Google Cloud Native is in preview. Google Cloud Classic is fully supported.
google-native.certificatemanager/v1.CertificateIssuanceConfig
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Creates a new CertificateIssuanceConfig in a given project and location.
Create CertificateIssuanceConfig Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new CertificateIssuanceConfig(name: string, args: CertificateIssuanceConfigArgs, opts?: CustomResourceOptions);@overload
def CertificateIssuanceConfig(resource_name: str,
                              args: CertificateIssuanceConfigArgs,
                              opts: Optional[ResourceOptions] = None)
@overload
def CertificateIssuanceConfig(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              certificate_authority_config: Optional[CertificateAuthorityConfigArgs] = None,
                              certificate_issuance_config_id: Optional[str] = None,
                              key_algorithm: Optional[CertificateIssuanceConfigKeyAlgorithm] = None,
                              lifetime: Optional[str] = None,
                              rotation_window_percentage: Optional[int] = None,
                              description: Optional[str] = None,
                              labels: Optional[Mapping[str, str]] = None,
                              location: Optional[str] = None,
                              name: Optional[str] = None,
                              project: Optional[str] = None)func NewCertificateIssuanceConfig(ctx *Context, name string, args CertificateIssuanceConfigArgs, opts ...ResourceOption) (*CertificateIssuanceConfig, error)public CertificateIssuanceConfig(string name, CertificateIssuanceConfigArgs args, CustomResourceOptions? opts = null)
public CertificateIssuanceConfig(String name, CertificateIssuanceConfigArgs args)
public CertificateIssuanceConfig(String name, CertificateIssuanceConfigArgs args, CustomResourceOptions options)
type: google-native:certificatemanager/v1:CertificateIssuanceConfig
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CertificateIssuanceConfigArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var certificateIssuanceConfigResource = new GoogleNative.CertificateManager.V1.CertificateIssuanceConfig("certificateIssuanceConfigResource", new()
{
    CertificateAuthorityConfig = new GoogleNative.CertificateManager.V1.Inputs.CertificateAuthorityConfigArgs
    {
        CertificateAuthorityServiceConfig = new GoogleNative.CertificateManager.V1.Inputs.CertificateAuthorityServiceConfigArgs
        {
            CaPool = "string",
        },
    },
    CertificateIssuanceConfigId = "string",
    KeyAlgorithm = GoogleNative.CertificateManager.V1.CertificateIssuanceConfigKeyAlgorithm.KeyAlgorithmUnspecified,
    Lifetime = "string",
    RotationWindowPercentage = 0,
    Description = "string",
    Labels = 
    {
        { "string", "string" },
    },
    Location = "string",
    Name = "string",
    Project = "string",
});
example, err := certificatemanager.NewCertificateIssuanceConfig(ctx, "certificateIssuanceConfigResource", &certificatemanager.CertificateIssuanceConfigArgs{
	CertificateAuthorityConfig: &certificatemanager.CertificateAuthorityConfigArgs{
		CertificateAuthorityServiceConfig: &certificatemanager.CertificateAuthorityServiceConfigArgs{
			CaPool: pulumi.String("string"),
		},
	},
	CertificateIssuanceConfigId: pulumi.String("string"),
	KeyAlgorithm:                certificatemanager.CertificateIssuanceConfigKeyAlgorithmKeyAlgorithmUnspecified,
	Lifetime:                    pulumi.String("string"),
	RotationWindowPercentage:    pulumi.Int(0),
	Description:                 pulumi.String("string"),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Location: pulumi.String("string"),
	Name:     pulumi.String("string"),
	Project:  pulumi.String("string"),
})
var certificateIssuanceConfigResource = new CertificateIssuanceConfig("certificateIssuanceConfigResource", CertificateIssuanceConfigArgs.builder()
    .certificateAuthorityConfig(CertificateAuthorityConfigArgs.builder()
        .certificateAuthorityServiceConfig(CertificateAuthorityServiceConfigArgs.builder()
            .caPool("string")
            .build())
        .build())
    .certificateIssuanceConfigId("string")
    .keyAlgorithm("KEY_ALGORITHM_UNSPECIFIED")
    .lifetime("string")
    .rotationWindowPercentage(0)
    .description("string")
    .labels(Map.of("string", "string"))
    .location("string")
    .name("string")
    .project("string")
    .build());
certificate_issuance_config_resource = google_native.certificatemanager.v1.CertificateIssuanceConfig("certificateIssuanceConfigResource",
    certificate_authority_config={
        "certificate_authority_service_config": {
            "ca_pool": "string",
        },
    },
    certificate_issuance_config_id="string",
    key_algorithm=google_native.certificatemanager.v1.CertificateIssuanceConfigKeyAlgorithm.KEY_ALGORITHM_UNSPECIFIED,
    lifetime="string",
    rotation_window_percentage=0,
    description="string",
    labels={
        "string": "string",
    },
    location="string",
    name="string",
    project="string")
const certificateIssuanceConfigResource = new google_native.certificatemanager.v1.CertificateIssuanceConfig("certificateIssuanceConfigResource", {
    certificateAuthorityConfig: {
        certificateAuthorityServiceConfig: {
            caPool: "string",
        },
    },
    certificateIssuanceConfigId: "string",
    keyAlgorithm: google_native.certificatemanager.v1.CertificateIssuanceConfigKeyAlgorithm.KeyAlgorithmUnspecified,
    lifetime: "string",
    rotationWindowPercentage: 0,
    description: "string",
    labels: {
        string: "string",
    },
    location: "string",
    name: "string",
    project: "string",
});
type: google-native:certificatemanager/v1:CertificateIssuanceConfig
properties:
    certificateAuthorityConfig:
        certificateAuthorityServiceConfig:
            caPool: string
    certificateIssuanceConfigId: string
    description: string
    keyAlgorithm: KEY_ALGORITHM_UNSPECIFIED
    labels:
        string: string
    lifetime: string
    location: string
    name: string
    project: string
    rotationWindowPercentage: 0
CertificateIssuanceConfig Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The CertificateIssuanceConfig resource accepts the following input properties:
- 
Pulumi.Google Native. Certificate Manager. V1. Inputs. Certificate Authority Config 
- The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- CertificateIssuance stringConfig Id 
- Required. A user-provided name of the certificate config.
- KeyAlgorithm Pulumi.Google Native. Certificate Manager. V1. Certificate Issuance Config Key Algorithm 
- The key algorithm to use when generating the private key.
- Lifetime string
- Workload certificate lifetime requested.
- RotationWindow intPercentage 
- Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- Description string
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- Labels Dictionary<string, string>
- Set of labels associated with a CertificateIssuanceConfig.
- Location string
- Name string
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
- Project string
- 
CertificateAuthority Config Args 
- The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- CertificateIssuance stringConfig Id 
- Required. A user-provided name of the certificate config.
- KeyAlgorithm CertificateIssuance Config Key Algorithm 
- The key algorithm to use when generating the private key.
- Lifetime string
- Workload certificate lifetime requested.
- RotationWindow intPercentage 
- Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- Description string
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- Labels map[string]string
- Set of labels associated with a CertificateIssuanceConfig.
- Location string
- Name string
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
- Project string
- 
CertificateAuthority Config 
- The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- certificateIssuance StringConfig Id 
- Required. A user-provided name of the certificate config.
- keyAlgorithm CertificateIssuance Config Key Algorithm 
- The key algorithm to use when generating the private key.
- lifetime String
- Workload certificate lifetime requested.
- rotationWindow IntegerPercentage 
- Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- description String
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- labels Map<String,String>
- Set of labels associated with a CertificateIssuanceConfig.
- location String
- name String
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
- project String
- 
CertificateAuthority Config 
- The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- certificateIssuance stringConfig Id 
- Required. A user-provided name of the certificate config.
- keyAlgorithm CertificateIssuance Config Key Algorithm 
- The key algorithm to use when generating the private key.
- lifetime string
- Workload certificate lifetime requested.
- rotationWindow numberPercentage 
- Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- description string
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- labels {[key: string]: string}
- Set of labels associated with a CertificateIssuanceConfig.
- location string
- name string
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
- project string
- 
CertificateAuthority Config Args 
- The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- certificate_issuance_ strconfig_ id 
- Required. A user-provided name of the certificate config.
- key_algorithm CertificateIssuance Config Key Algorithm 
- The key algorithm to use when generating the private key.
- lifetime str
- Workload certificate lifetime requested.
- rotation_window_ intpercentage 
- Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- description str
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- labels Mapping[str, str]
- Set of labels associated with a CertificateIssuanceConfig.
- location str
- name str
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
- project str
- Property Map
- The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
- certificateIssuance StringConfig Id 
- Required. A user-provided name of the certificate config.
- keyAlgorithm "KEY_ALGORITHM_UNSPECIFIED" | "RSA_2048" | "ECDSA_P256"
- The key algorithm to use when generating the private key.
- lifetime String
- Workload certificate lifetime requested.
- rotationWindow NumberPercentage 
- Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
- description String
- One or more paragraphs of text description of a CertificateIssuanceConfig.
- labels Map<String>
- Set of labels associated with a CertificateIssuanceConfig.
- location String
- name String
- A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern projects/*/locations/*/certificateIssuanceConfigs/*.
- project String
Outputs
All input properties are implicitly available as output properties. Additionally, the CertificateIssuanceConfig resource produces the following output properties:
- CreateTime string
- The creation timestamp of a CertificateIssuanceConfig.
- Id string
- The provider-assigned unique ID for this managed resource.
- UpdateTime string
- The last update timestamp of a CertificateIssuanceConfig.
- CreateTime string
- The creation timestamp of a CertificateIssuanceConfig.
- Id string
- The provider-assigned unique ID for this managed resource.
- UpdateTime string
- The last update timestamp of a CertificateIssuanceConfig.
- createTime String
- The creation timestamp of a CertificateIssuanceConfig.
- id String
- The provider-assigned unique ID for this managed resource.
- updateTime String
- The last update timestamp of a CertificateIssuanceConfig.
- createTime string
- The creation timestamp of a CertificateIssuanceConfig.
- id string
- The provider-assigned unique ID for this managed resource.
- updateTime string
- The last update timestamp of a CertificateIssuanceConfig.
- create_time str
- The creation timestamp of a CertificateIssuanceConfig.
- id str
- The provider-assigned unique ID for this managed resource.
- update_time str
- The last update timestamp of a CertificateIssuanceConfig.
- createTime String
- The creation timestamp of a CertificateIssuanceConfig.
- id String
- The provider-assigned unique ID for this managed resource.
- updateTime String
- The last update timestamp of a CertificateIssuanceConfig.
Supporting Types
CertificateAuthorityConfig, CertificateAuthorityConfigArgs      
- 
Pulumi.Google Native. Certificate Manager. V1. Inputs. Certificate Authority Service Config 
- Defines a CertificateAuthorityServiceConfig.
- 
CertificateAuthority Service Config 
- Defines a CertificateAuthorityServiceConfig.
- 
CertificateAuthority Service Config 
- Defines a CertificateAuthorityServiceConfig.
- 
CertificateAuthority Service Config 
- Defines a CertificateAuthorityServiceConfig.
- 
CertificateAuthority Service Config 
- Defines a CertificateAuthorityServiceConfig.
- Property Map
- Defines a CertificateAuthorityServiceConfig.
CertificateAuthorityConfigResponse, CertificateAuthorityConfigResponseArgs        
- 
Pulumi.Google Native. Certificate Manager. V1. Inputs. Certificate Authority Service Config Response 
- Defines a CertificateAuthorityServiceConfig.
- 
CertificateAuthority Service Config Response 
- Defines a CertificateAuthorityServiceConfig.
- 
CertificateAuthority Service Config Response 
- Defines a CertificateAuthorityServiceConfig.
- 
CertificateAuthority Service Config Response 
- Defines a CertificateAuthorityServiceConfig.
- 
CertificateAuthority Service Config Response 
- Defines a CertificateAuthorityServiceConfig.
- Property Map
- Defines a CertificateAuthorityServiceConfig.
CertificateAuthorityServiceConfig, CertificateAuthorityServiceConfigArgs        
- CaPool string
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- CaPool string
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- caPool String
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- caPool string
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca_pool str
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- caPool String
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
CertificateAuthorityServiceConfigResponse, CertificateAuthorityServiceConfigResponseArgs          
- CaPool string
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- CaPool string
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- caPool String
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- caPool string
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- ca_pool str
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
- caPool String
- A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
CertificateIssuanceConfigKeyAlgorithm, CertificateIssuanceConfigKeyAlgorithmArgs          
- KeyAlgorithm Unspecified 
- KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- Rsa2048
- RSA_2048Specifies RSA with a 2048-bit modulus.
- EcdsaP256 
- ECDSA_P256Specifies ECDSA with curve P256.
- CertificateIssuance Config Key Algorithm Key Algorithm Unspecified 
- KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- CertificateIssuance Config Key Algorithm Rsa2048 
- RSA_2048Specifies RSA with a 2048-bit modulus.
- CertificateIssuance Config Key Algorithm Ecdsa P256 
- ECDSA_P256Specifies ECDSA with curve P256.
- KeyAlgorithm Unspecified 
- KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- Rsa2048
- RSA_2048Specifies RSA with a 2048-bit modulus.
- EcdsaP256 
- ECDSA_P256Specifies ECDSA with curve P256.
- KeyAlgorithm Unspecified 
- KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- Rsa2048
- RSA_2048Specifies RSA with a 2048-bit modulus.
- EcdsaP256 
- ECDSA_P256Specifies ECDSA with curve P256.
- KEY_ALGORITHM_UNSPECIFIED
- KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- RSA2048
- RSA_2048Specifies RSA with a 2048-bit modulus.
- ECDSA_P256
- ECDSA_P256Specifies ECDSA with curve P256.
- "KEY_ALGORITHM_UNSPECIFIED"
- KEY_ALGORITHM_UNSPECIFIEDUnspecified key algorithm.
- "RSA_2048"
- RSA_2048Specifies RSA with a 2048-bit modulus.
- "ECDSA_P256"
- ECDSA_P256Specifies ECDSA with curve P256.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.