: {
certificateAuthorityServiceConfig: {
caPool: "string",
},
},
certificateIssuanceConfigId: "string",
keyAlgorithm: google_native.certificatemanager.v1.CertificateIssuanceConfigKeyAlgorithm.KeyAlgorithmUnspecified,
lifetime: "string",
rotationWindowPercentage: 0,
description: "string",
labels: {
string: "string",
},
location: "string",
name: "string",
project: "string",
});
type: google-native:certificatemanager/v1:CertificateIssuanceConfig
properties:
certificateAuthorityConfig:
certificateAuthorityServiceConfig:
caPool: string
certificateIssuanceConfigId: string
description: string
keyAlgorithm: KEY_ALGORITHM_UNSPECIFIED
labels:
string: string
lifetime: string
location: string
name: string
project: string
rotationWindowPercentage: 0
CertificateIssuanceConfig Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The CertificateIssuanceConfig resource accepts the following input properties:
- Pulumi.
Google Native. Certificate Manager. V1. Inputs. Certificate Authority Config - The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- Certificate
Issuance stringConfig Id - Required. A user-provided name of the certificate config.
- Key
Algorithm Pulumi.Google Native. Certificate Manager. V1. Certificate Issuance Config Key Algorithm - The key algorithm to use when generating the private key.
- Lifetime string
- Workload certificate lifetime requested.
- Rotation
Window intPercentage - Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- Description string
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- Labels Dictionary<string, string>
- Set of labels associated with a CertificateIssuanceConfig.
- Location string
- Name string
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern
projects/*/locations/*/certificateIssuanceConfigs/*
. - Project string
- Certificate
Authority Config Args - The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- Certificate
Issuance stringConfig Id - Required. A user-provided name of the certificate config.
- Key
Algorithm CertificateIssuance Config Key Algorithm - The key algorithm to use when generating the private key.
- Lifetime string
- Workload certificate lifetime requested.
- Rotation
Window intPercentage - Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- Description string
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- Labels map[string]string
- Set of labels associated with a CertificateIssuanceConfig.
- Location string
- Name string
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern
projects/*/locations/*/certificateIssuanceConfigs/*
. - Project string
- Certificate
Authority Config - The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- certificate
Issuance StringConfig Id - Required. A user-provided name of the certificate config.
- key
Algorithm CertificateIssuance Config Key Algorithm - The key algorithm to use when generating the private key.
- lifetime String
- Workload certificate lifetime requested.
- rotation
Window IntegerPercentage - Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- description String
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- labels Map<String,String>
- Set of labels associated with a CertificateIssuanceConfig.
- location String
- name String
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern
projects/*/locations/*/certificateIssuanceConfigs/*
. - project String
- Certificate
Authority Config - The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- certificate
Issuance stringConfig Id - Required. A user-provided name of the certificate config.
- key
Algorithm CertificateIssuance Config Key Algorithm - The key algorithm to use when generating the private key.
- lifetime string
- Workload certificate lifetime requested.
- rotation
Window numberPercentage - Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- description string
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- labels {[key: string]: string}
- Set of labels associated with a CertificateIssuanceConfig.
- location string
- name string
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern
projects/*/locations/*/certificateIssuanceConfigs/*
. - project string
- Certificate
Authority Config Args - The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- certificate_
issuance_ strconfig_ id - Required. A user-provided name of the certificate config.
- key_
algorithm CertificateIssuance Config Key Algorithm - The key algorithm to use when generating the private key.
- lifetime str
- Workload certificate lifetime requested.
- rotation_
window_ intpercentage - Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- description str
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- labels Mapping[str, str]
- Set of labels associated with a CertificateIssuanceConfig.
- location str
- name str
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern
projects/*/locations/*/certificateIssuanceConfigs/*
. - project str
- Property Map
- The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- certificate
Issuance StringConfig Id - Required. A user-provided name of the certificate config.
- key
Algorithm "KEY_ALGORITHM_UNSPECIFIED" | "RSA_2048" | "ECDSA_P256" - The key algorithm to use when generating the private key.
- lifetime String
- Workload certificate lifetime requested.
- rotation
Window NumberPercentage - Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- description String
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- labels Map<String>
- Set of labels associated with a CertificateIssuanceConfig.
- location String
- name String
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern
projects/*/locations/*/certificateIssuanceConfigs/*
. - project String
Outputs
All input properties are implicitly available as output properties. Additionally, the CertificateIssuanceConfig resource produces the following output properties:
- Create
Time string - The creation timestamp of a CertificateIssuanceConfig.
- Id string
- The provider-assigned unique ID for this managed resource.
- Update
Time string - The last update timestamp of a CertificateIssuanceConfig.
- Create
Time string - The creation timestamp of a CertificateIssuanceConfig.
- Id string
- The provider-assigned unique ID for this managed resource.
- Update
Time string - The last update timestamp of a CertificateIssuanceConfig.
- create
Time String - The creation timestamp of a CertificateIssuanceConfig.
- id String
- The provider-assigned unique ID for this managed resource.
- update
Time String - The last update timestamp of a CertificateIssuanceConfig.
- create
Time string - The creation timestamp of a CertificateIssuanceConfig.
- id string
- The provider-assigned unique ID for this managed resource.
- update
Time string - The last update timestamp of a CertificateIssuanceConfig.
- create_
time str - The creation timestamp of a CertificateIssuanceConfig.
- id str
- The provider-assigned unique ID for this managed resource.
- update_
time str - The last update timestamp of a CertificateIssuanceConfig.
- create
Time String - The creation timestamp of a CertificateIssuanceConfig.
- id String
- The provider-assigned unique ID for this managed resource.
- update
Time String - The last update timestamp of a CertificateIssuanceConfig.
Supporting Types
CertificateAuthorityConfig, CertificateAuthorityConfigArgs
- Pulumi.
Google Native. Certificate Manager. V1. Inputs. Certificate Authority Service Config - Defines a CertificateAuthorityServiceConfig.
- Certificate
Authority Service Config - Defines a CertificateAuthorityServiceConfig.
- Certificate
Authority Service Config - Defines a CertificateAuthorityServiceConfig.
- Certificate
Authority Service Config - Defines a CertificateAuthorityServiceConfig.
- Certificate
Authority Service Config - Defines a CertificateAuthorityServiceConfig.
- Property Map
- Defines a CertificateAuthorityServiceConfig.
CertificateAuthorityConfigResponse, CertificateAuthorityConfigResponseArgs
- Pulumi.
Google Native. Certificate Manager. V1. Inputs. Certificate Authority Service Config Response - Defines a CertificateAuthorityServiceConfig.
- Certificate
Authority Service Config Response - Defines a CertificateAuthorityServiceConfig.
- Certificate
Authority Service Config Response - Defines a CertificateAuthorityServiceConfig.
- Certificate
Authority Service Config Response - Defines a CertificateAuthorityServiceConfig.
- Certificate
Authority Service Config Response - Defines a CertificateAuthorityServiceConfig.
- Property Map
- Defines a CertificateAuthorityServiceConfig.
CertificateAuthorityServiceConfig, CertificateAuthorityServiceConfigArgs
- Ca
Pool string - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- Ca
Pool string - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca
Pool String - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca
Pool string - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca_
pool str - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca
Pool String - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
CertificateAuthorityServiceConfigResponse, CertificateAuthorityServiceConfigResponseArgs
- Ca
Pool string - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- Ca
Pool string - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca
Pool String - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca
Pool string - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca_
pool str - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca
Pool String - A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
CertificateIssuanceConfigKeyAlgorithm, CertificateIssuanceConfigKeyAlgorithmArgs
- Key
Algorithm Unspecified - KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- Rsa2048
- RSA_2048Specifies RSA with a 2048-bit modulus.
- Ecdsa
P256 - ECDSA_P256Specifies ECDSA with curve P256.
- Certificate
Issuance Config Key Algorithm Key Algorithm Unspecified - KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- Certificate
Issuance Config Key Algorithm Rsa2048 - RSA_2048Specifies RSA with a 2048-bit modulus.
- Certificate
Issuance Config Key Algorithm Ecdsa P256 - ECDSA_P256Specifies ECDSA with curve P256.
- Key
Algorithm Unspecified - KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- Rsa2048
- RSA_2048Specifies RSA with a 2048-bit modulus.
- Ecdsa
P256 - ECDSA_P256Specifies ECDSA with curve P256.
- Key
Algorithm Unspecified - KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- Rsa2048
- RSA_2048Specifies RSA with a 2048-bit modulus.
- Ecdsa
P256 - ECDSA_P256Specifies ECDSA with curve P256.
- KEY_ALGORITHM_UNSPECIFIED
- KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- RSA2048
- RSA_2048Specifies RSA with a 2048-bit modulus.
- ECDSA_P256
- ECDSA_P256Specifies ECDSA with curve P256.
- "KEY_ALGORITHM_UNSPECIFIED"
- KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- "RSA_2048"
- RSA_2048Specifies RSA with a 2048-bit modulus.
- "ECDSA_P256"
- ECDSA_P256Specifies ECDSA with curve P256.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.