certificateauthority

package
v7.20.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 24, 2024 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Authority

type Authority struct {
	pulumi.CustomResourceState

	// URLs for accessing content published by this CA, such as the CA certificate and CRLs.
	// Structure is documented below.
	AccessUrls AuthorityAccessUrlArrayOutput `pulumi:"accessUrls"`
	// The user provided Resource ID for this Certificate Authority.
	CertificateAuthorityId pulumi.StringOutput `pulumi:"certificateAuthorityId"`
	// The config used to create a self-signed X.509 certificate or CSR.
	// Structure is documented below.
	Config AuthorityConfigOutput `pulumi:"config"`
	// The time at which this CertificateAuthority was created.
	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
	// fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Whether or not to allow Terraform to destroy the CertificateAuthority. Unless this field is set to false in Terraform
	// state, a 'terraform destroy' or 'terraform apply' that would delete the instance will fail.
	DeletionProtection pulumi.BoolPtrOutput `pulumi:"deletionProtection"`
	// Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA.
	DesiredState pulumi.StringPtrOutput `pulumi:"desiredState"`
	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.StringMapOutput `pulumi:"effectiveLabels"`
	// The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
	// CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
	// example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
	// be created.
	GcsBucket pulumi.StringPtrOutput `pulumi:"gcsBucket"`
	// This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
	// unexpired certs. Use with care. Defaults to 'false'.
	IgnoreActiveCertificatesOnDeletion pulumi.BoolPtrOutput `pulumi:"ignoreActiveCertificatesOnDeletion"`
	// Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority
	// is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA
	// certificate. Otherwise, it is used to sign a CSR.
	// Structure is documented below.
	KeySpec AuthorityKeySpecOutput `pulumi:"keySpec"`
	// Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
	// "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
	// your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
	Labels pulumi.StringMapOutput `pulumi:"labels"`
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
	// certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
	Lifetime pulumi.StringPtrOutput `pulumi:"lifetime"`
	// Location of the CertificateAuthority. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	Location pulumi.StringOutput `pulumi:"location"`
	// The resource name for this CertificateAuthority in the format
	// projects/*/locations/*/certificateAuthorities/*.
	Name pulumi.StringOutput `pulumi:"name"`
	// The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
	// a third party issuer.
	PemCaCertificate pulumi.StringPtrOutput `pulumi:"pemCaCertificate"`
	// This CertificateAuthority's certificate chain, including the current
	// CertificateAuthority's certificate. Ordered such that the root issuer is the final
	// element (consistent with RFC 5246). For a self-signed CA, this will only list the current
	// CertificateAuthority's certificate.
	PemCaCertificates pulumi.StringArrayOutput `pulumi:"pemCaCertificates"`
	// The name of the CaPool this Certificate Authority belongs to.
	Pool    pulumi.StringOutput `pulumi:"pool"`
	Project pulumi.StringOutput `pulumi:"project"`
	// The combination of labels configured directly on the resource
	// and default labels configured on the provider.
	PulumiLabels pulumi.StringMapOutput `pulumi:"pulumiLabels"`
	// If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
	// undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
	// 'false'.
	SkipGracePeriod pulumi.BoolPtrOutput `pulumi:"skipGracePeriod"`
	// The State for this CertificateAuthority.
	State pulumi.StringOutput `pulumi:"state"`
	// If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
	// describes its issuers.
	SubordinateConfig AuthoritySubordinateConfigPtrOutput `pulumi:"subordinateConfig"`
	// The Type of this CertificateAuthority. ~> **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
	// before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
	Type pulumi.StringPtrOutput `pulumi:"type"`
	// The time at which this CertificateAuthority was updated.
	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
	// fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

A CertificateAuthority represents an individual Certificate Authority. A CertificateAuthority can be used to create Certificates.

To get more information about CertificateAuthority, see:

* [API documentation](https://cloud.google.com/certificate-authority-service/docs/reference/rest) * How-to Guides

> **Warning:** On newer versions of the provider, you must explicitly set `deletion_protection=false` (and run `pulumi up` to write the field to state) in order to destroy a CertificateAuthority. It is recommended to not set this field (or set it to true) until you're ready to destroy.

## Example Usage

### Privateca Certificate Authority Basic

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewAuthority(ctx, "default", &certificateauthority.AuthorityArgs{
			Pool:                   pulumi.String("ca-pool"),
			CertificateAuthorityId: pulumi.String("my-certificate-authority"),
			Location:               pulumi.String("us-central1"),
			DeletionProtection:     pulumi.Bool(true),
			Config: &certificateauthority.AuthorityConfigArgs{
				SubjectConfig: &certificateauthority.AuthorityConfigSubjectConfigArgs{
					Subject: &certificateauthority.AuthorityConfigSubjectConfigSubjectArgs{
						Organization: pulumi.String("HashiCorp"),
						CommonName:   pulumi.String("my-certificate-authority"),
					},
					SubjectAltName: &certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs{
						DnsNames: pulumi.StringArray{
							pulumi.String("hashicorp.com"),
						},
					},
				},
				X509Config: &certificateauthority.AuthorityConfigX509ConfigArgs{
					CaOptions: &certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs{
						IsCa:                pulumi.Bool(true),
						MaxIssuerPathLength: pulumi.Int(10),
					},
					KeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							DigitalSignature:  pulumi.Bool(true),
							ContentCommitment: pulumi.Bool(true),
							KeyEncipherment:   pulumi.Bool(false),
							DataEncipherment:  pulumi.Bool(true),
							KeyAgreement:      pulumi.Bool(true),
							CertSign:          pulumi.Bool(true),
							CrlSign:           pulumi.Bool(true),
							DecipherOnly:      pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth:      pulumi.Bool(true),
							ClientAuth:      pulumi.Bool(false),
							EmailProtection: pulumi.Bool(true),
							CodeSigning:     pulumi.Bool(true),
							TimeStamping:    pulumi.Bool(true),
						},
					},
				},
			},
			Lifetime: pulumi.String("86400s"),
			KeySpec: &certificateauthority.AuthorityKeySpecArgs{
				Algorithm: pulumi.String("RSA_PKCS1_4096_SHA256"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Privateca Certificate Authority Subordinate

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewAuthority(ctx, "root-ca", &certificateauthority.AuthorityArgs{
			Pool:                   pulumi.String("ca-pool"),
			CertificateAuthorityId: pulumi.String("my-certificate-authority-root"),
			Location:               pulumi.String("us-central1"),
			Config: &certificateauthority.AuthorityConfigArgs{
				SubjectConfig: &certificateauthority.AuthorityConfigSubjectConfigArgs{
					Subject: &certificateauthority.AuthorityConfigSubjectConfigSubjectArgs{
						Organization: pulumi.String("HashiCorp"),
						CommonName:   pulumi.String("my-certificate-authority"),
					},
					SubjectAltName: &certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs{
						DnsNames: pulumi.StringArray{
							pulumi.String("hashicorp.com"),
						},
					},
				},
				X509Config: &certificateauthority.AuthorityConfigX509ConfigArgs{
					CaOptions: &certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs{
						IsCa: pulumi.Bool(true),
					},
					KeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							CertSign: pulumi.Bool(true),
							CrlSign:  pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth: pulumi.Bool(false),
						},
					},
				},
			},
			KeySpec: &certificateauthority.AuthorityKeySpecArgs{
				Algorithm: pulumi.String("RSA_PKCS1_4096_SHA256"),
			},
			DeletionProtection:                 pulumi.Bool(false),
			SkipGracePeriod:                    pulumi.Bool(true),
			IgnoreActiveCertificatesOnDeletion: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewAuthority(ctx, "default", &certificateauthority.AuthorityArgs{
			Pool:                   pulumi.String("ca-pool"),
			CertificateAuthorityId: pulumi.String("my-certificate-authority-sub"),
			Location:               pulumi.String("us-central1"),
			DeletionProtection:     pulumi.Bool(true),
			SubordinateConfig: &certificateauthority.AuthoritySubordinateConfigArgs{
				CertificateAuthority: root_ca.Name,
			},
			Config: &certificateauthority.AuthorityConfigArgs{
				SubjectConfig: &certificateauthority.AuthorityConfigSubjectConfigArgs{
					Subject: &certificateauthority.AuthorityConfigSubjectConfigSubjectArgs{
						Organization: pulumi.String("HashiCorp"),
						CommonName:   pulumi.String("my-subordinate-authority"),
					},
					SubjectAltName: &certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs{
						DnsNames: pulumi.StringArray{
							pulumi.String("hashicorp.com"),
						},
					},
				},
				X509Config: &certificateauthority.AuthorityConfigX509ConfigArgs{
					CaOptions: &certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs{
						IsCa:                pulumi.Bool(true),
						MaxIssuerPathLength: pulumi.Int(0),
					},
					KeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							DigitalSignature:  pulumi.Bool(true),
							ContentCommitment: pulumi.Bool(true),
							KeyEncipherment:   pulumi.Bool(false),
							DataEncipherment:  pulumi.Bool(true),
							KeyAgreement:      pulumi.Bool(true),
							CertSign:          pulumi.Bool(true),
							CrlSign:           pulumi.Bool(true),
							DecipherOnly:      pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth:      pulumi.Bool(true),
							ClientAuth:      pulumi.Bool(false),
							EmailProtection: pulumi.Bool(true),
							CodeSigning:     pulumi.Bool(true),
							TimeStamping:    pulumi.Bool(true),
						},
					},
				},
			},
			Lifetime: pulumi.String("86400s"),
			KeySpec: &certificateauthority.AuthorityKeySpecArgs{
				Algorithm: pulumi.String("RSA_PKCS1_4096_SHA256"),
			},
			Type: pulumi.String("SUBORDINATE"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Privateca Certificate Authority Byo Key

```go package main

import (

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/kms"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		privatecaSa, err := projects.NewServiceIdentity(ctx, "privateca_sa", &projects.ServiceIdentityArgs{
			Service: pulumi.String("privateca.googleapis.com"),
		})
		if err != nil {
			return err
		}
		_, err = kms.NewCryptoKeyIAMMember(ctx, "privateca_sa_keyuser_signerverifier", &kms.CryptoKeyIAMMemberArgs{
			CryptoKeyId: pulumi.String("projects/keys-project/locations/us-central1/keyRings/key-ring/cryptoKeys/crypto-key"),
			Role:        pulumi.String("roles/cloudkms.signerVerifier"),
			Member: privatecaSa.Email.ApplyT(func(email string) (string, error) {
				return fmt.Sprintf("serviceAccount:%v", email), nil
			}).(pulumi.StringOutput),
		})
		if err != nil {
			return err
		}
		_, err = kms.NewCryptoKeyIAMMember(ctx, "privateca_sa_keyuser_viewer", &kms.CryptoKeyIAMMemberArgs{
			CryptoKeyId: pulumi.String("projects/keys-project/locations/us-central1/keyRings/key-ring/cryptoKeys/crypto-key"),
			Role:        pulumi.String("roles/viewer"),
			Member: privatecaSa.Email.ApplyT(func(email string) (string, error) {
				return fmt.Sprintf("serviceAccount:%v", email), nil
			}).(pulumi.StringOutput),
		})
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewAuthority(ctx, "default", &certificateauthority.AuthorityArgs{
			Pool:                   pulumi.String("ca-pool"),
			CertificateAuthorityId: pulumi.String("my-certificate-authority"),
			Location:               pulumi.String("us-central1"),
			DeletionProtection:     pulumi.Bool(true),
			KeySpec: &certificateauthority.AuthorityKeySpecArgs{
				CloudKmsKeyVersion: pulumi.String("projects/keys-project/locations/us-central1/keyRings/key-ring/cryptoKeys/crypto-key/cryptoKeyVersions/1"),
			},
			Config: &certificateauthority.AuthorityConfigArgs{
				SubjectConfig: &certificateauthority.AuthorityConfigSubjectConfigArgs{
					Subject: &certificateauthority.AuthorityConfigSubjectConfigSubjectArgs{
						Organization: pulumi.String("Example, Org."),
						CommonName:   pulumi.String("Example Authority"),
					},
				},
				X509Config: &certificateauthority.AuthorityConfigX509ConfigArgs{
					CaOptions: &certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs{
						IsCa:                pulumi.Bool(true),
						MaxIssuerPathLength: pulumi.Int(10),
					},
					KeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							CertSign: pulumi.Bool(true),
							CrlSign:  pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth: pulumi.Bool(false),
						},
					},
					NameConstraints: &certificateauthority.AuthorityConfigX509ConfigNameConstraintsArgs{
						Critical: pulumi.Bool(true),
						PermittedDnsNames: pulumi.StringArray{
							pulumi.String("*.example.com"),
						},
						ExcludedDnsNames: pulumi.StringArray{
							pulumi.String("*.deny.example.com"),
						},
						PermittedIpRanges: pulumi.StringArray{
							pulumi.String("10.0.0.0/8"),
						},
						ExcludedIpRanges: pulumi.StringArray{
							pulumi.String("10.1.1.0/24"),
						},
						PermittedEmailAddresses: pulumi.StringArray{
							pulumi.String(".example.com"),
						},
						ExcludedEmailAddresses: pulumi.StringArray{
							pulumi.String(".deny.example.com"),
						},
						PermittedUris: pulumi.StringArray{
							pulumi.String(".example.com"),
						},
						ExcludedUris: pulumi.StringArray{
							pulumi.String(".deny.example.com"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

CertificateAuthority can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/caPools/{{pool}}/certificateAuthorities/{{certificate_authority_id}}`

* `{{project}}/{{location}}/{{pool}}/{{certificate_authority_id}}`

* `{{location}}/{{pool}}/{{certificate_authority_id}}`

When using the `pulumi import` command, CertificateAuthority can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:certificateauthority/authority:Authority default projects/{{project}}/locations/{{location}}/caPools/{{pool}}/certificateAuthorities/{{certificate_authority_id}} ```

```sh $ pulumi import gcp:certificateauthority/authority:Authority default {{project}}/{{location}}/{{pool}}/{{certificate_authority_id}} ```

```sh $ pulumi import gcp:certificateauthority/authority:Authority default {{location}}/{{pool}}/{{certificate_authority_id}} ```

func GetAuthority

func GetAuthority(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AuthorityState, opts ...pulumi.ResourceOption) (*Authority, error)

GetAuthority gets an existing Authority resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAuthority

func NewAuthority(ctx *pulumi.Context,
	name string, args *AuthorityArgs, opts ...pulumi.ResourceOption) (*Authority, error)

NewAuthority registers a new resource with the given unique name, arguments, and options.

func (*Authority) ElementType

func (*Authority) ElementType() reflect.Type

func (*Authority) ToAuthorityOutput

func (i *Authority) ToAuthorityOutput() AuthorityOutput

func (*Authority) ToAuthorityOutputWithContext

func (i *Authority) ToAuthorityOutputWithContext(ctx context.Context) AuthorityOutput

type AuthorityAccessUrl

type AuthorityAccessUrl struct {
	// (Output)
	// The URL where this CertificateAuthority's CA certificate is published. This will only be
	// set for CAs that have been activated.
	CaCertificateAccessUrl *string `pulumi:"caCertificateAccessUrl"`
	// (Output)
	// The URL where this CertificateAuthority's CRLs are published. This will only be set for
	// CAs that have been activated.
	CrlAccessUrls []string `pulumi:"crlAccessUrls"`
}

type AuthorityAccessUrlArgs

type AuthorityAccessUrlArgs struct {
	// (Output)
	// The URL where this CertificateAuthority's CA certificate is published. This will only be
	// set for CAs that have been activated.
	CaCertificateAccessUrl pulumi.StringPtrInput `pulumi:"caCertificateAccessUrl"`
	// (Output)
	// The URL where this CertificateAuthority's CRLs are published. This will only be set for
	// CAs that have been activated.
	CrlAccessUrls pulumi.StringArrayInput `pulumi:"crlAccessUrls"`
}

func (AuthorityAccessUrlArgs) ElementType

func (AuthorityAccessUrlArgs) ElementType() reflect.Type

func (AuthorityAccessUrlArgs) ToAuthorityAccessUrlOutput

func (i AuthorityAccessUrlArgs) ToAuthorityAccessUrlOutput() AuthorityAccessUrlOutput

func (AuthorityAccessUrlArgs) ToAuthorityAccessUrlOutputWithContext

func (i AuthorityAccessUrlArgs) ToAuthorityAccessUrlOutputWithContext(ctx context.Context) AuthorityAccessUrlOutput

type AuthorityAccessUrlArray

type AuthorityAccessUrlArray []AuthorityAccessUrlInput

func (AuthorityAccessUrlArray) ElementType

func (AuthorityAccessUrlArray) ElementType() reflect.Type

func (AuthorityAccessUrlArray) ToAuthorityAccessUrlArrayOutput

func (i AuthorityAccessUrlArray) ToAuthorityAccessUrlArrayOutput() AuthorityAccessUrlArrayOutput

func (AuthorityAccessUrlArray) ToAuthorityAccessUrlArrayOutputWithContext

func (i AuthorityAccessUrlArray) ToAuthorityAccessUrlArrayOutputWithContext(ctx context.Context) AuthorityAccessUrlArrayOutput

type AuthorityAccessUrlArrayInput

type AuthorityAccessUrlArrayInput interface {
	pulumi.Input

	ToAuthorityAccessUrlArrayOutput() AuthorityAccessUrlArrayOutput
	ToAuthorityAccessUrlArrayOutputWithContext(context.Context) AuthorityAccessUrlArrayOutput
}

AuthorityAccessUrlArrayInput is an input type that accepts AuthorityAccessUrlArray and AuthorityAccessUrlArrayOutput values. You can construct a concrete instance of `AuthorityAccessUrlArrayInput` via:

AuthorityAccessUrlArray{ AuthorityAccessUrlArgs{...} }

type AuthorityAccessUrlArrayOutput

type AuthorityAccessUrlArrayOutput struct{ *pulumi.OutputState }

func (AuthorityAccessUrlArrayOutput) ElementType

func (AuthorityAccessUrlArrayOutput) Index

func (AuthorityAccessUrlArrayOutput) ToAuthorityAccessUrlArrayOutput

func (o AuthorityAccessUrlArrayOutput) ToAuthorityAccessUrlArrayOutput() AuthorityAccessUrlArrayOutput

func (AuthorityAccessUrlArrayOutput) ToAuthorityAccessUrlArrayOutputWithContext

func (o AuthorityAccessUrlArrayOutput) ToAuthorityAccessUrlArrayOutputWithContext(ctx context.Context) AuthorityAccessUrlArrayOutput

type AuthorityAccessUrlInput

type AuthorityAccessUrlInput interface {
	pulumi.Input

	ToAuthorityAccessUrlOutput() AuthorityAccessUrlOutput
	ToAuthorityAccessUrlOutputWithContext(context.Context) AuthorityAccessUrlOutput
}

AuthorityAccessUrlInput is an input type that accepts AuthorityAccessUrlArgs and AuthorityAccessUrlOutput values. You can construct a concrete instance of `AuthorityAccessUrlInput` via:

AuthorityAccessUrlArgs{...}

type AuthorityAccessUrlOutput

type AuthorityAccessUrlOutput struct{ *pulumi.OutputState }

func (AuthorityAccessUrlOutput) CaCertificateAccessUrl

func (o AuthorityAccessUrlOutput) CaCertificateAccessUrl() pulumi.StringPtrOutput

(Output) The URL where this CertificateAuthority's CA certificate is published. This will only be set for CAs that have been activated.

func (AuthorityAccessUrlOutput) CrlAccessUrls

(Output) The URL where this CertificateAuthority's CRLs are published. This will only be set for CAs that have been activated.

func (AuthorityAccessUrlOutput) ElementType

func (AuthorityAccessUrlOutput) ElementType() reflect.Type

func (AuthorityAccessUrlOutput) ToAuthorityAccessUrlOutput

func (o AuthorityAccessUrlOutput) ToAuthorityAccessUrlOutput() AuthorityAccessUrlOutput

func (AuthorityAccessUrlOutput) ToAuthorityAccessUrlOutputWithContext

func (o AuthorityAccessUrlOutput) ToAuthorityAccessUrlOutputWithContext(ctx context.Context) AuthorityAccessUrlOutput

type AuthorityArgs

type AuthorityArgs struct {
	// The user provided Resource ID for this Certificate Authority.
	CertificateAuthorityId pulumi.StringInput
	// The config used to create a self-signed X.509 certificate or CSR.
	// Structure is documented below.
	Config AuthorityConfigInput
	// Whether or not to allow Terraform to destroy the CertificateAuthority. Unless this field is set to false in Terraform
	// state, a 'terraform destroy' or 'terraform apply' that would delete the instance will fail.
	DeletionProtection pulumi.BoolPtrInput
	// Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA.
	DesiredState pulumi.StringPtrInput
	// The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
	// CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
	// example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
	// be created.
	GcsBucket pulumi.StringPtrInput
	// This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
	// unexpired certs. Use with care. Defaults to 'false'.
	IgnoreActiveCertificatesOnDeletion pulumi.BoolPtrInput
	// Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority
	// is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA
	// certificate. Otherwise, it is used to sign a CSR.
	// Structure is documented below.
	KeySpec AuthorityKeySpecInput
	// Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
	// "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
	// your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
	Labels pulumi.StringMapInput
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
	// certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
	Lifetime pulumi.StringPtrInput
	// Location of the CertificateAuthority. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	Location pulumi.StringInput
	// The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
	// a third party issuer.
	PemCaCertificate pulumi.StringPtrInput
	// The name of the CaPool this Certificate Authority belongs to.
	Pool    pulumi.StringInput
	Project pulumi.StringPtrInput
	// If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
	// undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
	// 'false'.
	SkipGracePeriod pulumi.BoolPtrInput
	// If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
	// describes its issuers.
	SubordinateConfig AuthoritySubordinateConfigPtrInput
	// The Type of this CertificateAuthority. ~> **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
	// before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
	Type pulumi.StringPtrInput
}

The set of arguments for constructing a Authority resource.

func (AuthorityArgs) ElementType

func (AuthorityArgs) ElementType() reflect.Type

type AuthorityArray

type AuthorityArray []AuthorityInput

func (AuthorityArray) ElementType

func (AuthorityArray) ElementType() reflect.Type

func (AuthorityArray) ToAuthorityArrayOutput

func (i AuthorityArray) ToAuthorityArrayOutput() AuthorityArrayOutput

func (AuthorityArray) ToAuthorityArrayOutputWithContext

func (i AuthorityArray) ToAuthorityArrayOutputWithContext(ctx context.Context) AuthorityArrayOutput

type AuthorityArrayInput

type AuthorityArrayInput interface {
	pulumi.Input

	ToAuthorityArrayOutput() AuthorityArrayOutput
	ToAuthorityArrayOutputWithContext(context.Context) AuthorityArrayOutput
}

AuthorityArrayInput is an input type that accepts AuthorityArray and AuthorityArrayOutput values. You can construct a concrete instance of `AuthorityArrayInput` via:

AuthorityArray{ AuthorityArgs{...} }

type AuthorityArrayOutput

type AuthorityArrayOutput struct{ *pulumi.OutputState }

func (AuthorityArrayOutput) ElementType

func (AuthorityArrayOutput) ElementType() reflect.Type

func (AuthorityArrayOutput) Index

func (AuthorityArrayOutput) ToAuthorityArrayOutput

func (o AuthorityArrayOutput) ToAuthorityArrayOutput() AuthorityArrayOutput

func (AuthorityArrayOutput) ToAuthorityArrayOutputWithContext

func (o AuthorityArrayOutput) ToAuthorityArrayOutputWithContext(ctx context.Context) AuthorityArrayOutput

type AuthorityConfig

type AuthorityConfig struct {
	// Specifies some of the values in a certificate that are related to the subject.
	// Structure is documented below.
	//
	// <a name="nestedX509Config"></a>The `x509Config` block supports:
	SubjectConfig AuthorityConfigSubjectConfig `pulumi:"subjectConfig"`
	// Describes how some of the technical X.509 fields in a certificate should be populated.
	// Structure is documented below.
	X509Config AuthorityConfigX509Config `pulumi:"x509Config"`
}

type AuthorityConfigArgs

type AuthorityConfigArgs struct {
	// Specifies some of the values in a certificate that are related to the subject.
	// Structure is documented below.
	//
	// <a name="nestedX509Config"></a>The `x509Config` block supports:
	SubjectConfig AuthorityConfigSubjectConfigInput `pulumi:"subjectConfig"`
	// Describes how some of the technical X.509 fields in a certificate should be populated.
	// Structure is documented below.
	X509Config AuthorityConfigX509ConfigInput `pulumi:"x509Config"`
}

func (AuthorityConfigArgs) ElementType

func (AuthorityConfigArgs) ElementType() reflect.Type

func (AuthorityConfigArgs) ToAuthorityConfigOutput

func (i AuthorityConfigArgs) ToAuthorityConfigOutput() AuthorityConfigOutput

func (AuthorityConfigArgs) ToAuthorityConfigOutputWithContext

func (i AuthorityConfigArgs) ToAuthorityConfigOutputWithContext(ctx context.Context) AuthorityConfigOutput

func (AuthorityConfigArgs) ToAuthorityConfigPtrOutput

func (i AuthorityConfigArgs) ToAuthorityConfigPtrOutput() AuthorityConfigPtrOutput

func (AuthorityConfigArgs) ToAuthorityConfigPtrOutputWithContext

func (i AuthorityConfigArgs) ToAuthorityConfigPtrOutputWithContext(ctx context.Context) AuthorityConfigPtrOutput

type AuthorityConfigInput

type AuthorityConfigInput interface {
	pulumi.Input

	ToAuthorityConfigOutput() AuthorityConfigOutput
	ToAuthorityConfigOutputWithContext(context.Context) AuthorityConfigOutput
}

AuthorityConfigInput is an input type that accepts AuthorityConfigArgs and AuthorityConfigOutput values. You can construct a concrete instance of `AuthorityConfigInput` via:

AuthorityConfigArgs{...}

type AuthorityConfigOutput

type AuthorityConfigOutput struct{ *pulumi.OutputState }

func (AuthorityConfigOutput) ElementType

func (AuthorityConfigOutput) ElementType() reflect.Type

func (AuthorityConfigOutput) SubjectConfig

Specifies some of the values in a certificate that are related to the subject. Structure is documented below.

<a name="nestedX509Config"></a>The `x509Config` block supports:

func (AuthorityConfigOutput) ToAuthorityConfigOutput

func (o AuthorityConfigOutput) ToAuthorityConfigOutput() AuthorityConfigOutput

func (AuthorityConfigOutput) ToAuthorityConfigOutputWithContext

func (o AuthorityConfigOutput) ToAuthorityConfigOutputWithContext(ctx context.Context) AuthorityConfigOutput

func (AuthorityConfigOutput) ToAuthorityConfigPtrOutput

func (o AuthorityConfigOutput) ToAuthorityConfigPtrOutput() AuthorityConfigPtrOutput

func (AuthorityConfigOutput) ToAuthorityConfigPtrOutputWithContext

func (o AuthorityConfigOutput) ToAuthorityConfigPtrOutputWithContext(ctx context.Context) AuthorityConfigPtrOutput

func (AuthorityConfigOutput) X509Config

Describes how some of the technical X.509 fields in a certificate should be populated. Structure is documented below.

type AuthorityConfigPtrInput

type AuthorityConfigPtrInput interface {
	pulumi.Input

	ToAuthorityConfigPtrOutput() AuthorityConfigPtrOutput
	ToAuthorityConfigPtrOutputWithContext(context.Context) AuthorityConfigPtrOutput
}

AuthorityConfigPtrInput is an input type that accepts AuthorityConfigArgs, AuthorityConfigPtr and AuthorityConfigPtrOutput values. You can construct a concrete instance of `AuthorityConfigPtrInput` via:

        AuthorityConfigArgs{...}

or:

        nil

type AuthorityConfigPtrOutput

type AuthorityConfigPtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigPtrOutput) Elem

func (AuthorityConfigPtrOutput) ElementType

func (AuthorityConfigPtrOutput) ElementType() reflect.Type

func (AuthorityConfigPtrOutput) SubjectConfig

Specifies some of the values in a certificate that are related to the subject. Structure is documented below.

<a name="nestedX509Config"></a>The `x509Config` block supports:

func (AuthorityConfigPtrOutput) ToAuthorityConfigPtrOutput

func (o AuthorityConfigPtrOutput) ToAuthorityConfigPtrOutput() AuthorityConfigPtrOutput

func (AuthorityConfigPtrOutput) ToAuthorityConfigPtrOutputWithContext

func (o AuthorityConfigPtrOutput) ToAuthorityConfigPtrOutputWithContext(ctx context.Context) AuthorityConfigPtrOutput

func (AuthorityConfigPtrOutput) X509Config

Describes how some of the technical X.509 fields in a certificate should be populated. Structure is documented below.

type AuthorityConfigSubjectConfig

type AuthorityConfigSubjectConfig struct {
	// Contains distinguished name fields such as the location and organization.
	// Structure is documented below.
	Subject AuthorityConfigSubjectConfigSubject `pulumi:"subject"`
	// The subject alternative name fields.
	// Structure is documented below.
	SubjectAltName *AuthorityConfigSubjectConfigSubjectAltName `pulumi:"subjectAltName"`
}

type AuthorityConfigSubjectConfigArgs

type AuthorityConfigSubjectConfigArgs struct {
	// Contains distinguished name fields such as the location and organization.
	// Structure is documented below.
	Subject AuthorityConfigSubjectConfigSubjectInput `pulumi:"subject"`
	// The subject alternative name fields.
	// Structure is documented below.
	SubjectAltName AuthorityConfigSubjectConfigSubjectAltNamePtrInput `pulumi:"subjectAltName"`
}

func (AuthorityConfigSubjectConfigArgs) ElementType

func (AuthorityConfigSubjectConfigArgs) ToAuthorityConfigSubjectConfigOutput

func (i AuthorityConfigSubjectConfigArgs) ToAuthorityConfigSubjectConfigOutput() AuthorityConfigSubjectConfigOutput

func (AuthorityConfigSubjectConfigArgs) ToAuthorityConfigSubjectConfigOutputWithContext

func (i AuthorityConfigSubjectConfigArgs) ToAuthorityConfigSubjectConfigOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigOutput

func (AuthorityConfigSubjectConfigArgs) ToAuthorityConfigSubjectConfigPtrOutput

func (i AuthorityConfigSubjectConfigArgs) ToAuthorityConfigSubjectConfigPtrOutput() AuthorityConfigSubjectConfigPtrOutput

func (AuthorityConfigSubjectConfigArgs) ToAuthorityConfigSubjectConfigPtrOutputWithContext

func (i AuthorityConfigSubjectConfigArgs) ToAuthorityConfigSubjectConfigPtrOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigPtrOutput

type AuthorityConfigSubjectConfigInput

type AuthorityConfigSubjectConfigInput interface {
	pulumi.Input

	ToAuthorityConfigSubjectConfigOutput() AuthorityConfigSubjectConfigOutput
	ToAuthorityConfigSubjectConfigOutputWithContext(context.Context) AuthorityConfigSubjectConfigOutput
}

AuthorityConfigSubjectConfigInput is an input type that accepts AuthorityConfigSubjectConfigArgs and AuthorityConfigSubjectConfigOutput values. You can construct a concrete instance of `AuthorityConfigSubjectConfigInput` via:

AuthorityConfigSubjectConfigArgs{...}

type AuthorityConfigSubjectConfigOutput

type AuthorityConfigSubjectConfigOutput struct{ *pulumi.OutputState }

func (AuthorityConfigSubjectConfigOutput) ElementType

func (AuthorityConfigSubjectConfigOutput) Subject

Contains distinguished name fields such as the location and organization. Structure is documented below.

func (AuthorityConfigSubjectConfigOutput) SubjectAltName

The subject alternative name fields. Structure is documented below.

func (AuthorityConfigSubjectConfigOutput) ToAuthorityConfigSubjectConfigOutput

func (o AuthorityConfigSubjectConfigOutput) ToAuthorityConfigSubjectConfigOutput() AuthorityConfigSubjectConfigOutput

func (AuthorityConfigSubjectConfigOutput) ToAuthorityConfigSubjectConfigOutputWithContext

func (o AuthorityConfigSubjectConfigOutput) ToAuthorityConfigSubjectConfigOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigOutput

func (AuthorityConfigSubjectConfigOutput) ToAuthorityConfigSubjectConfigPtrOutput

func (o AuthorityConfigSubjectConfigOutput) ToAuthorityConfigSubjectConfigPtrOutput() AuthorityConfigSubjectConfigPtrOutput

func (AuthorityConfigSubjectConfigOutput) ToAuthorityConfigSubjectConfigPtrOutputWithContext

func (o AuthorityConfigSubjectConfigOutput) ToAuthorityConfigSubjectConfigPtrOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigPtrOutput

type AuthorityConfigSubjectConfigPtrInput

type AuthorityConfigSubjectConfigPtrInput interface {
	pulumi.Input

	ToAuthorityConfigSubjectConfigPtrOutput() AuthorityConfigSubjectConfigPtrOutput
	ToAuthorityConfigSubjectConfigPtrOutputWithContext(context.Context) AuthorityConfigSubjectConfigPtrOutput
}

AuthorityConfigSubjectConfigPtrInput is an input type that accepts AuthorityConfigSubjectConfigArgs, AuthorityConfigSubjectConfigPtr and AuthorityConfigSubjectConfigPtrOutput values. You can construct a concrete instance of `AuthorityConfigSubjectConfigPtrInput` via:

        AuthorityConfigSubjectConfigArgs{...}

or:

        nil

type AuthorityConfigSubjectConfigPtrOutput

type AuthorityConfigSubjectConfigPtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigSubjectConfigPtrOutput) Elem

func (AuthorityConfigSubjectConfigPtrOutput) ElementType

func (AuthorityConfigSubjectConfigPtrOutput) Subject

Contains distinguished name fields such as the location and organization. Structure is documented below.

func (AuthorityConfigSubjectConfigPtrOutput) SubjectAltName

The subject alternative name fields. Structure is documented below.

func (AuthorityConfigSubjectConfigPtrOutput) ToAuthorityConfigSubjectConfigPtrOutput

func (o AuthorityConfigSubjectConfigPtrOutput) ToAuthorityConfigSubjectConfigPtrOutput() AuthorityConfigSubjectConfigPtrOutput

func (AuthorityConfigSubjectConfigPtrOutput) ToAuthorityConfigSubjectConfigPtrOutputWithContext

func (o AuthorityConfigSubjectConfigPtrOutput) ToAuthorityConfigSubjectConfigPtrOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigPtrOutput

type AuthorityConfigSubjectConfigSubject

type AuthorityConfigSubjectConfigSubject struct {
	// The common name of the distinguished name.
	CommonName string `pulumi:"commonName"`
	// The country code of the subject.
	CountryCode *string `pulumi:"countryCode"`
	// The locality or city of the subject.
	Locality *string `pulumi:"locality"`
	// The organization of the subject.
	Organization string `pulumi:"organization"`
	// The organizational unit of the subject.
	OrganizationalUnit *string `pulumi:"organizationalUnit"`
	// The postal code of the subject.
	PostalCode *string `pulumi:"postalCode"`
	// The province, territory, or regional state of the subject.
	Province *string `pulumi:"province"`
	// The street address of the subject.
	StreetAddress *string `pulumi:"streetAddress"`
}

type AuthorityConfigSubjectConfigSubjectAltName

type AuthorityConfigSubjectConfigSubjectAltName struct {
	// Contains only valid, fully-qualified host names.
	DnsNames []string `pulumi:"dnsNames"`
	// Contains only valid RFC 2822 E-mail addresses.
	EmailAddresses []string `pulumi:"emailAddresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	IpAddresses []string `pulumi:"ipAddresses"`
	// Contains only valid RFC 3986 URIs.
	Uris []string `pulumi:"uris"`
}

type AuthorityConfigSubjectConfigSubjectAltNameArgs

type AuthorityConfigSubjectConfigSubjectAltNameArgs struct {
	// Contains only valid, fully-qualified host names.
	DnsNames pulumi.StringArrayInput `pulumi:"dnsNames"`
	// Contains only valid RFC 2822 E-mail addresses.
	EmailAddresses pulumi.StringArrayInput `pulumi:"emailAddresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	IpAddresses pulumi.StringArrayInput `pulumi:"ipAddresses"`
	// Contains only valid RFC 3986 URIs.
	Uris pulumi.StringArrayInput `pulumi:"uris"`
}

func (AuthorityConfigSubjectConfigSubjectAltNameArgs) ElementType

func (AuthorityConfigSubjectConfigSubjectAltNameArgs) ToAuthorityConfigSubjectConfigSubjectAltNameOutput

func (i AuthorityConfigSubjectConfigSubjectAltNameArgs) ToAuthorityConfigSubjectConfigSubjectAltNameOutput() AuthorityConfigSubjectConfigSubjectAltNameOutput

func (AuthorityConfigSubjectConfigSubjectAltNameArgs) ToAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext

func (i AuthorityConfigSubjectConfigSubjectAltNameArgs) ToAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectAltNameOutput

func (AuthorityConfigSubjectConfigSubjectAltNameArgs) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutput

func (i AuthorityConfigSubjectConfigSubjectAltNameArgs) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutput() AuthorityConfigSubjectConfigSubjectAltNamePtrOutput

func (AuthorityConfigSubjectConfigSubjectAltNameArgs) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutputWithContext

func (i AuthorityConfigSubjectConfigSubjectAltNameArgs) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectAltNamePtrOutput

type AuthorityConfigSubjectConfigSubjectAltNameInput

type AuthorityConfigSubjectConfigSubjectAltNameInput interface {
	pulumi.Input

	ToAuthorityConfigSubjectConfigSubjectAltNameOutput() AuthorityConfigSubjectConfigSubjectAltNameOutput
	ToAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext(context.Context) AuthorityConfigSubjectConfigSubjectAltNameOutput
}

AuthorityConfigSubjectConfigSubjectAltNameInput is an input type that accepts AuthorityConfigSubjectConfigSubjectAltNameArgs and AuthorityConfigSubjectConfigSubjectAltNameOutput values. You can construct a concrete instance of `AuthorityConfigSubjectConfigSubjectAltNameInput` via:

AuthorityConfigSubjectConfigSubjectAltNameArgs{...}

type AuthorityConfigSubjectConfigSubjectAltNameOutput

type AuthorityConfigSubjectConfigSubjectAltNameOutput struct{ *pulumi.OutputState }

func (AuthorityConfigSubjectConfigSubjectAltNameOutput) DnsNames

Contains only valid, fully-qualified host names.

func (AuthorityConfigSubjectConfigSubjectAltNameOutput) ElementType

func (AuthorityConfigSubjectConfigSubjectAltNameOutput) EmailAddresses

Contains only valid RFC 2822 E-mail addresses.

func (AuthorityConfigSubjectConfigSubjectAltNameOutput) IpAddresses

Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.

func (AuthorityConfigSubjectConfigSubjectAltNameOutput) ToAuthorityConfigSubjectConfigSubjectAltNameOutput

func (o AuthorityConfigSubjectConfigSubjectAltNameOutput) ToAuthorityConfigSubjectConfigSubjectAltNameOutput() AuthorityConfigSubjectConfigSubjectAltNameOutput

func (AuthorityConfigSubjectConfigSubjectAltNameOutput) ToAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext

func (o AuthorityConfigSubjectConfigSubjectAltNameOutput) ToAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectAltNameOutput

func (AuthorityConfigSubjectConfigSubjectAltNameOutput) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutput

func (o AuthorityConfigSubjectConfigSubjectAltNameOutput) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutput() AuthorityConfigSubjectConfigSubjectAltNamePtrOutput

func (AuthorityConfigSubjectConfigSubjectAltNameOutput) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutputWithContext

func (o AuthorityConfigSubjectConfigSubjectAltNameOutput) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectAltNamePtrOutput

func (AuthorityConfigSubjectConfigSubjectAltNameOutput) Uris

Contains only valid RFC 3986 URIs.

type AuthorityConfigSubjectConfigSubjectAltNamePtrInput

type AuthorityConfigSubjectConfigSubjectAltNamePtrInput interface {
	pulumi.Input

	ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutput() AuthorityConfigSubjectConfigSubjectAltNamePtrOutput
	ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutputWithContext(context.Context) AuthorityConfigSubjectConfigSubjectAltNamePtrOutput
}

AuthorityConfigSubjectConfigSubjectAltNamePtrInput is an input type that accepts AuthorityConfigSubjectConfigSubjectAltNameArgs, AuthorityConfigSubjectConfigSubjectAltNamePtr and AuthorityConfigSubjectConfigSubjectAltNamePtrOutput values. You can construct a concrete instance of `AuthorityConfigSubjectConfigSubjectAltNamePtrInput` via:

        AuthorityConfigSubjectConfigSubjectAltNameArgs{...}

or:

        nil

type AuthorityConfigSubjectConfigSubjectAltNamePtrOutput

type AuthorityConfigSubjectConfigSubjectAltNamePtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) DnsNames

Contains only valid, fully-qualified host names.

func (AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) Elem

func (AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) ElementType

func (AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) EmailAddresses

Contains only valid RFC 2822 E-mail addresses.

func (AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) IpAddresses

Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.

func (AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutput

func (o AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutput() AuthorityConfigSubjectConfigSubjectAltNamePtrOutput

func (AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutputWithContext

func (o AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) ToAuthorityConfigSubjectConfigSubjectAltNamePtrOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectAltNamePtrOutput

func (AuthorityConfigSubjectConfigSubjectAltNamePtrOutput) Uris

Contains only valid RFC 3986 URIs.

type AuthorityConfigSubjectConfigSubjectArgs

type AuthorityConfigSubjectConfigSubjectArgs struct {
	// The common name of the distinguished name.
	CommonName pulumi.StringInput `pulumi:"commonName"`
	// The country code of the subject.
	CountryCode pulumi.StringPtrInput `pulumi:"countryCode"`
	// The locality or city of the subject.
	Locality pulumi.StringPtrInput `pulumi:"locality"`
	// The organization of the subject.
	Organization pulumi.StringInput `pulumi:"organization"`
	// The organizational unit of the subject.
	OrganizationalUnit pulumi.StringPtrInput `pulumi:"organizationalUnit"`
	// The postal code of the subject.
	PostalCode pulumi.StringPtrInput `pulumi:"postalCode"`
	// The province, territory, or regional state of the subject.
	Province pulumi.StringPtrInput `pulumi:"province"`
	// The street address of the subject.
	StreetAddress pulumi.StringPtrInput `pulumi:"streetAddress"`
}

func (AuthorityConfigSubjectConfigSubjectArgs) ElementType

func (AuthorityConfigSubjectConfigSubjectArgs) ToAuthorityConfigSubjectConfigSubjectOutput

func (i AuthorityConfigSubjectConfigSubjectArgs) ToAuthorityConfigSubjectConfigSubjectOutput() AuthorityConfigSubjectConfigSubjectOutput

func (AuthorityConfigSubjectConfigSubjectArgs) ToAuthorityConfigSubjectConfigSubjectOutputWithContext

func (i AuthorityConfigSubjectConfigSubjectArgs) ToAuthorityConfigSubjectConfigSubjectOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectOutput

func (AuthorityConfigSubjectConfigSubjectArgs) ToAuthorityConfigSubjectConfigSubjectPtrOutput

func (i AuthorityConfigSubjectConfigSubjectArgs) ToAuthorityConfigSubjectConfigSubjectPtrOutput() AuthorityConfigSubjectConfigSubjectPtrOutput

func (AuthorityConfigSubjectConfigSubjectArgs) ToAuthorityConfigSubjectConfigSubjectPtrOutputWithContext

func (i AuthorityConfigSubjectConfigSubjectArgs) ToAuthorityConfigSubjectConfigSubjectPtrOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectPtrOutput

type AuthorityConfigSubjectConfigSubjectInput

type AuthorityConfigSubjectConfigSubjectInput interface {
	pulumi.Input

	ToAuthorityConfigSubjectConfigSubjectOutput() AuthorityConfigSubjectConfigSubjectOutput
	ToAuthorityConfigSubjectConfigSubjectOutputWithContext(context.Context) AuthorityConfigSubjectConfigSubjectOutput
}

AuthorityConfigSubjectConfigSubjectInput is an input type that accepts AuthorityConfigSubjectConfigSubjectArgs and AuthorityConfigSubjectConfigSubjectOutput values. You can construct a concrete instance of `AuthorityConfigSubjectConfigSubjectInput` via:

AuthorityConfigSubjectConfigSubjectArgs{...}

type AuthorityConfigSubjectConfigSubjectOutput

type AuthorityConfigSubjectConfigSubjectOutput struct{ *pulumi.OutputState }

func (AuthorityConfigSubjectConfigSubjectOutput) CommonName

The common name of the distinguished name.

func (AuthorityConfigSubjectConfigSubjectOutput) CountryCode

The country code of the subject.

func (AuthorityConfigSubjectConfigSubjectOutput) ElementType

func (AuthorityConfigSubjectConfigSubjectOutput) Locality

The locality or city of the subject.

func (AuthorityConfigSubjectConfigSubjectOutput) Organization

The organization of the subject.

func (AuthorityConfigSubjectConfigSubjectOutput) OrganizationalUnit

The organizational unit of the subject.

func (AuthorityConfigSubjectConfigSubjectOutput) PostalCode

The postal code of the subject.

func (AuthorityConfigSubjectConfigSubjectOutput) Province

The province, territory, or regional state of the subject.

func (AuthorityConfigSubjectConfigSubjectOutput) StreetAddress

The street address of the subject.

func (AuthorityConfigSubjectConfigSubjectOutput) ToAuthorityConfigSubjectConfigSubjectOutput

func (o AuthorityConfigSubjectConfigSubjectOutput) ToAuthorityConfigSubjectConfigSubjectOutput() AuthorityConfigSubjectConfigSubjectOutput

func (AuthorityConfigSubjectConfigSubjectOutput) ToAuthorityConfigSubjectConfigSubjectOutputWithContext

func (o AuthorityConfigSubjectConfigSubjectOutput) ToAuthorityConfigSubjectConfigSubjectOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectOutput

func (AuthorityConfigSubjectConfigSubjectOutput) ToAuthorityConfigSubjectConfigSubjectPtrOutput

func (o AuthorityConfigSubjectConfigSubjectOutput) ToAuthorityConfigSubjectConfigSubjectPtrOutput() AuthorityConfigSubjectConfigSubjectPtrOutput

func (AuthorityConfigSubjectConfigSubjectOutput) ToAuthorityConfigSubjectConfigSubjectPtrOutputWithContext

func (o AuthorityConfigSubjectConfigSubjectOutput) ToAuthorityConfigSubjectConfigSubjectPtrOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectPtrOutput

type AuthorityConfigSubjectConfigSubjectPtrInput

type AuthorityConfigSubjectConfigSubjectPtrInput interface {
	pulumi.Input

	ToAuthorityConfigSubjectConfigSubjectPtrOutput() AuthorityConfigSubjectConfigSubjectPtrOutput
	ToAuthorityConfigSubjectConfigSubjectPtrOutputWithContext(context.Context) AuthorityConfigSubjectConfigSubjectPtrOutput
}

AuthorityConfigSubjectConfigSubjectPtrInput is an input type that accepts AuthorityConfigSubjectConfigSubjectArgs, AuthorityConfigSubjectConfigSubjectPtr and AuthorityConfigSubjectConfigSubjectPtrOutput values. You can construct a concrete instance of `AuthorityConfigSubjectConfigSubjectPtrInput` via:

        AuthorityConfigSubjectConfigSubjectArgs{...}

or:

        nil

type AuthorityConfigSubjectConfigSubjectPtrOutput

type AuthorityConfigSubjectConfigSubjectPtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigSubjectConfigSubjectPtrOutput) CommonName

The common name of the distinguished name.

func (AuthorityConfigSubjectConfigSubjectPtrOutput) CountryCode

The country code of the subject.

func (AuthorityConfigSubjectConfigSubjectPtrOutput) Elem

func (AuthorityConfigSubjectConfigSubjectPtrOutput) ElementType

func (AuthorityConfigSubjectConfigSubjectPtrOutput) Locality

The locality or city of the subject.

func (AuthorityConfigSubjectConfigSubjectPtrOutput) Organization

The organization of the subject.

func (AuthorityConfigSubjectConfigSubjectPtrOutput) OrganizationalUnit

The organizational unit of the subject.

func (AuthorityConfigSubjectConfigSubjectPtrOutput) PostalCode

The postal code of the subject.

func (AuthorityConfigSubjectConfigSubjectPtrOutput) Province

The province, territory, or regional state of the subject.

func (AuthorityConfigSubjectConfigSubjectPtrOutput) StreetAddress

The street address of the subject.

func (AuthorityConfigSubjectConfigSubjectPtrOutput) ToAuthorityConfigSubjectConfigSubjectPtrOutput

func (o AuthorityConfigSubjectConfigSubjectPtrOutput) ToAuthorityConfigSubjectConfigSubjectPtrOutput() AuthorityConfigSubjectConfigSubjectPtrOutput

func (AuthorityConfigSubjectConfigSubjectPtrOutput) ToAuthorityConfigSubjectConfigSubjectPtrOutputWithContext

func (o AuthorityConfigSubjectConfigSubjectPtrOutput) ToAuthorityConfigSubjectConfigSubjectPtrOutputWithContext(ctx context.Context) AuthorityConfigSubjectConfigSubjectPtrOutput

type AuthorityConfigX509Config

type AuthorityConfigX509Config struct {
	// Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
	AdditionalExtensions []AuthorityConfigX509ConfigAdditionalExtension `pulumi:"additionalExtensions"`
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers []string `pulumi:"aiaOcspServers"`
	// Describes values that are relevant in a CA certificate.
	CaOptions AuthorityConfigX509ConfigCaOptions `pulumi:"caOptions"`
	// Indicates the intended use for keys that correspond to a certificate.
	KeyUsage AuthorityConfigX509ConfigKeyUsage `pulumi:"keyUsage"`
	// Describes the X.509 name constraints extension.
	NameConstraints *AuthorityConfigX509ConfigNameConstraints `pulumi:"nameConstraints"`
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	PolicyIds []AuthorityConfigX509ConfigPolicyId `pulumi:"policyIds"`
}

type AuthorityConfigX509ConfigAdditionalExtension

type AuthorityConfigX509ConfigAdditionalExtension struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical bool `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	ObjectId AuthorityConfigX509ConfigAdditionalExtensionObjectId `pulumi:"objectId"`
	// The value of this X.509 extension. A base64-encoded string.
	Value string `pulumi:"value"`
}

type AuthorityConfigX509ConfigAdditionalExtensionArgs

type AuthorityConfigX509ConfigAdditionalExtensionArgs struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical pulumi.BoolInput `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	ObjectId AuthorityConfigX509ConfigAdditionalExtensionObjectIdInput `pulumi:"objectId"`
	// The value of this X.509 extension. A base64-encoded string.
	Value pulumi.StringInput `pulumi:"value"`
}

func (AuthorityConfigX509ConfigAdditionalExtensionArgs) ElementType

func (AuthorityConfigX509ConfigAdditionalExtensionArgs) ToAuthorityConfigX509ConfigAdditionalExtensionOutput

func (i AuthorityConfigX509ConfigAdditionalExtensionArgs) ToAuthorityConfigX509ConfigAdditionalExtensionOutput() AuthorityConfigX509ConfigAdditionalExtensionOutput

func (AuthorityConfigX509ConfigAdditionalExtensionArgs) ToAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext

func (i AuthorityConfigX509ConfigAdditionalExtensionArgs) ToAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigAdditionalExtensionOutput

type AuthorityConfigX509ConfigAdditionalExtensionArray

type AuthorityConfigX509ConfigAdditionalExtensionArray []AuthorityConfigX509ConfigAdditionalExtensionInput

func (AuthorityConfigX509ConfigAdditionalExtensionArray) ElementType

func (AuthorityConfigX509ConfigAdditionalExtensionArray) ToAuthorityConfigX509ConfigAdditionalExtensionArrayOutput

func (i AuthorityConfigX509ConfigAdditionalExtensionArray) ToAuthorityConfigX509ConfigAdditionalExtensionArrayOutput() AuthorityConfigX509ConfigAdditionalExtensionArrayOutput

func (AuthorityConfigX509ConfigAdditionalExtensionArray) ToAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext

func (i AuthorityConfigX509ConfigAdditionalExtensionArray) ToAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigAdditionalExtensionArrayOutput

type AuthorityConfigX509ConfigAdditionalExtensionArrayInput

type AuthorityConfigX509ConfigAdditionalExtensionArrayInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigAdditionalExtensionArrayOutput() AuthorityConfigX509ConfigAdditionalExtensionArrayOutput
	ToAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext(context.Context) AuthorityConfigX509ConfigAdditionalExtensionArrayOutput
}

AuthorityConfigX509ConfigAdditionalExtensionArrayInput is an input type that accepts AuthorityConfigX509ConfigAdditionalExtensionArray and AuthorityConfigX509ConfigAdditionalExtensionArrayOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigAdditionalExtensionArrayInput` via:

AuthorityConfigX509ConfigAdditionalExtensionArray{ AuthorityConfigX509ConfigAdditionalExtensionArgs{...} }

type AuthorityConfigX509ConfigAdditionalExtensionArrayOutput

type AuthorityConfigX509ConfigAdditionalExtensionArrayOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigAdditionalExtensionArrayOutput) ElementType

func (AuthorityConfigX509ConfigAdditionalExtensionArrayOutput) Index

func (AuthorityConfigX509ConfigAdditionalExtensionArrayOutput) ToAuthorityConfigX509ConfigAdditionalExtensionArrayOutput

func (AuthorityConfigX509ConfigAdditionalExtensionArrayOutput) ToAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext

func (o AuthorityConfigX509ConfigAdditionalExtensionArrayOutput) ToAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigAdditionalExtensionArrayOutput

type AuthorityConfigX509ConfigAdditionalExtensionInput

type AuthorityConfigX509ConfigAdditionalExtensionInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigAdditionalExtensionOutput() AuthorityConfigX509ConfigAdditionalExtensionOutput
	ToAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext(context.Context) AuthorityConfigX509ConfigAdditionalExtensionOutput
}

AuthorityConfigX509ConfigAdditionalExtensionInput is an input type that accepts AuthorityConfigX509ConfigAdditionalExtensionArgs and AuthorityConfigX509ConfigAdditionalExtensionOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigAdditionalExtensionInput` via:

AuthorityConfigX509ConfigAdditionalExtensionArgs{...}

type AuthorityConfigX509ConfigAdditionalExtensionObjectId

type AuthorityConfigX509ConfigAdditionalExtensionObjectId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs

type AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs) ElementType

func (AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs) ToAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

func (AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs) ToAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext

func (i AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs) ToAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

type AuthorityConfigX509ConfigAdditionalExtensionObjectIdInput

type AuthorityConfigX509ConfigAdditionalExtensionObjectIdInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput() AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput
	ToAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext(context.Context) AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput
}

AuthorityConfigX509ConfigAdditionalExtensionObjectIdInput is an input type that accepts AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs and AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigAdditionalExtensionObjectIdInput` via:

AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs{...}

type AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

type AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ElementType

func (AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ToAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

func (AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ToAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext

func (o AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ToAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

type AuthorityConfigX509ConfigAdditionalExtensionOutput

type AuthorityConfigX509ConfigAdditionalExtensionOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigAdditionalExtensionOutput) Critical

Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).

func (AuthorityConfigX509ConfigAdditionalExtensionOutput) ElementType

func (AuthorityConfigX509ConfigAdditionalExtensionOutput) ObjectId

Describes values that are relevant in a CA certificate. Structure is documented below.

func (AuthorityConfigX509ConfigAdditionalExtensionOutput) ToAuthorityConfigX509ConfigAdditionalExtensionOutput

func (o AuthorityConfigX509ConfigAdditionalExtensionOutput) ToAuthorityConfigX509ConfigAdditionalExtensionOutput() AuthorityConfigX509ConfigAdditionalExtensionOutput

func (AuthorityConfigX509ConfigAdditionalExtensionOutput) ToAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext

func (o AuthorityConfigX509ConfigAdditionalExtensionOutput) ToAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigAdditionalExtensionOutput

func (AuthorityConfigX509ConfigAdditionalExtensionOutput) Value

The value of this X.509 extension. A base64-encoded string.

type AuthorityConfigX509ConfigArgs

type AuthorityConfigX509ConfigArgs struct {
	// Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
	AdditionalExtensions AuthorityConfigX509ConfigAdditionalExtensionArrayInput `pulumi:"additionalExtensions"`
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers pulumi.StringArrayInput `pulumi:"aiaOcspServers"`
	// Describes values that are relevant in a CA certificate.
	CaOptions AuthorityConfigX509ConfigCaOptionsInput `pulumi:"caOptions"`
	// Indicates the intended use for keys that correspond to a certificate.
	KeyUsage AuthorityConfigX509ConfigKeyUsageInput `pulumi:"keyUsage"`
	// Describes the X.509 name constraints extension.
	NameConstraints AuthorityConfigX509ConfigNameConstraintsPtrInput `pulumi:"nameConstraints"`
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	PolicyIds AuthorityConfigX509ConfigPolicyIdArrayInput `pulumi:"policyIds"`
}

func (AuthorityConfigX509ConfigArgs) ElementType

func (AuthorityConfigX509ConfigArgs) ToAuthorityConfigX509ConfigOutput

func (i AuthorityConfigX509ConfigArgs) ToAuthorityConfigX509ConfigOutput() AuthorityConfigX509ConfigOutput

func (AuthorityConfigX509ConfigArgs) ToAuthorityConfigX509ConfigOutputWithContext

func (i AuthorityConfigX509ConfigArgs) ToAuthorityConfigX509ConfigOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigOutput

func (AuthorityConfigX509ConfigArgs) ToAuthorityConfigX509ConfigPtrOutput

func (i AuthorityConfigX509ConfigArgs) ToAuthorityConfigX509ConfigPtrOutput() AuthorityConfigX509ConfigPtrOutput

func (AuthorityConfigX509ConfigArgs) ToAuthorityConfigX509ConfigPtrOutputWithContext

func (i AuthorityConfigX509ConfigArgs) ToAuthorityConfigX509ConfigPtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigPtrOutput

type AuthorityConfigX509ConfigCaOptions

type AuthorityConfigX509ConfigCaOptions struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa bool `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. Setting the value to 0
	// requires setting `zeroMaxIssuerPathLength = true`.
	MaxIssuerPathLength *int `pulumi:"maxIssuerPathLength"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.
	NonCa *bool `pulumi:"nonCa"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// If both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset,
	// the max path length will be omitted from the CA certificate.
	ZeroMaxIssuerPathLength *bool `pulumi:"zeroMaxIssuerPathLength"`
}

type AuthorityConfigX509ConfigCaOptionsArgs

type AuthorityConfigX509ConfigCaOptionsArgs struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa pulumi.BoolInput `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. Setting the value to 0
	// requires setting `zeroMaxIssuerPathLength = true`.
	MaxIssuerPathLength pulumi.IntPtrInput `pulumi:"maxIssuerPathLength"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.
	NonCa pulumi.BoolPtrInput `pulumi:"nonCa"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// If both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset,
	// the max path length will be omitted from the CA certificate.
	ZeroMaxIssuerPathLength pulumi.BoolPtrInput `pulumi:"zeroMaxIssuerPathLength"`
}

func (AuthorityConfigX509ConfigCaOptionsArgs) ElementType

func (AuthorityConfigX509ConfigCaOptionsArgs) ToAuthorityConfigX509ConfigCaOptionsOutput

func (i AuthorityConfigX509ConfigCaOptionsArgs) ToAuthorityConfigX509ConfigCaOptionsOutput() AuthorityConfigX509ConfigCaOptionsOutput

func (AuthorityConfigX509ConfigCaOptionsArgs) ToAuthorityConfigX509ConfigCaOptionsOutputWithContext

func (i AuthorityConfigX509ConfigCaOptionsArgs) ToAuthorityConfigX509ConfigCaOptionsOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigCaOptionsOutput

func (AuthorityConfigX509ConfigCaOptionsArgs) ToAuthorityConfigX509ConfigCaOptionsPtrOutput

func (i AuthorityConfigX509ConfigCaOptionsArgs) ToAuthorityConfigX509ConfigCaOptionsPtrOutput() AuthorityConfigX509ConfigCaOptionsPtrOutput

func (AuthorityConfigX509ConfigCaOptionsArgs) ToAuthorityConfigX509ConfigCaOptionsPtrOutputWithContext

func (i AuthorityConfigX509ConfigCaOptionsArgs) ToAuthorityConfigX509ConfigCaOptionsPtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigCaOptionsPtrOutput

type AuthorityConfigX509ConfigCaOptionsInput

type AuthorityConfigX509ConfigCaOptionsInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigCaOptionsOutput() AuthorityConfigX509ConfigCaOptionsOutput
	ToAuthorityConfigX509ConfigCaOptionsOutputWithContext(context.Context) AuthorityConfigX509ConfigCaOptionsOutput
}

AuthorityConfigX509ConfigCaOptionsInput is an input type that accepts AuthorityConfigX509ConfigCaOptionsArgs and AuthorityConfigX509ConfigCaOptionsOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigCaOptionsInput` via:

AuthorityConfigX509ConfigCaOptionsArgs{...}

type AuthorityConfigX509ConfigCaOptionsOutput

type AuthorityConfigX509ConfigCaOptionsOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigCaOptionsOutput) ElementType

func (AuthorityConfigX509ConfigCaOptionsOutput) IsCa

When true, the "CA" in Basic Constraints extension will be set to true.

func (AuthorityConfigX509ConfigCaOptionsOutput) MaxIssuerPathLength

Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. Setting the value to 0 requires setting `zeroMaxIssuerPathLength = true`.

func (AuthorityConfigX509ConfigCaOptionsOutput) NonCa

When true, the "CA" in Basic Constraints extension will be set to false. If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.

func (AuthorityConfigX509ConfigCaOptionsOutput) ToAuthorityConfigX509ConfigCaOptionsOutput

func (o AuthorityConfigX509ConfigCaOptionsOutput) ToAuthorityConfigX509ConfigCaOptionsOutput() AuthorityConfigX509ConfigCaOptionsOutput

func (AuthorityConfigX509ConfigCaOptionsOutput) ToAuthorityConfigX509ConfigCaOptionsOutputWithContext

func (o AuthorityConfigX509ConfigCaOptionsOutput) ToAuthorityConfigX509ConfigCaOptionsOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigCaOptionsOutput

func (AuthorityConfigX509ConfigCaOptionsOutput) ToAuthorityConfigX509ConfigCaOptionsPtrOutput

func (o AuthorityConfigX509ConfigCaOptionsOutput) ToAuthorityConfigX509ConfigCaOptionsPtrOutput() AuthorityConfigX509ConfigCaOptionsPtrOutput

func (AuthorityConfigX509ConfigCaOptionsOutput) ToAuthorityConfigX509ConfigCaOptionsPtrOutputWithContext

func (o AuthorityConfigX509ConfigCaOptionsOutput) ToAuthorityConfigX509ConfigCaOptionsPtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigCaOptionsPtrOutput

func (AuthorityConfigX509ConfigCaOptionsOutput) ZeroMaxIssuerPathLength

When true, the "path length constraint" in Basic Constraints extension will be set to 0. If both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset, the max path length will be omitted from the CA certificate.

type AuthorityConfigX509ConfigCaOptionsPtrInput

type AuthorityConfigX509ConfigCaOptionsPtrInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigCaOptionsPtrOutput() AuthorityConfigX509ConfigCaOptionsPtrOutput
	ToAuthorityConfigX509ConfigCaOptionsPtrOutputWithContext(context.Context) AuthorityConfigX509ConfigCaOptionsPtrOutput
}

AuthorityConfigX509ConfigCaOptionsPtrInput is an input type that accepts AuthorityConfigX509ConfigCaOptionsArgs, AuthorityConfigX509ConfigCaOptionsPtr and AuthorityConfigX509ConfigCaOptionsPtrOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigCaOptionsPtrInput` via:

        AuthorityConfigX509ConfigCaOptionsArgs{...}

or:

        nil

type AuthorityConfigX509ConfigCaOptionsPtrOutput

type AuthorityConfigX509ConfigCaOptionsPtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigCaOptionsPtrOutput) Elem

func (AuthorityConfigX509ConfigCaOptionsPtrOutput) ElementType

func (AuthorityConfigX509ConfigCaOptionsPtrOutput) IsCa

When true, the "CA" in Basic Constraints extension will be set to true.

func (AuthorityConfigX509ConfigCaOptionsPtrOutput) MaxIssuerPathLength

Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. Setting the value to 0 requires setting `zeroMaxIssuerPathLength = true`.

func (AuthorityConfigX509ConfigCaOptionsPtrOutput) NonCa

When true, the "CA" in Basic Constraints extension will be set to false. If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.

func (AuthorityConfigX509ConfigCaOptionsPtrOutput) ToAuthorityConfigX509ConfigCaOptionsPtrOutput

func (o AuthorityConfigX509ConfigCaOptionsPtrOutput) ToAuthorityConfigX509ConfigCaOptionsPtrOutput() AuthorityConfigX509ConfigCaOptionsPtrOutput

func (AuthorityConfigX509ConfigCaOptionsPtrOutput) ToAuthorityConfigX509ConfigCaOptionsPtrOutputWithContext

func (o AuthorityConfigX509ConfigCaOptionsPtrOutput) ToAuthorityConfigX509ConfigCaOptionsPtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigCaOptionsPtrOutput

func (AuthorityConfigX509ConfigCaOptionsPtrOutput) ZeroMaxIssuerPathLength

When true, the "path length constraint" in Basic Constraints extension will be set to 0. If both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset, the max path length will be omitted from the CA certificate.

type AuthorityConfigX509ConfigInput

type AuthorityConfigX509ConfigInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigOutput() AuthorityConfigX509ConfigOutput
	ToAuthorityConfigX509ConfigOutputWithContext(context.Context) AuthorityConfigX509ConfigOutput
}

AuthorityConfigX509ConfigInput is an input type that accepts AuthorityConfigX509ConfigArgs and AuthorityConfigX509ConfigOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigInput` via:

AuthorityConfigX509ConfigArgs{...}

type AuthorityConfigX509ConfigKeyUsage

type AuthorityConfigX509ConfigKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	BaseKeyUsage AuthorityConfigX509ConfigKeyUsageBaseKeyUsage `pulumi:"baseKeyUsage"`
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	ExtendedKeyUsage AuthorityConfigX509ConfigKeyUsageExtendedKeyUsage `pulumi:"extendedKeyUsage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// Structure is documented below.
	UnknownExtendedKeyUsages []AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsage `pulumi:"unknownExtendedKeyUsages"`
}

type AuthorityConfigX509ConfigKeyUsageArgs

type AuthorityConfigX509ConfigKeyUsageArgs struct {
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	BaseKeyUsage AuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput `pulumi:"baseKeyUsage"`
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	ExtendedKeyUsage AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput `pulumi:"extendedKeyUsage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// Structure is documented below.
	UnknownExtendedKeyUsages AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput `pulumi:"unknownExtendedKeyUsages"`
}

func (AuthorityConfigX509ConfigKeyUsageArgs) ElementType

func (AuthorityConfigX509ConfigKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageOutput

func (i AuthorityConfigX509ConfigKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageOutput() AuthorityConfigX509ConfigKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageOutputWithContext

func (i AuthorityConfigX509ConfigKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsagePtrOutput

func (i AuthorityConfigX509ConfigKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsagePtrOutput() AuthorityConfigX509ConfigKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsagePtrOutputWithContext

func (i AuthorityConfigX509ConfigKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsagePtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsage

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	CertSign *bool `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment *bool `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign *bool `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment *bool `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly *bool `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature *bool `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly *bool `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement *bool `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment *bool `pulumi:"keyEncipherment"`
}

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs struct {
	// The key may be used to sign certificates.
	CertSign pulumi.BoolPtrInput `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment pulumi.BoolPtrInput `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign pulumi.BoolPtrInput `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment pulumi.BoolPtrInput `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly pulumi.BoolPtrInput `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature pulumi.BoolPtrInput `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly pulumi.BoolPtrInput `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement pulumi.BoolPtrInput `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment pulumi.BoolPtrInput `pulumi:"keyEncipherment"`
}

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ElementType

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (i AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput() AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext

func (i AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (i AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput() AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext

func (i AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput() AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput
	ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext(context.Context) AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput
}

AuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput is an input type that accepts AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs and AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput` via:

AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{...}

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) CertSign

The key may be used to sign certificates.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) CrlSign

The key may be used sign certificate revocation lists.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) DataEncipherment

The key may be used to encipher data.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) DecipherOnly

The key may be used to decipher only.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) DigitalSignature

The key may be used for digital signatures.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ElementType

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) EncipherOnly

The key may be used to encipher only.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) KeyEncipherment

The key may be used to encipher other keys.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (o AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput() AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (o AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput() AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrInput

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput() AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput
	ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext(context.Context) AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput
}

AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrInput is an input type that accepts AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs, AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtr and AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrInput` via:

        AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{...}

or:

        nil

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) CertSign

The key may be used to sign certificates.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) CrlSign

The key may be used sign certificate revocation lists.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) DataEncipherment

The key may be used to encipher data.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) DecipherOnly

The key may be used to decipher only.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) DigitalSignature

The key may be used for digital signatures.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) Elem

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ElementType

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) EncipherOnly

The key may be used to encipher only.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) KeyEncipherment

The key may be used to encipher other keys.

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsage

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth *bool `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning *bool `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection *bool `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning *bool `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth *bool `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping *bool `pulumi:"timeStamping"`
}

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth pulumi.BoolPtrInput `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning pulumi.BoolPtrInput `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection pulumi.BoolPtrInput `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning pulumi.BoolPtrInput `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth pulumi.BoolPtrInput `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping pulumi.BoolPtrInput `pulumi:"timeStamping"`
}

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ElementType

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (i AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput() AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext

func (i AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

func (i AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput() AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext

func (i AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput() AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput
	ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext(context.Context) AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput
}

AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput is an input type that accepts AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs and AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput` via:

AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{...}

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ElementType

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrInput

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput() AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput
	ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext(context.Context) AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput
}

AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrInput is an input type that accepts AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs, AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtr and AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrInput` via:

        AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{...}

or:

        nil

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) Elem

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ElementType

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsageInput

type AuthorityConfigX509ConfigKeyUsageInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigKeyUsageOutput() AuthorityConfigX509ConfigKeyUsageOutput
	ToAuthorityConfigX509ConfigKeyUsageOutputWithContext(context.Context) AuthorityConfigX509ConfigKeyUsageOutput
}

AuthorityConfigX509ConfigKeyUsageInput is an input type that accepts AuthorityConfigX509ConfigKeyUsageArgs and AuthorityConfigX509ConfigKeyUsageOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigKeyUsageInput` via:

AuthorityConfigX509ConfigKeyUsageArgs{...}

type AuthorityConfigX509ConfigKeyUsageOutput

type AuthorityConfigX509ConfigKeyUsageOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigKeyUsageOutput) BaseKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (AuthorityConfigX509ConfigKeyUsageOutput) ElementType

func (AuthorityConfigX509ConfigKeyUsageOutput) ExtendedKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (AuthorityConfigX509ConfigKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageOutput

func (o AuthorityConfigX509ConfigKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageOutput() AuthorityConfigX509ConfigKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsagePtrOutput

func (o AuthorityConfigX509ConfigKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsagePtrOutput() AuthorityConfigX509ConfigKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsagePtrOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsagePtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsageOutput) UnknownExtendedKeyUsages

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages. Structure is documented below.

type AuthorityConfigX509ConfigKeyUsagePtrInput

type AuthorityConfigX509ConfigKeyUsagePtrInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigKeyUsagePtrOutput() AuthorityConfigX509ConfigKeyUsagePtrOutput
	ToAuthorityConfigX509ConfigKeyUsagePtrOutputWithContext(context.Context) AuthorityConfigX509ConfigKeyUsagePtrOutput
}

AuthorityConfigX509ConfigKeyUsagePtrInput is an input type that accepts AuthorityConfigX509ConfigKeyUsageArgs, AuthorityConfigX509ConfigKeyUsagePtr and AuthorityConfigX509ConfigKeyUsagePtrOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigKeyUsagePtrInput` via:

        AuthorityConfigX509ConfigKeyUsageArgs{...}

or:

        nil

type AuthorityConfigX509ConfigKeyUsagePtrOutput

type AuthorityConfigX509ConfigKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigKeyUsagePtrOutput) BaseKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (AuthorityConfigX509ConfigKeyUsagePtrOutput) Elem

func (AuthorityConfigX509ConfigKeyUsagePtrOutput) ElementType

func (AuthorityConfigX509ConfigKeyUsagePtrOutput) ExtendedKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (AuthorityConfigX509ConfigKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsagePtrOutput

func (o AuthorityConfigX509ConfigKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsagePtrOutput() AuthorityConfigX509ConfigKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsagePtrOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsagePtrOutput) ToAuthorityConfigX509ConfigKeyUsagePtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsagePtrOutput

func (AuthorityConfigX509ConfigKeyUsagePtrOutput) UnknownExtendedKeyUsages

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages. Structure is documented below.

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsage

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsage struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ElementType

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext

func (i AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray []AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ElementType

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

func (i AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput() AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput
	ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(context.Context) AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput
}

AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput is an input type that accepts AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray and AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput` via:

AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray{ AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs{...} }

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ElementType

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) Index

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput() AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput
	ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext(context.Context) AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput
}

AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput is an input type that accepts AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs and AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput` via:

AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs{...}

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

type AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ElementType

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

func (AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext

func (o AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ToAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

type AuthorityConfigX509ConfigNameConstraints

type AuthorityConfigX509ConfigNameConstraints struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical bool `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	ExcludedDnsNames []string `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses []string `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges []string `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	ExcludedUris []string `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	PermittedDnsNames []string `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses []string `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges []string `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	PermittedUris []string `pulumi:"permittedUris"`
}

type AuthorityConfigX509ConfigNameConstraintsArgs

type AuthorityConfigX509ConfigNameConstraintsArgs struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical pulumi.BoolInput `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	ExcludedDnsNames pulumi.StringArrayInput `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses pulumi.StringArrayInput `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges pulumi.StringArrayInput `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	ExcludedUris pulumi.StringArrayInput `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	PermittedDnsNames pulumi.StringArrayInput `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses pulumi.StringArrayInput `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges pulumi.StringArrayInput `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	PermittedUris pulumi.StringArrayInput `pulumi:"permittedUris"`
}

func (AuthorityConfigX509ConfigNameConstraintsArgs) ElementType

func (AuthorityConfigX509ConfigNameConstraintsArgs) ToAuthorityConfigX509ConfigNameConstraintsOutput

func (i AuthorityConfigX509ConfigNameConstraintsArgs) ToAuthorityConfigX509ConfigNameConstraintsOutput() AuthorityConfigX509ConfigNameConstraintsOutput

func (AuthorityConfigX509ConfigNameConstraintsArgs) ToAuthorityConfigX509ConfigNameConstraintsOutputWithContext

func (i AuthorityConfigX509ConfigNameConstraintsArgs) ToAuthorityConfigX509ConfigNameConstraintsOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigNameConstraintsOutput

func (AuthorityConfigX509ConfigNameConstraintsArgs) ToAuthorityConfigX509ConfigNameConstraintsPtrOutput

func (i AuthorityConfigX509ConfigNameConstraintsArgs) ToAuthorityConfigX509ConfigNameConstraintsPtrOutput() AuthorityConfigX509ConfigNameConstraintsPtrOutput

func (AuthorityConfigX509ConfigNameConstraintsArgs) ToAuthorityConfigX509ConfigNameConstraintsPtrOutputWithContext

func (i AuthorityConfigX509ConfigNameConstraintsArgs) ToAuthorityConfigX509ConfigNameConstraintsPtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigNameConstraintsPtrOutput

type AuthorityConfigX509ConfigNameConstraintsInput

type AuthorityConfigX509ConfigNameConstraintsInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigNameConstraintsOutput() AuthorityConfigX509ConfigNameConstraintsOutput
	ToAuthorityConfigX509ConfigNameConstraintsOutputWithContext(context.Context) AuthorityConfigX509ConfigNameConstraintsOutput
}

AuthorityConfigX509ConfigNameConstraintsInput is an input type that accepts AuthorityConfigX509ConfigNameConstraintsArgs and AuthorityConfigX509ConfigNameConstraintsOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigNameConstraintsInput` via:

AuthorityConfigX509ConfigNameConstraintsArgs{...}

type AuthorityConfigX509ConfigNameConstraintsOutput

type AuthorityConfigX509ConfigNameConstraintsOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigNameConstraintsOutput) Critical

Indicates whether or not the name constraints are marked critical.

func (AuthorityConfigX509ConfigNameConstraintsOutput) ElementType

func (AuthorityConfigX509ConfigNameConstraintsOutput) ExcludedDnsNames

Contains excluded DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (AuthorityConfigX509ConfigNameConstraintsOutput) ExcludedEmailAddresses

Contains the excluded email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (AuthorityConfigX509ConfigNameConstraintsOutput) ExcludedIpRanges

Contains the excluded IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (AuthorityConfigX509ConfigNameConstraintsOutput) ExcludedUris

Contains the excluded URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (AuthorityConfigX509ConfigNameConstraintsOutput) PermittedDnsNames

Contains permitted DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (AuthorityConfigX509ConfigNameConstraintsOutput) PermittedEmailAddresses

Contains the permitted email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (AuthorityConfigX509ConfigNameConstraintsOutput) PermittedIpRanges

Contains the permitted IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (AuthorityConfigX509ConfigNameConstraintsOutput) PermittedUris

Contains the permitted URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (AuthorityConfigX509ConfigNameConstraintsOutput) ToAuthorityConfigX509ConfigNameConstraintsOutput

func (o AuthorityConfigX509ConfigNameConstraintsOutput) ToAuthorityConfigX509ConfigNameConstraintsOutput() AuthorityConfigX509ConfigNameConstraintsOutput

func (AuthorityConfigX509ConfigNameConstraintsOutput) ToAuthorityConfigX509ConfigNameConstraintsOutputWithContext

func (o AuthorityConfigX509ConfigNameConstraintsOutput) ToAuthorityConfigX509ConfigNameConstraintsOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigNameConstraintsOutput

func (AuthorityConfigX509ConfigNameConstraintsOutput) ToAuthorityConfigX509ConfigNameConstraintsPtrOutput

func (o AuthorityConfigX509ConfigNameConstraintsOutput) ToAuthorityConfigX509ConfigNameConstraintsPtrOutput() AuthorityConfigX509ConfigNameConstraintsPtrOutput

func (AuthorityConfigX509ConfigNameConstraintsOutput) ToAuthorityConfigX509ConfigNameConstraintsPtrOutputWithContext

func (o AuthorityConfigX509ConfigNameConstraintsOutput) ToAuthorityConfigX509ConfigNameConstraintsPtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigNameConstraintsPtrOutput

type AuthorityConfigX509ConfigNameConstraintsPtrInput

type AuthorityConfigX509ConfigNameConstraintsPtrInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigNameConstraintsPtrOutput() AuthorityConfigX509ConfigNameConstraintsPtrOutput
	ToAuthorityConfigX509ConfigNameConstraintsPtrOutputWithContext(context.Context) AuthorityConfigX509ConfigNameConstraintsPtrOutput
}

AuthorityConfigX509ConfigNameConstraintsPtrInput is an input type that accepts AuthorityConfigX509ConfigNameConstraintsArgs, AuthorityConfigX509ConfigNameConstraintsPtr and AuthorityConfigX509ConfigNameConstraintsPtrOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigNameConstraintsPtrInput` via:

        AuthorityConfigX509ConfigNameConstraintsArgs{...}

or:

        nil

type AuthorityConfigX509ConfigNameConstraintsPtrOutput

type AuthorityConfigX509ConfigNameConstraintsPtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) Critical

Indicates whether or not the name constraints are marked critical.

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) Elem

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) ElementType

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) ExcludedDnsNames

Contains excluded DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) ExcludedEmailAddresses

Contains the excluded email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) ExcludedIpRanges

Contains the excluded IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) ExcludedUris

Contains the excluded URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) PermittedDnsNames

Contains permitted DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) PermittedEmailAddresses

Contains the permitted email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) PermittedIpRanges

Contains the permitted IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) PermittedUris

Contains the permitted URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) ToAuthorityConfigX509ConfigNameConstraintsPtrOutput

func (o AuthorityConfigX509ConfigNameConstraintsPtrOutput) ToAuthorityConfigX509ConfigNameConstraintsPtrOutput() AuthorityConfigX509ConfigNameConstraintsPtrOutput

func (AuthorityConfigX509ConfigNameConstraintsPtrOutput) ToAuthorityConfigX509ConfigNameConstraintsPtrOutputWithContext

func (o AuthorityConfigX509ConfigNameConstraintsPtrOutput) ToAuthorityConfigX509ConfigNameConstraintsPtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigNameConstraintsPtrOutput

type AuthorityConfigX509ConfigOutput

type AuthorityConfigX509ConfigOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigOutput) AdditionalExtensions

Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.

func (AuthorityConfigX509ConfigOutput) AiaOcspServers

Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (AuthorityConfigX509ConfigOutput) CaOptions

Describes values that are relevant in a CA certificate.

func (AuthorityConfigX509ConfigOutput) ElementType

func (AuthorityConfigX509ConfigOutput) KeyUsage

Indicates the intended use for keys that correspond to a certificate.

func (AuthorityConfigX509ConfigOutput) NameConstraints

Describes the X.509 name constraints extension.

func (AuthorityConfigX509ConfigOutput) PolicyIds

Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.

func (AuthorityConfigX509ConfigOutput) ToAuthorityConfigX509ConfigOutput

func (o AuthorityConfigX509ConfigOutput) ToAuthorityConfigX509ConfigOutput() AuthorityConfigX509ConfigOutput

func (AuthorityConfigX509ConfigOutput) ToAuthorityConfigX509ConfigOutputWithContext

func (o AuthorityConfigX509ConfigOutput) ToAuthorityConfigX509ConfigOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigOutput

func (AuthorityConfigX509ConfigOutput) ToAuthorityConfigX509ConfigPtrOutput

func (o AuthorityConfigX509ConfigOutput) ToAuthorityConfigX509ConfigPtrOutput() AuthorityConfigX509ConfigPtrOutput

func (AuthorityConfigX509ConfigOutput) ToAuthorityConfigX509ConfigPtrOutputWithContext

func (o AuthorityConfigX509ConfigOutput) ToAuthorityConfigX509ConfigPtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigPtrOutput

type AuthorityConfigX509ConfigPolicyId

type AuthorityConfigX509ConfigPolicyId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type AuthorityConfigX509ConfigPolicyIdArgs

type AuthorityConfigX509ConfigPolicyIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (AuthorityConfigX509ConfigPolicyIdArgs) ElementType

func (AuthorityConfigX509ConfigPolicyIdArgs) ToAuthorityConfigX509ConfigPolicyIdOutput

func (i AuthorityConfigX509ConfigPolicyIdArgs) ToAuthorityConfigX509ConfigPolicyIdOutput() AuthorityConfigX509ConfigPolicyIdOutput

func (AuthorityConfigX509ConfigPolicyIdArgs) ToAuthorityConfigX509ConfigPolicyIdOutputWithContext

func (i AuthorityConfigX509ConfigPolicyIdArgs) ToAuthorityConfigX509ConfigPolicyIdOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigPolicyIdOutput

type AuthorityConfigX509ConfigPolicyIdArray

type AuthorityConfigX509ConfigPolicyIdArray []AuthorityConfigX509ConfigPolicyIdInput

func (AuthorityConfigX509ConfigPolicyIdArray) ElementType

func (AuthorityConfigX509ConfigPolicyIdArray) ToAuthorityConfigX509ConfigPolicyIdArrayOutput

func (i AuthorityConfigX509ConfigPolicyIdArray) ToAuthorityConfigX509ConfigPolicyIdArrayOutput() AuthorityConfigX509ConfigPolicyIdArrayOutput

func (AuthorityConfigX509ConfigPolicyIdArray) ToAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext

func (i AuthorityConfigX509ConfigPolicyIdArray) ToAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigPolicyIdArrayOutput

type AuthorityConfigX509ConfigPolicyIdArrayInput

type AuthorityConfigX509ConfigPolicyIdArrayInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigPolicyIdArrayOutput() AuthorityConfigX509ConfigPolicyIdArrayOutput
	ToAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext(context.Context) AuthorityConfigX509ConfigPolicyIdArrayOutput
}

AuthorityConfigX509ConfigPolicyIdArrayInput is an input type that accepts AuthorityConfigX509ConfigPolicyIdArray and AuthorityConfigX509ConfigPolicyIdArrayOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigPolicyIdArrayInput` via:

AuthorityConfigX509ConfigPolicyIdArray{ AuthorityConfigX509ConfigPolicyIdArgs{...} }

type AuthorityConfigX509ConfigPolicyIdArrayOutput

type AuthorityConfigX509ConfigPolicyIdArrayOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigPolicyIdArrayOutput) ElementType

func (AuthorityConfigX509ConfigPolicyIdArrayOutput) Index

func (AuthorityConfigX509ConfigPolicyIdArrayOutput) ToAuthorityConfigX509ConfigPolicyIdArrayOutput

func (o AuthorityConfigX509ConfigPolicyIdArrayOutput) ToAuthorityConfigX509ConfigPolicyIdArrayOutput() AuthorityConfigX509ConfigPolicyIdArrayOutput

func (AuthorityConfigX509ConfigPolicyIdArrayOutput) ToAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext

func (o AuthorityConfigX509ConfigPolicyIdArrayOutput) ToAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigPolicyIdArrayOutput

type AuthorityConfigX509ConfigPolicyIdInput

type AuthorityConfigX509ConfigPolicyIdInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigPolicyIdOutput() AuthorityConfigX509ConfigPolicyIdOutput
	ToAuthorityConfigX509ConfigPolicyIdOutputWithContext(context.Context) AuthorityConfigX509ConfigPolicyIdOutput
}

AuthorityConfigX509ConfigPolicyIdInput is an input type that accepts AuthorityConfigX509ConfigPolicyIdArgs and AuthorityConfigX509ConfigPolicyIdOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigPolicyIdInput` via:

AuthorityConfigX509ConfigPolicyIdArgs{...}

type AuthorityConfigX509ConfigPolicyIdOutput

type AuthorityConfigX509ConfigPolicyIdOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigPolicyIdOutput) ElementType

func (AuthorityConfigX509ConfigPolicyIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (AuthorityConfigX509ConfigPolicyIdOutput) ToAuthorityConfigX509ConfigPolicyIdOutput

func (o AuthorityConfigX509ConfigPolicyIdOutput) ToAuthorityConfigX509ConfigPolicyIdOutput() AuthorityConfigX509ConfigPolicyIdOutput

func (AuthorityConfigX509ConfigPolicyIdOutput) ToAuthorityConfigX509ConfigPolicyIdOutputWithContext

func (o AuthorityConfigX509ConfigPolicyIdOutput) ToAuthorityConfigX509ConfigPolicyIdOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigPolicyIdOutput

type AuthorityConfigX509ConfigPtrInput

type AuthorityConfigX509ConfigPtrInput interface {
	pulumi.Input

	ToAuthorityConfigX509ConfigPtrOutput() AuthorityConfigX509ConfigPtrOutput
	ToAuthorityConfigX509ConfigPtrOutputWithContext(context.Context) AuthorityConfigX509ConfigPtrOutput
}

AuthorityConfigX509ConfigPtrInput is an input type that accepts AuthorityConfigX509ConfigArgs, AuthorityConfigX509ConfigPtr and AuthorityConfigX509ConfigPtrOutput values. You can construct a concrete instance of `AuthorityConfigX509ConfigPtrInput` via:

        AuthorityConfigX509ConfigArgs{...}

or:

        nil

type AuthorityConfigX509ConfigPtrOutput

type AuthorityConfigX509ConfigPtrOutput struct{ *pulumi.OutputState }

func (AuthorityConfigX509ConfigPtrOutput) AdditionalExtensions

Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.

func (AuthorityConfigX509ConfigPtrOutput) AiaOcspServers

Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (AuthorityConfigX509ConfigPtrOutput) CaOptions

Describes values that are relevant in a CA certificate.

func (AuthorityConfigX509ConfigPtrOutput) Elem

func (AuthorityConfigX509ConfigPtrOutput) ElementType

func (AuthorityConfigX509ConfigPtrOutput) KeyUsage

Indicates the intended use for keys that correspond to a certificate.

func (AuthorityConfigX509ConfigPtrOutput) NameConstraints

Describes the X.509 name constraints extension.

func (AuthorityConfigX509ConfigPtrOutput) PolicyIds

Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.

func (AuthorityConfigX509ConfigPtrOutput) ToAuthorityConfigX509ConfigPtrOutput

func (o AuthorityConfigX509ConfigPtrOutput) ToAuthorityConfigX509ConfigPtrOutput() AuthorityConfigX509ConfigPtrOutput

func (AuthorityConfigX509ConfigPtrOutput) ToAuthorityConfigX509ConfigPtrOutputWithContext

func (o AuthorityConfigX509ConfigPtrOutput) ToAuthorityConfigX509ConfigPtrOutputWithContext(ctx context.Context) AuthorityConfigX509ConfigPtrOutput

type AuthorityInput

type AuthorityInput interface {
	pulumi.Input

	ToAuthorityOutput() AuthorityOutput
	ToAuthorityOutputWithContext(ctx context.Context) AuthorityOutput
}

type AuthorityKeySpec

type AuthorityKeySpec struct {
	// The algorithm to use for creating a managed Cloud KMS key for a for a simplified
	// experience. All managed keys will be have their ProtectionLevel as HSM.
	// Possible values are: `SIGN_HASH_ALGORITHM_UNSPECIFIED`, `RSA_PSS_2048_SHA256`, `RSA_PSS_3072_SHA256`, `RSA_PSS_4096_SHA256`, `RSA_PKCS1_2048_SHA256`, `RSA_PKCS1_3072_SHA256`, `RSA_PKCS1_4096_SHA256`, `EC_P256_SHA256`, `EC_P384_SHA384`.
	//
	// ***
	Algorithm *string `pulumi:"algorithm"`
	// The resource name for an existing Cloud KMS CryptoKeyVersion in the format
	// `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
	CloudKmsKeyVersion *string `pulumi:"cloudKmsKeyVersion"`
}

type AuthorityKeySpecArgs

type AuthorityKeySpecArgs struct {
	// The algorithm to use for creating a managed Cloud KMS key for a for a simplified
	// experience. All managed keys will be have their ProtectionLevel as HSM.
	// Possible values are: `SIGN_HASH_ALGORITHM_UNSPECIFIED`, `RSA_PSS_2048_SHA256`, `RSA_PSS_3072_SHA256`, `RSA_PSS_4096_SHA256`, `RSA_PKCS1_2048_SHA256`, `RSA_PKCS1_3072_SHA256`, `RSA_PKCS1_4096_SHA256`, `EC_P256_SHA256`, `EC_P384_SHA384`.
	//
	// ***
	Algorithm pulumi.StringPtrInput `pulumi:"algorithm"`
	// The resource name for an existing Cloud KMS CryptoKeyVersion in the format
	// `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
	CloudKmsKeyVersion pulumi.StringPtrInput `pulumi:"cloudKmsKeyVersion"`
}

func (AuthorityKeySpecArgs) ElementType

func (AuthorityKeySpecArgs) ElementType() reflect.Type

func (AuthorityKeySpecArgs) ToAuthorityKeySpecOutput

func (i AuthorityKeySpecArgs) ToAuthorityKeySpecOutput() AuthorityKeySpecOutput

func (AuthorityKeySpecArgs) ToAuthorityKeySpecOutputWithContext

func (i AuthorityKeySpecArgs) ToAuthorityKeySpecOutputWithContext(ctx context.Context) AuthorityKeySpecOutput

func (AuthorityKeySpecArgs) ToAuthorityKeySpecPtrOutput

func (i AuthorityKeySpecArgs) ToAuthorityKeySpecPtrOutput() AuthorityKeySpecPtrOutput

func (AuthorityKeySpecArgs) ToAuthorityKeySpecPtrOutputWithContext

func (i AuthorityKeySpecArgs) ToAuthorityKeySpecPtrOutputWithContext(ctx context.Context) AuthorityKeySpecPtrOutput

type AuthorityKeySpecInput

type AuthorityKeySpecInput interface {
	pulumi.Input

	ToAuthorityKeySpecOutput() AuthorityKeySpecOutput
	ToAuthorityKeySpecOutputWithContext(context.Context) AuthorityKeySpecOutput
}

AuthorityKeySpecInput is an input type that accepts AuthorityKeySpecArgs and AuthorityKeySpecOutput values. You can construct a concrete instance of `AuthorityKeySpecInput` via:

AuthorityKeySpecArgs{...}

type AuthorityKeySpecOutput

type AuthorityKeySpecOutput struct{ *pulumi.OutputState }

func (AuthorityKeySpecOutput) Algorithm

The algorithm to use for creating a managed Cloud KMS key for a for a simplified experience. All managed keys will be have their ProtectionLevel as HSM. Possible values are: `SIGN_HASH_ALGORITHM_UNSPECIFIED`, `RSA_PSS_2048_SHA256`, `RSA_PSS_3072_SHA256`, `RSA_PSS_4096_SHA256`, `RSA_PKCS1_2048_SHA256`, `RSA_PKCS1_3072_SHA256`, `RSA_PKCS1_4096_SHA256`, `EC_P256_SHA256`, `EC_P384_SHA384`.

***

func (AuthorityKeySpecOutput) CloudKmsKeyVersion

func (o AuthorityKeySpecOutput) CloudKmsKeyVersion() pulumi.StringPtrOutput

The resource name for an existing Cloud KMS CryptoKeyVersion in the format `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.

func (AuthorityKeySpecOutput) ElementType

func (AuthorityKeySpecOutput) ElementType() reflect.Type

func (AuthorityKeySpecOutput) ToAuthorityKeySpecOutput

func (o AuthorityKeySpecOutput) ToAuthorityKeySpecOutput() AuthorityKeySpecOutput

func (AuthorityKeySpecOutput) ToAuthorityKeySpecOutputWithContext

func (o AuthorityKeySpecOutput) ToAuthorityKeySpecOutputWithContext(ctx context.Context) AuthorityKeySpecOutput

func (AuthorityKeySpecOutput) ToAuthorityKeySpecPtrOutput

func (o AuthorityKeySpecOutput) ToAuthorityKeySpecPtrOutput() AuthorityKeySpecPtrOutput

func (AuthorityKeySpecOutput) ToAuthorityKeySpecPtrOutputWithContext

func (o AuthorityKeySpecOutput) ToAuthorityKeySpecPtrOutputWithContext(ctx context.Context) AuthorityKeySpecPtrOutput

type AuthorityKeySpecPtrInput

type AuthorityKeySpecPtrInput interface {
	pulumi.Input

	ToAuthorityKeySpecPtrOutput() AuthorityKeySpecPtrOutput
	ToAuthorityKeySpecPtrOutputWithContext(context.Context) AuthorityKeySpecPtrOutput
}

AuthorityKeySpecPtrInput is an input type that accepts AuthorityKeySpecArgs, AuthorityKeySpecPtr and AuthorityKeySpecPtrOutput values. You can construct a concrete instance of `AuthorityKeySpecPtrInput` via:

        AuthorityKeySpecArgs{...}

or:

        nil

type AuthorityKeySpecPtrOutput

type AuthorityKeySpecPtrOutput struct{ *pulumi.OutputState }

func (AuthorityKeySpecPtrOutput) Algorithm

The algorithm to use for creating a managed Cloud KMS key for a for a simplified experience. All managed keys will be have their ProtectionLevel as HSM. Possible values are: `SIGN_HASH_ALGORITHM_UNSPECIFIED`, `RSA_PSS_2048_SHA256`, `RSA_PSS_3072_SHA256`, `RSA_PSS_4096_SHA256`, `RSA_PKCS1_2048_SHA256`, `RSA_PKCS1_3072_SHA256`, `RSA_PKCS1_4096_SHA256`, `EC_P256_SHA256`, `EC_P384_SHA384`.

***

func (AuthorityKeySpecPtrOutput) CloudKmsKeyVersion

func (o AuthorityKeySpecPtrOutput) CloudKmsKeyVersion() pulumi.StringPtrOutput

The resource name for an existing Cloud KMS CryptoKeyVersion in the format `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.

func (AuthorityKeySpecPtrOutput) Elem

func (AuthorityKeySpecPtrOutput) ElementType

func (AuthorityKeySpecPtrOutput) ElementType() reflect.Type

func (AuthorityKeySpecPtrOutput) ToAuthorityKeySpecPtrOutput

func (o AuthorityKeySpecPtrOutput) ToAuthorityKeySpecPtrOutput() AuthorityKeySpecPtrOutput

func (AuthorityKeySpecPtrOutput) ToAuthorityKeySpecPtrOutputWithContext

func (o AuthorityKeySpecPtrOutput) ToAuthorityKeySpecPtrOutputWithContext(ctx context.Context) AuthorityKeySpecPtrOutput

type AuthorityMap

type AuthorityMap map[string]AuthorityInput

func (AuthorityMap) ElementType

func (AuthorityMap) ElementType() reflect.Type

func (AuthorityMap) ToAuthorityMapOutput

func (i AuthorityMap) ToAuthorityMapOutput() AuthorityMapOutput

func (AuthorityMap) ToAuthorityMapOutputWithContext

func (i AuthorityMap) ToAuthorityMapOutputWithContext(ctx context.Context) AuthorityMapOutput

type AuthorityMapInput

type AuthorityMapInput interface {
	pulumi.Input

	ToAuthorityMapOutput() AuthorityMapOutput
	ToAuthorityMapOutputWithContext(context.Context) AuthorityMapOutput
}

AuthorityMapInput is an input type that accepts AuthorityMap and AuthorityMapOutput values. You can construct a concrete instance of `AuthorityMapInput` via:

AuthorityMap{ "key": AuthorityArgs{...} }

type AuthorityMapOutput

type AuthorityMapOutput struct{ *pulumi.OutputState }

func (AuthorityMapOutput) ElementType

func (AuthorityMapOutput) ElementType() reflect.Type

func (AuthorityMapOutput) MapIndex

func (AuthorityMapOutput) ToAuthorityMapOutput

func (o AuthorityMapOutput) ToAuthorityMapOutput() AuthorityMapOutput

func (AuthorityMapOutput) ToAuthorityMapOutputWithContext

func (o AuthorityMapOutput) ToAuthorityMapOutputWithContext(ctx context.Context) AuthorityMapOutput

type AuthorityOutput

type AuthorityOutput struct{ *pulumi.OutputState }

func (AuthorityOutput) AccessUrls

URLs for accessing content published by this CA, such as the CA certificate and CRLs. Structure is documented below.

func (AuthorityOutput) CertificateAuthorityId

func (o AuthorityOutput) CertificateAuthorityId() pulumi.StringOutput

The user provided Resource ID for this Certificate Authority.

func (AuthorityOutput) Config

The config used to create a self-signed X.509 certificate or CSR. Structure is documented below.

func (AuthorityOutput) CreateTime

func (o AuthorityOutput) CreateTime() pulumi.StringOutput

The time at which this CertificateAuthority was created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

func (AuthorityOutput) DeletionProtection

func (o AuthorityOutput) DeletionProtection() pulumi.BoolPtrOutput

Whether or not to allow Terraform to destroy the CertificateAuthority. Unless this field is set to false in Terraform state, a 'terraform destroy' or 'terraform apply' that would delete the instance will fail.

func (AuthorityOutput) DesiredState

func (o AuthorityOutput) DesiredState() pulumi.StringPtrOutput

Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA.

func (AuthorityOutput) EffectiveLabels

func (o AuthorityOutput) EffectiveLabels() pulumi.StringMapOutput

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

func (AuthorityOutput) ElementType

func (AuthorityOutput) ElementType() reflect.Type

func (AuthorityOutput) GcsBucket

func (o AuthorityOutput) GcsBucket() pulumi.StringPtrOutput

The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will be created.

func (AuthorityOutput) IgnoreActiveCertificatesOnDeletion

func (o AuthorityOutput) IgnoreActiveCertificatesOnDeletion() pulumi.BoolPtrOutput

This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs. Use with care. Defaults to 'false'.

func (AuthorityOutput) KeySpec

Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA certificate. Otherwise, it is used to sign a CSR. Structure is documented below.

func (AuthorityOutput) Labels

Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

func (AuthorityOutput) Lifetime

func (o AuthorityOutput) Lifetime() pulumi.StringPtrOutput

The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".

func (AuthorityOutput) Location

func (o AuthorityOutput) Location() pulumi.StringOutput

Location of the CertificateAuthority. A full list of valid locations can be found by running `gcloud privateca locations list`.

func (AuthorityOutput) Name

The resource name for this CertificateAuthority in the format projects/*/locations/*/certificateAuthorities/*.

func (AuthorityOutput) PemCaCertificate

func (o AuthorityOutput) PemCaCertificate() pulumi.StringPtrOutput

The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with a third party issuer.

func (AuthorityOutput) PemCaCertificates

func (o AuthorityOutput) PemCaCertificates() pulumi.StringArrayOutput

This CertificateAuthority's certificate chain, including the current CertificateAuthority's certificate. Ordered such that the root issuer is the final element (consistent with RFC 5246). For a self-signed CA, this will only list the current CertificateAuthority's certificate.

func (AuthorityOutput) Pool

The name of the CaPool this Certificate Authority belongs to.

func (AuthorityOutput) Project

func (o AuthorityOutput) Project() pulumi.StringOutput

func (AuthorityOutput) PulumiLabels

func (o AuthorityOutput) PulumiLabels() pulumi.StringMapOutput

The combination of labels configured directly on the resource and default labels configured on the provider.

func (AuthorityOutput) SkipGracePeriod

func (o AuthorityOutput) SkipGracePeriod() pulumi.BoolPtrOutput

If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to 'false'.

func (AuthorityOutput) State

The State for this CertificateAuthority.

func (AuthorityOutput) SubordinateConfig

If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which describes its issuers.

func (AuthorityOutput) ToAuthorityOutput

func (o AuthorityOutput) ToAuthorityOutput() AuthorityOutput

func (AuthorityOutput) ToAuthorityOutputWithContext

func (o AuthorityOutput) ToAuthorityOutputWithContext(ctx context.Context) AuthorityOutput

func (AuthorityOutput) Type

The Type of this CertificateAuthority. ~> **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]

func (AuthorityOutput) UpdateTime

func (o AuthorityOutput) UpdateTime() pulumi.StringOutput

The time at which this CertificateAuthority was updated. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

type AuthorityState

type AuthorityState struct {
	// URLs for accessing content published by this CA, such as the CA certificate and CRLs.
	// Structure is documented below.
	AccessUrls AuthorityAccessUrlArrayInput
	// The user provided Resource ID for this Certificate Authority.
	CertificateAuthorityId pulumi.StringPtrInput
	// The config used to create a self-signed X.509 certificate or CSR.
	// Structure is documented below.
	Config AuthorityConfigPtrInput
	// The time at which this CertificateAuthority was created.
	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
	// fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	CreateTime pulumi.StringPtrInput
	// Whether or not to allow Terraform to destroy the CertificateAuthority. Unless this field is set to false in Terraform
	// state, a 'terraform destroy' or 'terraform apply' that would delete the instance will fail.
	DeletionProtection pulumi.BoolPtrInput
	// Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA.
	DesiredState pulumi.StringPtrInput
	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.StringMapInput
	// The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
	// CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
	// example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
	// be created.
	GcsBucket pulumi.StringPtrInput
	// This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
	// unexpired certs. Use with care. Defaults to 'false'.
	IgnoreActiveCertificatesOnDeletion pulumi.BoolPtrInput
	// Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority
	// is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA
	// certificate. Otherwise, it is used to sign a CSR.
	// Structure is documented below.
	KeySpec AuthorityKeySpecPtrInput
	// Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
	// "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
	// your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
	Labels pulumi.StringMapInput
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
	// certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
	Lifetime pulumi.StringPtrInput
	// Location of the CertificateAuthority. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	Location pulumi.StringPtrInput
	// The resource name for this CertificateAuthority in the format
	// projects/*/locations/*/certificateAuthorities/*.
	Name pulumi.StringPtrInput
	// The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
	// a third party issuer.
	PemCaCertificate pulumi.StringPtrInput
	// This CertificateAuthority's certificate chain, including the current
	// CertificateAuthority's certificate. Ordered such that the root issuer is the final
	// element (consistent with RFC 5246). For a self-signed CA, this will only list the current
	// CertificateAuthority's certificate.
	PemCaCertificates pulumi.StringArrayInput
	// The name of the CaPool this Certificate Authority belongs to.
	Pool    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
	// The combination of labels configured directly on the resource
	// and default labels configured on the provider.
	PulumiLabels pulumi.StringMapInput
	// If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
	// undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
	// 'false'.
	SkipGracePeriod pulumi.BoolPtrInput
	// The State for this CertificateAuthority.
	State pulumi.StringPtrInput
	// If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
	// describes its issuers.
	SubordinateConfig AuthoritySubordinateConfigPtrInput
	// The Type of this CertificateAuthority. ~> **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
	// before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
	Type pulumi.StringPtrInput
	// The time at which this CertificateAuthority was updated.
	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
	// fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	UpdateTime pulumi.StringPtrInput
}

func (AuthorityState) ElementType

func (AuthorityState) ElementType() reflect.Type

type AuthoritySubordinateConfig

type AuthoritySubordinateConfig struct {
	// This can refer to a CertificateAuthority that was used to create a
	// subordinate CertificateAuthority. This field is used for information
	// and usability purposes only. The resource name is in the format
	// `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
	CertificateAuthority *string `pulumi:"certificateAuthority"`
	// Contains the PEM certificate chain for the issuers of this CertificateAuthority,
	// but not pem certificate for this CA itself.
	// Structure is documented below.
	PemIssuerChain *AuthoritySubordinateConfigPemIssuerChain `pulumi:"pemIssuerChain"`
}

type AuthoritySubordinateConfigArgs

type AuthoritySubordinateConfigArgs struct {
	// This can refer to a CertificateAuthority that was used to create a
	// subordinate CertificateAuthority. This field is used for information
	// and usability purposes only. The resource name is in the format
	// `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
	CertificateAuthority pulumi.StringPtrInput `pulumi:"certificateAuthority"`
	// Contains the PEM certificate chain for the issuers of this CertificateAuthority,
	// but not pem certificate for this CA itself.
	// Structure is documented below.
	PemIssuerChain AuthoritySubordinateConfigPemIssuerChainPtrInput `pulumi:"pemIssuerChain"`
}

func (AuthoritySubordinateConfigArgs) ElementType

func (AuthoritySubordinateConfigArgs) ToAuthoritySubordinateConfigOutput

func (i AuthoritySubordinateConfigArgs) ToAuthoritySubordinateConfigOutput() AuthoritySubordinateConfigOutput

func (AuthoritySubordinateConfigArgs) ToAuthoritySubordinateConfigOutputWithContext

func (i AuthoritySubordinateConfigArgs) ToAuthoritySubordinateConfigOutputWithContext(ctx context.Context) AuthoritySubordinateConfigOutput

func (AuthoritySubordinateConfigArgs) ToAuthoritySubordinateConfigPtrOutput

func (i AuthoritySubordinateConfigArgs) ToAuthoritySubordinateConfigPtrOutput() AuthoritySubordinateConfigPtrOutput

func (AuthoritySubordinateConfigArgs) ToAuthoritySubordinateConfigPtrOutputWithContext

func (i AuthoritySubordinateConfigArgs) ToAuthoritySubordinateConfigPtrOutputWithContext(ctx context.Context) AuthoritySubordinateConfigPtrOutput

type AuthoritySubordinateConfigInput

type AuthoritySubordinateConfigInput interface {
	pulumi.Input

	ToAuthoritySubordinateConfigOutput() AuthoritySubordinateConfigOutput
	ToAuthoritySubordinateConfigOutputWithContext(context.Context) AuthoritySubordinateConfigOutput
}

AuthoritySubordinateConfigInput is an input type that accepts AuthoritySubordinateConfigArgs and AuthoritySubordinateConfigOutput values. You can construct a concrete instance of `AuthoritySubordinateConfigInput` via:

AuthoritySubordinateConfigArgs{...}

type AuthoritySubordinateConfigOutput

type AuthoritySubordinateConfigOutput struct{ *pulumi.OutputState }

func (AuthoritySubordinateConfigOutput) CertificateAuthority

func (o AuthoritySubordinateConfigOutput) CertificateAuthority() pulumi.StringPtrOutput

This can refer to a CertificateAuthority that was used to create a subordinate CertificateAuthority. This field is used for information and usability purposes only. The resource name is in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.

func (AuthoritySubordinateConfigOutput) ElementType

func (AuthoritySubordinateConfigOutput) PemIssuerChain

Contains the PEM certificate chain for the issuers of this CertificateAuthority, but not pem certificate for this CA itself. Structure is documented below.

func (AuthoritySubordinateConfigOutput) ToAuthoritySubordinateConfigOutput

func (o AuthoritySubordinateConfigOutput) ToAuthoritySubordinateConfigOutput() AuthoritySubordinateConfigOutput

func (AuthoritySubordinateConfigOutput) ToAuthoritySubordinateConfigOutputWithContext

func (o AuthoritySubordinateConfigOutput) ToAuthoritySubordinateConfigOutputWithContext(ctx context.Context) AuthoritySubordinateConfigOutput

func (AuthoritySubordinateConfigOutput) ToAuthoritySubordinateConfigPtrOutput

func (o AuthoritySubordinateConfigOutput) ToAuthoritySubordinateConfigPtrOutput() AuthoritySubordinateConfigPtrOutput

func (AuthoritySubordinateConfigOutput) ToAuthoritySubordinateConfigPtrOutputWithContext

func (o AuthoritySubordinateConfigOutput) ToAuthoritySubordinateConfigPtrOutputWithContext(ctx context.Context) AuthoritySubordinateConfigPtrOutput

type AuthoritySubordinateConfigPemIssuerChain

type AuthoritySubordinateConfigPemIssuerChain struct {
	// Expected to be in leaf-to-root order according to RFC 5246.
	PemCertificates []string `pulumi:"pemCertificates"`
}

type AuthoritySubordinateConfigPemIssuerChainArgs

type AuthoritySubordinateConfigPemIssuerChainArgs struct {
	// Expected to be in leaf-to-root order according to RFC 5246.
	PemCertificates pulumi.StringArrayInput `pulumi:"pemCertificates"`
}

func (AuthoritySubordinateConfigPemIssuerChainArgs) ElementType

func (AuthoritySubordinateConfigPemIssuerChainArgs) ToAuthoritySubordinateConfigPemIssuerChainOutput

func (i AuthoritySubordinateConfigPemIssuerChainArgs) ToAuthoritySubordinateConfigPemIssuerChainOutput() AuthoritySubordinateConfigPemIssuerChainOutput

func (AuthoritySubordinateConfigPemIssuerChainArgs) ToAuthoritySubordinateConfigPemIssuerChainOutputWithContext

func (i AuthoritySubordinateConfigPemIssuerChainArgs) ToAuthoritySubordinateConfigPemIssuerChainOutputWithContext(ctx context.Context) AuthoritySubordinateConfigPemIssuerChainOutput

func (AuthoritySubordinateConfigPemIssuerChainArgs) ToAuthoritySubordinateConfigPemIssuerChainPtrOutput

func (i AuthoritySubordinateConfigPemIssuerChainArgs) ToAuthoritySubordinateConfigPemIssuerChainPtrOutput() AuthoritySubordinateConfigPemIssuerChainPtrOutput

func (AuthoritySubordinateConfigPemIssuerChainArgs) ToAuthoritySubordinateConfigPemIssuerChainPtrOutputWithContext

func (i AuthoritySubordinateConfigPemIssuerChainArgs) ToAuthoritySubordinateConfigPemIssuerChainPtrOutputWithContext(ctx context.Context) AuthoritySubordinateConfigPemIssuerChainPtrOutput

type AuthoritySubordinateConfigPemIssuerChainInput

type AuthoritySubordinateConfigPemIssuerChainInput interface {
	pulumi.Input

	ToAuthoritySubordinateConfigPemIssuerChainOutput() AuthoritySubordinateConfigPemIssuerChainOutput
	ToAuthoritySubordinateConfigPemIssuerChainOutputWithContext(context.Context) AuthoritySubordinateConfigPemIssuerChainOutput
}

AuthoritySubordinateConfigPemIssuerChainInput is an input type that accepts AuthoritySubordinateConfigPemIssuerChainArgs and AuthoritySubordinateConfigPemIssuerChainOutput values. You can construct a concrete instance of `AuthoritySubordinateConfigPemIssuerChainInput` via:

AuthoritySubordinateConfigPemIssuerChainArgs{...}

type AuthoritySubordinateConfigPemIssuerChainOutput

type AuthoritySubordinateConfigPemIssuerChainOutput struct{ *pulumi.OutputState }

func (AuthoritySubordinateConfigPemIssuerChainOutput) ElementType

func (AuthoritySubordinateConfigPemIssuerChainOutput) PemCertificates

Expected to be in leaf-to-root order according to RFC 5246.

func (AuthoritySubordinateConfigPemIssuerChainOutput) ToAuthoritySubordinateConfigPemIssuerChainOutput

func (o AuthoritySubordinateConfigPemIssuerChainOutput) ToAuthoritySubordinateConfigPemIssuerChainOutput() AuthoritySubordinateConfigPemIssuerChainOutput

func (AuthoritySubordinateConfigPemIssuerChainOutput) ToAuthoritySubordinateConfigPemIssuerChainOutputWithContext

func (o AuthoritySubordinateConfigPemIssuerChainOutput) ToAuthoritySubordinateConfigPemIssuerChainOutputWithContext(ctx context.Context) AuthoritySubordinateConfigPemIssuerChainOutput

func (AuthoritySubordinateConfigPemIssuerChainOutput) ToAuthoritySubordinateConfigPemIssuerChainPtrOutput

func (o AuthoritySubordinateConfigPemIssuerChainOutput) ToAuthoritySubordinateConfigPemIssuerChainPtrOutput() AuthoritySubordinateConfigPemIssuerChainPtrOutput

func (AuthoritySubordinateConfigPemIssuerChainOutput) ToAuthoritySubordinateConfigPemIssuerChainPtrOutputWithContext

func (o AuthoritySubordinateConfigPemIssuerChainOutput) ToAuthoritySubordinateConfigPemIssuerChainPtrOutputWithContext(ctx context.Context) AuthoritySubordinateConfigPemIssuerChainPtrOutput

type AuthoritySubordinateConfigPemIssuerChainPtrInput

type AuthoritySubordinateConfigPemIssuerChainPtrInput interface {
	pulumi.Input

	ToAuthoritySubordinateConfigPemIssuerChainPtrOutput() AuthoritySubordinateConfigPemIssuerChainPtrOutput
	ToAuthoritySubordinateConfigPemIssuerChainPtrOutputWithContext(context.Context) AuthoritySubordinateConfigPemIssuerChainPtrOutput
}

AuthoritySubordinateConfigPemIssuerChainPtrInput is an input type that accepts AuthoritySubordinateConfigPemIssuerChainArgs, AuthoritySubordinateConfigPemIssuerChainPtr and AuthoritySubordinateConfigPemIssuerChainPtrOutput values. You can construct a concrete instance of `AuthoritySubordinateConfigPemIssuerChainPtrInput` via:

        AuthoritySubordinateConfigPemIssuerChainArgs{...}

or:

        nil

type AuthoritySubordinateConfigPemIssuerChainPtrOutput

type AuthoritySubordinateConfigPemIssuerChainPtrOutput struct{ *pulumi.OutputState }

func (AuthoritySubordinateConfigPemIssuerChainPtrOutput) Elem

func (AuthoritySubordinateConfigPemIssuerChainPtrOutput) ElementType

func (AuthoritySubordinateConfigPemIssuerChainPtrOutput) PemCertificates

Expected to be in leaf-to-root order according to RFC 5246.

func (AuthoritySubordinateConfigPemIssuerChainPtrOutput) ToAuthoritySubordinateConfigPemIssuerChainPtrOutput

func (o AuthoritySubordinateConfigPemIssuerChainPtrOutput) ToAuthoritySubordinateConfigPemIssuerChainPtrOutput() AuthoritySubordinateConfigPemIssuerChainPtrOutput

func (AuthoritySubordinateConfigPemIssuerChainPtrOutput) ToAuthoritySubordinateConfigPemIssuerChainPtrOutputWithContext

func (o AuthoritySubordinateConfigPemIssuerChainPtrOutput) ToAuthoritySubordinateConfigPemIssuerChainPtrOutputWithContext(ctx context.Context) AuthoritySubordinateConfigPemIssuerChainPtrOutput

type AuthoritySubordinateConfigPtrInput

type AuthoritySubordinateConfigPtrInput interface {
	pulumi.Input

	ToAuthoritySubordinateConfigPtrOutput() AuthoritySubordinateConfigPtrOutput
	ToAuthoritySubordinateConfigPtrOutputWithContext(context.Context) AuthoritySubordinateConfigPtrOutput
}

AuthoritySubordinateConfigPtrInput is an input type that accepts AuthoritySubordinateConfigArgs, AuthoritySubordinateConfigPtr and AuthoritySubordinateConfigPtrOutput values. You can construct a concrete instance of `AuthoritySubordinateConfigPtrInput` via:

        AuthoritySubordinateConfigArgs{...}

or:

        nil

type AuthoritySubordinateConfigPtrOutput

type AuthoritySubordinateConfigPtrOutput struct{ *pulumi.OutputState }

func (AuthoritySubordinateConfigPtrOutput) CertificateAuthority

This can refer to a CertificateAuthority that was used to create a subordinate CertificateAuthority. This field is used for information and usability purposes only. The resource name is in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.

func (AuthoritySubordinateConfigPtrOutput) Elem

func (AuthoritySubordinateConfigPtrOutput) ElementType

func (AuthoritySubordinateConfigPtrOutput) PemIssuerChain

Contains the PEM certificate chain for the issuers of this CertificateAuthority, but not pem certificate for this CA itself. Structure is documented below.

func (AuthoritySubordinateConfigPtrOutput) ToAuthoritySubordinateConfigPtrOutput

func (o AuthoritySubordinateConfigPtrOutput) ToAuthoritySubordinateConfigPtrOutput() AuthoritySubordinateConfigPtrOutput

func (AuthoritySubordinateConfigPtrOutput) ToAuthoritySubordinateConfigPtrOutputWithContext

func (o AuthoritySubordinateConfigPtrOutput) ToAuthoritySubordinateConfigPtrOutputWithContext(ctx context.Context) AuthoritySubordinateConfigPtrOutput

type CaPool

type CaPool struct {
	pulumi.CustomResourceState

	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.StringMapOutput `pulumi:"effectiveLabels"`
	// The IssuancePolicy to control how Certificates will be issued from this CaPool.
	// Structure is documented below.
	IssuancePolicy CaPoolIssuancePolicyPtrOutput `pulumi:"issuancePolicy"`
	// Labels with user-defined metadata.
	// An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
	// "1.3kg", "count": "3" }.
	//
	// **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
	// Please refer to the field `effectiveLabels` for all of the labels present on the resource.
	Labels pulumi.StringMapOutput `pulumi:"labels"`
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	//
	// ***
	Location pulumi.StringOutput `pulumi:"location"`
	// The name for this CaPool.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
	// Structure is documented below.
	PublishingOptions CaPoolPublishingOptionsPtrOutput `pulumi:"publishingOptions"`
	// The combination of labels configured directly on the resource
	// and default labels configured on the provider.
	PulumiLabels pulumi.StringMapOutput `pulumi:"pulumiLabels"`
	// The Tier of this CaPool.
	// Possible values are: `ENTERPRISE`, `DEVOPS`.
	Tier pulumi.StringOutput `pulumi:"tier"`
}

A CaPool represents a group of CertificateAuthorities that form a trust anchor. A CaPool can be used to manage issuance policies for one or more CertificateAuthority resources and to rotate CA certificates in and out of the trust anchor.

## Example Usage

### Privateca Capool Basic

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPool(ctx, "default", &certificateauthority.CaPoolArgs{
			Name:     pulumi.String("my-pool"),
			Location: pulumi.String("us-central1"),
			Tier:     pulumi.String("ENTERPRISE"),
			PublishingOptions: &certificateauthority.CaPoolPublishingOptionsArgs{
				PublishCaCert: pulumi.Bool(true),
				PublishCrl:    pulumi.Bool(true),
			},
			Labels: pulumi.StringMap{
				"foo": pulumi.String("bar"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Privateca Capool All Fields

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPool(ctx, "default", &certificateauthority.CaPoolArgs{
			Name:     pulumi.String("my-pool"),
			Location: pulumi.String("us-central1"),
			Tier:     pulumi.String("ENTERPRISE"),
			PublishingOptions: &certificateauthority.CaPoolPublishingOptionsArgs{
				PublishCaCert:  pulumi.Bool(false),
				PublishCrl:     pulumi.Bool(true),
				EncodingFormat: pulumi.String("PEM"),
			},
			Labels: pulumi.StringMap{
				"foo": pulumi.String("bar"),
			},
			IssuancePolicy: &certificateauthority.CaPoolIssuancePolicyArgs{
				AllowedKeyTypes: certificateauthority.CaPoolIssuancePolicyAllowedKeyTypeArray{
					&certificateauthority.CaPoolIssuancePolicyAllowedKeyTypeArgs{
						EllipticCurve: &certificateauthority.CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs{
							SignatureAlgorithm: pulumi.String("ECDSA_P256"),
						},
					},
					&certificateauthority.CaPoolIssuancePolicyAllowedKeyTypeArgs{
						Rsa: &certificateauthority.CaPoolIssuancePolicyAllowedKeyTypeRsaArgs{
							MinModulusSize: pulumi.String("5"),
							MaxModulusSize: pulumi.String("10"),
						},
					},
				},
				MaximumLifetime: pulumi.String("50000s"),
				AllowedIssuanceModes: &certificateauthority.CaPoolIssuancePolicyAllowedIssuanceModesArgs{
					AllowCsrBasedIssuance:    pulumi.Bool(true),
					AllowConfigBasedIssuance: pulumi.Bool(true),
				},
				IdentityConstraints: &certificateauthority.CaPoolIssuancePolicyIdentityConstraintsArgs{
					AllowSubjectPassthrough:         pulumi.Bool(true),
					AllowSubjectAltNamesPassthrough: pulumi.Bool(true),
					CelExpression: &certificateauthority.CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs{
						Expression: pulumi.String("subject_alt_names.all(san, san.type == DNS || san.type == EMAIL )"),
						Title:      pulumi.String("My title"),
					},
				},
				BaselineValues: &certificateauthority.CaPoolIssuancePolicyBaselineValuesArgs{
					AiaOcspServers: pulumi.StringArray{
						pulumi.String("example.com"),
					},
					AdditionalExtensions: certificateauthority.CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArray{
						&certificateauthority.CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs{
							Critical: pulumi.Bool(true),
							Value:    pulumi.String("asdf"),
							ObjectId: &certificateauthority.CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs{
								ObjectIdPaths: pulumi.IntArray{
									pulumi.Int(1),
									pulumi.Int(7),
								},
							},
						},
					},
					PolicyIds: certificateauthority.CaPoolIssuancePolicyBaselineValuesPolicyIdArray{
						&certificateauthority.CaPoolIssuancePolicyBaselineValuesPolicyIdArgs{
							ObjectIdPaths: pulumi.IntArray{
								pulumi.Int(1),
								pulumi.Int(5),
							},
						},
						&certificateauthority.CaPoolIssuancePolicyBaselineValuesPolicyIdArgs{
							ObjectIdPaths: pulumi.IntArray{
								pulumi.Int(1),
								pulumi.Int(5),
								pulumi.Int(7),
							},
						},
					},
					CaOptions: &certificateauthority.CaPoolIssuancePolicyBaselineValuesCaOptionsArgs{
						IsCa:                pulumi.Bool(true),
						MaxIssuerPathLength: pulumi.Int(10),
					},
					KeyUsage: &certificateauthority.CaPoolIssuancePolicyBaselineValuesKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs{
							DigitalSignature:  pulumi.Bool(true),
							ContentCommitment: pulumi.Bool(true),
							KeyEncipherment:   pulumi.Bool(false),
							DataEncipherment:  pulumi.Bool(true),
							KeyAgreement:      pulumi.Bool(true),
							CertSign:          pulumi.Bool(false),
							CrlSign:           pulumi.Bool(true),
							DecipherOnly:      pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs{
							ServerAuth:      pulumi.Bool(true),
							ClientAuth:      pulumi.Bool(false),
							EmailProtection: pulumi.Bool(true),
							CodeSigning:     pulumi.Bool(true),
							TimeStamping:    pulumi.Bool(true),
						},
					},
					NameConstraints: &certificateauthority.CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs{
						Critical: pulumi.Bool(true),
						PermittedDnsNames: pulumi.StringArray{
							pulumi.String("*.example1.com"),
							pulumi.String("*.example2.com"),
						},
						ExcludedDnsNames: pulumi.StringArray{
							pulumi.String("*.deny.example1.com"),
							pulumi.String("*.deny.example2.com"),
						},
						PermittedIpRanges: pulumi.StringArray{
							pulumi.String("10.0.0.0/8"),
							pulumi.String("11.0.0.0/8"),
						},
						ExcludedIpRanges: pulumi.StringArray{
							pulumi.String("10.1.1.0/24"),
							pulumi.String("11.1.1.0/24"),
						},
						PermittedEmailAddresses: pulumi.StringArray{
							pulumi.String(".example1.com"),
							pulumi.String(".example2.com"),
						},
						ExcludedEmailAddresses: pulumi.StringArray{
							pulumi.String(".deny.example1.com"),
							pulumi.String(".deny.example2.com"),
						},
						PermittedUris: pulumi.StringArray{
							pulumi.String(".example1.com"),
							pulumi.String(".example2.com"),
						},
						ExcludedUris: pulumi.StringArray{
							pulumi.String(".deny.example1.com"),
							pulumi.String(".deny.example2.com"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

CaPool can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/caPools/{{name}}`

* `{{project}}/{{location}}/{{name}}`

* `{{location}}/{{name}}`

When using the `pulumi import` command, CaPool can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:certificateauthority/caPool:CaPool default projects/{{project}}/locations/{{location}}/caPools/{{name}} ```

```sh $ pulumi import gcp:certificateauthority/caPool:CaPool default {{project}}/{{location}}/{{name}} ```

```sh $ pulumi import gcp:certificateauthority/caPool:CaPool default {{location}}/{{name}} ```

func GetCaPool

func GetCaPool(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CaPoolState, opts ...pulumi.ResourceOption) (*CaPool, error)

GetCaPool gets an existing CaPool resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCaPool

func NewCaPool(ctx *pulumi.Context,
	name string, args *CaPoolArgs, opts ...pulumi.ResourceOption) (*CaPool, error)

NewCaPool registers a new resource with the given unique name, arguments, and options.

func (*CaPool) ElementType

func (*CaPool) ElementType() reflect.Type

func (*CaPool) ToCaPoolOutput

func (i *CaPool) ToCaPoolOutput() CaPoolOutput

func (*CaPool) ToCaPoolOutputWithContext

func (i *CaPool) ToCaPoolOutputWithContext(ctx context.Context) CaPoolOutput

type CaPoolArgs

type CaPoolArgs struct {
	// The IssuancePolicy to control how Certificates will be issued from this CaPool.
	// Structure is documented below.
	IssuancePolicy CaPoolIssuancePolicyPtrInput
	// Labels with user-defined metadata.
	// An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
	// "1.3kg", "count": "3" }.
	//
	// **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
	// Please refer to the field `effectiveLabels` for all of the labels present on the resource.
	Labels pulumi.StringMapInput
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	//
	// ***
	Location pulumi.StringInput
	// The name for this CaPool.
	Name pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
	// Structure is documented below.
	PublishingOptions CaPoolPublishingOptionsPtrInput
	// The Tier of this CaPool.
	// Possible values are: `ENTERPRISE`, `DEVOPS`.
	Tier pulumi.StringInput
}

The set of arguments for constructing a CaPool resource.

func (CaPoolArgs) ElementType

func (CaPoolArgs) ElementType() reflect.Type

type CaPoolArray

type CaPoolArray []CaPoolInput

func (CaPoolArray) ElementType

func (CaPoolArray) ElementType() reflect.Type

func (CaPoolArray) ToCaPoolArrayOutput

func (i CaPoolArray) ToCaPoolArrayOutput() CaPoolArrayOutput

func (CaPoolArray) ToCaPoolArrayOutputWithContext

func (i CaPoolArray) ToCaPoolArrayOutputWithContext(ctx context.Context) CaPoolArrayOutput

type CaPoolArrayInput

type CaPoolArrayInput interface {
	pulumi.Input

	ToCaPoolArrayOutput() CaPoolArrayOutput
	ToCaPoolArrayOutputWithContext(context.Context) CaPoolArrayOutput
}

CaPoolArrayInput is an input type that accepts CaPoolArray and CaPoolArrayOutput values. You can construct a concrete instance of `CaPoolArrayInput` via:

CaPoolArray{ CaPoolArgs{...} }

type CaPoolArrayOutput

type CaPoolArrayOutput struct{ *pulumi.OutputState }

func (CaPoolArrayOutput) ElementType

func (CaPoolArrayOutput) ElementType() reflect.Type

func (CaPoolArrayOutput) Index

func (CaPoolArrayOutput) ToCaPoolArrayOutput

func (o CaPoolArrayOutput) ToCaPoolArrayOutput() CaPoolArrayOutput

func (CaPoolArrayOutput) ToCaPoolArrayOutputWithContext

func (o CaPoolArrayOutput) ToCaPoolArrayOutputWithContext(ctx context.Context) CaPoolArrayOutput

type CaPoolIamBinding

type CaPoolIamBinding struct {
	pulumi.CustomResourceState

	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringOutput `pulumi:"caPool"`
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CaPoolIamBindingConditionPtrOutput `pulumi:"condition"`
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringOutput `pulumi:"location"`
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied. Only one
	// `certificateauthority.CaPoolIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Three different resources help you manage your IAM policy for Certificate Authority Service CaPool. Each of these resources serves a different use case:

* `certificateauthority.CaPoolIamPolicy`: Authoritative. Sets the IAM policy for the capool and replaces any existing policy already attached. * `certificateauthority.CaPoolIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the capool are preserved. * `certificateauthority.CaPoolIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the capool are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `certificateauthority.CaPoolIamPolicy`: Retrieves the IAM policy for the capool

> **Note:** `certificateauthority.CaPoolIamPolicy` **cannot** be used in conjunction with `certificateauthority.CaPoolIamBinding` and `certificateauthority.CaPoolIamMember` or they will fight over what your policy should be.

> **Note:** `certificateauthority.CaPoolIamBinding` resources **can be** used in conjunction with `certificateauthority.CaPoolIamMember` resources **only if** they do not grant privilege to the same role.

> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.

## google\_privateca\_ca\_pool\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CaPoolIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CaPoolIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## google\_privateca\_ca\_pool\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CaPoolIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CaPoolIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

For all import syntaxes, the "resource in question" can take any of the following forms:

* projects/{{project}}/locations/{{location}}/caPools/{{name}}

* {{project}}/{{location}}/{{name}}

* {{location}}/{{name}}

Any variables not passed in the import command will be taken from the provider configuration.

Certificate Authority Service capool IAM resources can be imported using the resource identifiers, role, and member.

IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.

```sh $ pulumi import gcp:certificateauthority/caPoolIamBinding:CaPoolIamBinding editor "projects/{{project}}/locations/{{location}}/caPools/{{ca_pool}} roles/privateca.certificateManager user:jane@example.com" ```

IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.

```sh $ pulumi import gcp:certificateauthority/caPoolIamBinding:CaPoolIamBinding editor "projects/{{project}}/locations/{{location}}/caPools/{{ca_pool}} roles/privateca.certificateManager" ```

IAM policy imports use the identifier of the resource in question, e.g.

```sh $ pulumi import gcp:certificateauthority/caPoolIamBinding:CaPoolIamBinding editor projects/{{project}}/locations/{{location}}/caPools/{{ca_pool}} ```

-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.

func GetCaPoolIamBinding

func GetCaPoolIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CaPoolIamBindingState, opts ...pulumi.ResourceOption) (*CaPoolIamBinding, error)

GetCaPoolIamBinding gets an existing CaPoolIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCaPoolIamBinding

func NewCaPoolIamBinding(ctx *pulumi.Context,
	name string, args *CaPoolIamBindingArgs, opts ...pulumi.ResourceOption) (*CaPoolIamBinding, error)

NewCaPoolIamBinding registers a new resource with the given unique name, arguments, and options.

func (*CaPoolIamBinding) ElementType

func (*CaPoolIamBinding) ElementType() reflect.Type

func (*CaPoolIamBinding) ToCaPoolIamBindingOutput

func (i *CaPoolIamBinding) ToCaPoolIamBindingOutput() CaPoolIamBindingOutput

func (*CaPoolIamBinding) ToCaPoolIamBindingOutputWithContext

func (i *CaPoolIamBinding) ToCaPoolIamBindingOutputWithContext(ctx context.Context) CaPoolIamBindingOutput

type CaPoolIamBindingArgs

type CaPoolIamBindingArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringInput
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CaPoolIamBindingConditionPtrInput
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Members pulumi.StringArrayInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `certificateauthority.CaPoolIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringInput
}

The set of arguments for constructing a CaPoolIamBinding resource.

func (CaPoolIamBindingArgs) ElementType

func (CaPoolIamBindingArgs) ElementType() reflect.Type

type CaPoolIamBindingArray

type CaPoolIamBindingArray []CaPoolIamBindingInput

func (CaPoolIamBindingArray) ElementType

func (CaPoolIamBindingArray) ElementType() reflect.Type

func (CaPoolIamBindingArray) ToCaPoolIamBindingArrayOutput

func (i CaPoolIamBindingArray) ToCaPoolIamBindingArrayOutput() CaPoolIamBindingArrayOutput

func (CaPoolIamBindingArray) ToCaPoolIamBindingArrayOutputWithContext

func (i CaPoolIamBindingArray) ToCaPoolIamBindingArrayOutputWithContext(ctx context.Context) CaPoolIamBindingArrayOutput

type CaPoolIamBindingArrayInput

type CaPoolIamBindingArrayInput interface {
	pulumi.Input

	ToCaPoolIamBindingArrayOutput() CaPoolIamBindingArrayOutput
	ToCaPoolIamBindingArrayOutputWithContext(context.Context) CaPoolIamBindingArrayOutput
}

CaPoolIamBindingArrayInput is an input type that accepts CaPoolIamBindingArray and CaPoolIamBindingArrayOutput values. You can construct a concrete instance of `CaPoolIamBindingArrayInput` via:

CaPoolIamBindingArray{ CaPoolIamBindingArgs{...} }

type CaPoolIamBindingArrayOutput

type CaPoolIamBindingArrayOutput struct{ *pulumi.OutputState }

func (CaPoolIamBindingArrayOutput) ElementType

func (CaPoolIamBindingArrayOutput) Index

func (CaPoolIamBindingArrayOutput) ToCaPoolIamBindingArrayOutput

func (o CaPoolIamBindingArrayOutput) ToCaPoolIamBindingArrayOutput() CaPoolIamBindingArrayOutput

func (CaPoolIamBindingArrayOutput) ToCaPoolIamBindingArrayOutputWithContext

func (o CaPoolIamBindingArrayOutput) ToCaPoolIamBindingArrayOutputWithContext(ctx context.Context) CaPoolIamBindingArrayOutput

type CaPoolIamBindingCondition

type CaPoolIamBindingCondition struct {
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title string `pulumi:"title"`
}

type CaPoolIamBindingConditionArgs

type CaPoolIamBindingConditionArgs struct {
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringInput `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title pulumi.StringInput `pulumi:"title"`
}

func (CaPoolIamBindingConditionArgs) ElementType

func (CaPoolIamBindingConditionArgs) ToCaPoolIamBindingConditionOutput

func (i CaPoolIamBindingConditionArgs) ToCaPoolIamBindingConditionOutput() CaPoolIamBindingConditionOutput

func (CaPoolIamBindingConditionArgs) ToCaPoolIamBindingConditionOutputWithContext

func (i CaPoolIamBindingConditionArgs) ToCaPoolIamBindingConditionOutputWithContext(ctx context.Context) CaPoolIamBindingConditionOutput

func (CaPoolIamBindingConditionArgs) ToCaPoolIamBindingConditionPtrOutput

func (i CaPoolIamBindingConditionArgs) ToCaPoolIamBindingConditionPtrOutput() CaPoolIamBindingConditionPtrOutput

func (CaPoolIamBindingConditionArgs) ToCaPoolIamBindingConditionPtrOutputWithContext

func (i CaPoolIamBindingConditionArgs) ToCaPoolIamBindingConditionPtrOutputWithContext(ctx context.Context) CaPoolIamBindingConditionPtrOutput

type CaPoolIamBindingConditionInput

type CaPoolIamBindingConditionInput interface {
	pulumi.Input

	ToCaPoolIamBindingConditionOutput() CaPoolIamBindingConditionOutput
	ToCaPoolIamBindingConditionOutputWithContext(context.Context) CaPoolIamBindingConditionOutput
}

CaPoolIamBindingConditionInput is an input type that accepts CaPoolIamBindingConditionArgs and CaPoolIamBindingConditionOutput values. You can construct a concrete instance of `CaPoolIamBindingConditionInput` via:

CaPoolIamBindingConditionArgs{...}

type CaPoolIamBindingConditionOutput

type CaPoolIamBindingConditionOutput struct{ *pulumi.OutputState }

func (CaPoolIamBindingConditionOutput) Description

func (CaPoolIamBindingConditionOutput) ElementType

func (CaPoolIamBindingConditionOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CaPoolIamBindingConditionOutput) Title

A title for the expression, i.e. a short string describing its purpose.

func (CaPoolIamBindingConditionOutput) ToCaPoolIamBindingConditionOutput

func (o CaPoolIamBindingConditionOutput) ToCaPoolIamBindingConditionOutput() CaPoolIamBindingConditionOutput

func (CaPoolIamBindingConditionOutput) ToCaPoolIamBindingConditionOutputWithContext

func (o CaPoolIamBindingConditionOutput) ToCaPoolIamBindingConditionOutputWithContext(ctx context.Context) CaPoolIamBindingConditionOutput

func (CaPoolIamBindingConditionOutput) ToCaPoolIamBindingConditionPtrOutput

func (o CaPoolIamBindingConditionOutput) ToCaPoolIamBindingConditionPtrOutput() CaPoolIamBindingConditionPtrOutput

func (CaPoolIamBindingConditionOutput) ToCaPoolIamBindingConditionPtrOutputWithContext

func (o CaPoolIamBindingConditionOutput) ToCaPoolIamBindingConditionPtrOutputWithContext(ctx context.Context) CaPoolIamBindingConditionPtrOutput

type CaPoolIamBindingConditionPtrInput

type CaPoolIamBindingConditionPtrInput interface {
	pulumi.Input

	ToCaPoolIamBindingConditionPtrOutput() CaPoolIamBindingConditionPtrOutput
	ToCaPoolIamBindingConditionPtrOutputWithContext(context.Context) CaPoolIamBindingConditionPtrOutput
}

CaPoolIamBindingConditionPtrInput is an input type that accepts CaPoolIamBindingConditionArgs, CaPoolIamBindingConditionPtr and CaPoolIamBindingConditionPtrOutput values. You can construct a concrete instance of `CaPoolIamBindingConditionPtrInput` via:

        CaPoolIamBindingConditionArgs{...}

or:

        nil

type CaPoolIamBindingConditionPtrOutput

type CaPoolIamBindingConditionPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIamBindingConditionPtrOutput) Description

func (CaPoolIamBindingConditionPtrOutput) Elem

func (CaPoolIamBindingConditionPtrOutput) ElementType

func (CaPoolIamBindingConditionPtrOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CaPoolIamBindingConditionPtrOutput) Title

A title for the expression, i.e. a short string describing its purpose.

func (CaPoolIamBindingConditionPtrOutput) ToCaPoolIamBindingConditionPtrOutput

func (o CaPoolIamBindingConditionPtrOutput) ToCaPoolIamBindingConditionPtrOutput() CaPoolIamBindingConditionPtrOutput

func (CaPoolIamBindingConditionPtrOutput) ToCaPoolIamBindingConditionPtrOutputWithContext

func (o CaPoolIamBindingConditionPtrOutput) ToCaPoolIamBindingConditionPtrOutputWithContext(ctx context.Context) CaPoolIamBindingConditionPtrOutput

type CaPoolIamBindingInput

type CaPoolIamBindingInput interface {
	pulumi.Input

	ToCaPoolIamBindingOutput() CaPoolIamBindingOutput
	ToCaPoolIamBindingOutputWithContext(ctx context.Context) CaPoolIamBindingOutput
}

type CaPoolIamBindingMap

type CaPoolIamBindingMap map[string]CaPoolIamBindingInput

func (CaPoolIamBindingMap) ElementType

func (CaPoolIamBindingMap) ElementType() reflect.Type

func (CaPoolIamBindingMap) ToCaPoolIamBindingMapOutput

func (i CaPoolIamBindingMap) ToCaPoolIamBindingMapOutput() CaPoolIamBindingMapOutput

func (CaPoolIamBindingMap) ToCaPoolIamBindingMapOutputWithContext

func (i CaPoolIamBindingMap) ToCaPoolIamBindingMapOutputWithContext(ctx context.Context) CaPoolIamBindingMapOutput

type CaPoolIamBindingMapInput

type CaPoolIamBindingMapInput interface {
	pulumi.Input

	ToCaPoolIamBindingMapOutput() CaPoolIamBindingMapOutput
	ToCaPoolIamBindingMapOutputWithContext(context.Context) CaPoolIamBindingMapOutput
}

CaPoolIamBindingMapInput is an input type that accepts CaPoolIamBindingMap and CaPoolIamBindingMapOutput values. You can construct a concrete instance of `CaPoolIamBindingMapInput` via:

CaPoolIamBindingMap{ "key": CaPoolIamBindingArgs{...} }

type CaPoolIamBindingMapOutput

type CaPoolIamBindingMapOutput struct{ *pulumi.OutputState }

func (CaPoolIamBindingMapOutput) ElementType

func (CaPoolIamBindingMapOutput) ElementType() reflect.Type

func (CaPoolIamBindingMapOutput) MapIndex

func (CaPoolIamBindingMapOutput) ToCaPoolIamBindingMapOutput

func (o CaPoolIamBindingMapOutput) ToCaPoolIamBindingMapOutput() CaPoolIamBindingMapOutput

func (CaPoolIamBindingMapOutput) ToCaPoolIamBindingMapOutputWithContext

func (o CaPoolIamBindingMapOutput) ToCaPoolIamBindingMapOutputWithContext(ctx context.Context) CaPoolIamBindingMapOutput

type CaPoolIamBindingOutput

type CaPoolIamBindingOutput struct{ *pulumi.OutputState }

func (CaPoolIamBindingOutput) CaPool

Used to find the parent resource to bind the IAM policy to

func (CaPoolIamBindingOutput) Condition

An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.

func (CaPoolIamBindingOutput) ElementType

func (CaPoolIamBindingOutput) ElementType() reflect.Type

func (CaPoolIamBindingOutput) Etag

(Computed) The etag of the IAM policy.

func (CaPoolIamBindingOutput) Location

Location of the CaPool. A full list of valid locations can be found by running `gcloud privateca locations list`. Used to find the parent resource to bind the IAM policy to

func (CaPoolIamBindingOutput) Members

Identities that will be granted the privilege in `role`. Each entry can have one of the following values: * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com. * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project" * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project" * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"

func (CaPoolIamBindingOutput) Project

The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.

func (CaPoolIamBindingOutput) Role

The role that should be applied. Only one `certificateauthority.CaPoolIamBinding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.

func (CaPoolIamBindingOutput) ToCaPoolIamBindingOutput

func (o CaPoolIamBindingOutput) ToCaPoolIamBindingOutput() CaPoolIamBindingOutput

func (CaPoolIamBindingOutput) ToCaPoolIamBindingOutputWithContext

func (o CaPoolIamBindingOutput) ToCaPoolIamBindingOutputWithContext(ctx context.Context) CaPoolIamBindingOutput

type CaPoolIamBindingState

type CaPoolIamBindingState struct {
	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringPtrInput
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CaPoolIamBindingConditionPtrInput
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringPtrInput
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Members pulumi.StringArrayInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `certificateauthority.CaPoolIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringPtrInput
}

func (CaPoolIamBindingState) ElementType

func (CaPoolIamBindingState) ElementType() reflect.Type

type CaPoolIamMember

type CaPoolIamMember struct {
	pulumi.CustomResourceState

	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringOutput `pulumi:"caPool"`
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CaPoolIamMemberConditionPtrOutput `pulumi:"condition"`
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringOutput `pulumi:"location"`
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Member pulumi.StringOutput `pulumi:"member"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied. Only one
	// `certificateauthority.CaPoolIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Three different resources help you manage your IAM policy for Certificate Authority Service CaPool. Each of these resources serves a different use case:

* `certificateauthority.CaPoolIamPolicy`: Authoritative. Sets the IAM policy for the capool and replaces any existing policy already attached. * `certificateauthority.CaPoolIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the capool are preserved. * `certificateauthority.CaPoolIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the capool are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `certificateauthority.CaPoolIamPolicy`: Retrieves the IAM policy for the capool

> **Note:** `certificateauthority.CaPoolIamPolicy` **cannot** be used in conjunction with `certificateauthority.CaPoolIamBinding` and `certificateauthority.CaPoolIamMember` or they will fight over what your policy should be.

> **Note:** `certificateauthority.CaPoolIamBinding` resources **can be** used in conjunction with `certificateauthority.CaPoolIamMember` resources **only if** they do not grant privilege to the same role.

> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.

## google\_privateca\_ca\_pool\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CaPoolIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CaPoolIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## google\_privateca\_ca\_pool\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CaPoolIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CaPoolIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

For all import syntaxes, the "resource in question" can take any of the following forms:

* projects/{{project}}/locations/{{location}}/caPools/{{name}}

* {{project}}/{{location}}/{{name}}

* {{location}}/{{name}}

Any variables not passed in the import command will be taken from the provider configuration.

Certificate Authority Service capool IAM resources can be imported using the resource identifiers, role, and member.

IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.

```sh $ pulumi import gcp:certificateauthority/caPoolIamMember:CaPoolIamMember editor "projects/{{project}}/locations/{{location}}/caPools/{{ca_pool}} roles/privateca.certificateManager user:jane@example.com" ```

IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.

```sh $ pulumi import gcp:certificateauthority/caPoolIamMember:CaPoolIamMember editor "projects/{{project}}/locations/{{location}}/caPools/{{ca_pool}} roles/privateca.certificateManager" ```

IAM policy imports use the identifier of the resource in question, e.g.

```sh $ pulumi import gcp:certificateauthority/caPoolIamMember:CaPoolIamMember editor projects/{{project}}/locations/{{location}}/caPools/{{ca_pool}} ```

-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.

func GetCaPoolIamMember

func GetCaPoolIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CaPoolIamMemberState, opts ...pulumi.ResourceOption) (*CaPoolIamMember, error)

GetCaPoolIamMember gets an existing CaPoolIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCaPoolIamMember

func NewCaPoolIamMember(ctx *pulumi.Context,
	name string, args *CaPoolIamMemberArgs, opts ...pulumi.ResourceOption) (*CaPoolIamMember, error)

NewCaPoolIamMember registers a new resource with the given unique name, arguments, and options.

func (*CaPoolIamMember) ElementType

func (*CaPoolIamMember) ElementType() reflect.Type

func (*CaPoolIamMember) ToCaPoolIamMemberOutput

func (i *CaPoolIamMember) ToCaPoolIamMemberOutput() CaPoolIamMemberOutput

func (*CaPoolIamMember) ToCaPoolIamMemberOutputWithContext

func (i *CaPoolIamMember) ToCaPoolIamMemberOutputWithContext(ctx context.Context) CaPoolIamMemberOutput

type CaPoolIamMemberArgs

type CaPoolIamMemberArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringInput
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CaPoolIamMemberConditionPtrInput
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Member pulumi.StringInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `certificateauthority.CaPoolIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringInput
}

The set of arguments for constructing a CaPoolIamMember resource.

func (CaPoolIamMemberArgs) ElementType

func (CaPoolIamMemberArgs) ElementType() reflect.Type

type CaPoolIamMemberArray

type CaPoolIamMemberArray []CaPoolIamMemberInput

func (CaPoolIamMemberArray) ElementType

func (CaPoolIamMemberArray) ElementType() reflect.Type

func (CaPoolIamMemberArray) ToCaPoolIamMemberArrayOutput

func (i CaPoolIamMemberArray) ToCaPoolIamMemberArrayOutput() CaPoolIamMemberArrayOutput

func (CaPoolIamMemberArray) ToCaPoolIamMemberArrayOutputWithContext

func (i CaPoolIamMemberArray) ToCaPoolIamMemberArrayOutputWithContext(ctx context.Context) CaPoolIamMemberArrayOutput

type CaPoolIamMemberArrayInput

type CaPoolIamMemberArrayInput interface {
	pulumi.Input

	ToCaPoolIamMemberArrayOutput() CaPoolIamMemberArrayOutput
	ToCaPoolIamMemberArrayOutputWithContext(context.Context) CaPoolIamMemberArrayOutput
}

CaPoolIamMemberArrayInput is an input type that accepts CaPoolIamMemberArray and CaPoolIamMemberArrayOutput values. You can construct a concrete instance of `CaPoolIamMemberArrayInput` via:

CaPoolIamMemberArray{ CaPoolIamMemberArgs{...} }

type CaPoolIamMemberArrayOutput

type CaPoolIamMemberArrayOutput struct{ *pulumi.OutputState }

func (CaPoolIamMemberArrayOutput) ElementType

func (CaPoolIamMemberArrayOutput) ElementType() reflect.Type

func (CaPoolIamMemberArrayOutput) Index

func (CaPoolIamMemberArrayOutput) ToCaPoolIamMemberArrayOutput

func (o CaPoolIamMemberArrayOutput) ToCaPoolIamMemberArrayOutput() CaPoolIamMemberArrayOutput

func (CaPoolIamMemberArrayOutput) ToCaPoolIamMemberArrayOutputWithContext

func (o CaPoolIamMemberArrayOutput) ToCaPoolIamMemberArrayOutputWithContext(ctx context.Context) CaPoolIamMemberArrayOutput

type CaPoolIamMemberCondition

type CaPoolIamMemberCondition struct {
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title string `pulumi:"title"`
}

type CaPoolIamMemberConditionArgs

type CaPoolIamMemberConditionArgs struct {
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringInput `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title pulumi.StringInput `pulumi:"title"`
}

func (CaPoolIamMemberConditionArgs) ElementType

func (CaPoolIamMemberConditionArgs) ToCaPoolIamMemberConditionOutput

func (i CaPoolIamMemberConditionArgs) ToCaPoolIamMemberConditionOutput() CaPoolIamMemberConditionOutput

func (CaPoolIamMemberConditionArgs) ToCaPoolIamMemberConditionOutputWithContext

func (i CaPoolIamMemberConditionArgs) ToCaPoolIamMemberConditionOutputWithContext(ctx context.Context) CaPoolIamMemberConditionOutput

func (CaPoolIamMemberConditionArgs) ToCaPoolIamMemberConditionPtrOutput

func (i CaPoolIamMemberConditionArgs) ToCaPoolIamMemberConditionPtrOutput() CaPoolIamMemberConditionPtrOutput

func (CaPoolIamMemberConditionArgs) ToCaPoolIamMemberConditionPtrOutputWithContext

func (i CaPoolIamMemberConditionArgs) ToCaPoolIamMemberConditionPtrOutputWithContext(ctx context.Context) CaPoolIamMemberConditionPtrOutput

type CaPoolIamMemberConditionInput

type CaPoolIamMemberConditionInput interface {
	pulumi.Input

	ToCaPoolIamMemberConditionOutput() CaPoolIamMemberConditionOutput
	ToCaPoolIamMemberConditionOutputWithContext(context.Context) CaPoolIamMemberConditionOutput
}

CaPoolIamMemberConditionInput is an input type that accepts CaPoolIamMemberConditionArgs and CaPoolIamMemberConditionOutput values. You can construct a concrete instance of `CaPoolIamMemberConditionInput` via:

CaPoolIamMemberConditionArgs{...}

type CaPoolIamMemberConditionOutput

type CaPoolIamMemberConditionOutput struct{ *pulumi.OutputState }

func (CaPoolIamMemberConditionOutput) Description

func (CaPoolIamMemberConditionOutput) ElementType

func (CaPoolIamMemberConditionOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CaPoolIamMemberConditionOutput) Title

A title for the expression, i.e. a short string describing its purpose.

func (CaPoolIamMemberConditionOutput) ToCaPoolIamMemberConditionOutput

func (o CaPoolIamMemberConditionOutput) ToCaPoolIamMemberConditionOutput() CaPoolIamMemberConditionOutput

func (CaPoolIamMemberConditionOutput) ToCaPoolIamMemberConditionOutputWithContext

func (o CaPoolIamMemberConditionOutput) ToCaPoolIamMemberConditionOutputWithContext(ctx context.Context) CaPoolIamMemberConditionOutput

func (CaPoolIamMemberConditionOutput) ToCaPoolIamMemberConditionPtrOutput

func (o CaPoolIamMemberConditionOutput) ToCaPoolIamMemberConditionPtrOutput() CaPoolIamMemberConditionPtrOutput

func (CaPoolIamMemberConditionOutput) ToCaPoolIamMemberConditionPtrOutputWithContext

func (o CaPoolIamMemberConditionOutput) ToCaPoolIamMemberConditionPtrOutputWithContext(ctx context.Context) CaPoolIamMemberConditionPtrOutput

type CaPoolIamMemberConditionPtrInput

type CaPoolIamMemberConditionPtrInput interface {
	pulumi.Input

	ToCaPoolIamMemberConditionPtrOutput() CaPoolIamMemberConditionPtrOutput
	ToCaPoolIamMemberConditionPtrOutputWithContext(context.Context) CaPoolIamMemberConditionPtrOutput
}

CaPoolIamMemberConditionPtrInput is an input type that accepts CaPoolIamMemberConditionArgs, CaPoolIamMemberConditionPtr and CaPoolIamMemberConditionPtrOutput values. You can construct a concrete instance of `CaPoolIamMemberConditionPtrInput` via:

        CaPoolIamMemberConditionArgs{...}

or:

        nil

type CaPoolIamMemberConditionPtrOutput

type CaPoolIamMemberConditionPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIamMemberConditionPtrOutput) Description

func (CaPoolIamMemberConditionPtrOutput) Elem

func (CaPoolIamMemberConditionPtrOutput) ElementType

func (CaPoolIamMemberConditionPtrOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CaPoolIamMemberConditionPtrOutput) Title

A title for the expression, i.e. a short string describing its purpose.

func (CaPoolIamMemberConditionPtrOutput) ToCaPoolIamMemberConditionPtrOutput

func (o CaPoolIamMemberConditionPtrOutput) ToCaPoolIamMemberConditionPtrOutput() CaPoolIamMemberConditionPtrOutput

func (CaPoolIamMemberConditionPtrOutput) ToCaPoolIamMemberConditionPtrOutputWithContext

func (o CaPoolIamMemberConditionPtrOutput) ToCaPoolIamMemberConditionPtrOutputWithContext(ctx context.Context) CaPoolIamMemberConditionPtrOutput

type CaPoolIamMemberInput

type CaPoolIamMemberInput interface {
	pulumi.Input

	ToCaPoolIamMemberOutput() CaPoolIamMemberOutput
	ToCaPoolIamMemberOutputWithContext(ctx context.Context) CaPoolIamMemberOutput
}

type CaPoolIamMemberMap

type CaPoolIamMemberMap map[string]CaPoolIamMemberInput

func (CaPoolIamMemberMap) ElementType

func (CaPoolIamMemberMap) ElementType() reflect.Type

func (CaPoolIamMemberMap) ToCaPoolIamMemberMapOutput

func (i CaPoolIamMemberMap) ToCaPoolIamMemberMapOutput() CaPoolIamMemberMapOutput

func (CaPoolIamMemberMap) ToCaPoolIamMemberMapOutputWithContext

func (i CaPoolIamMemberMap) ToCaPoolIamMemberMapOutputWithContext(ctx context.Context) CaPoolIamMemberMapOutput

type CaPoolIamMemberMapInput

type CaPoolIamMemberMapInput interface {
	pulumi.Input

	ToCaPoolIamMemberMapOutput() CaPoolIamMemberMapOutput
	ToCaPoolIamMemberMapOutputWithContext(context.Context) CaPoolIamMemberMapOutput
}

CaPoolIamMemberMapInput is an input type that accepts CaPoolIamMemberMap and CaPoolIamMemberMapOutput values. You can construct a concrete instance of `CaPoolIamMemberMapInput` via:

CaPoolIamMemberMap{ "key": CaPoolIamMemberArgs{...} }

type CaPoolIamMemberMapOutput

type CaPoolIamMemberMapOutput struct{ *pulumi.OutputState }

func (CaPoolIamMemberMapOutput) ElementType

func (CaPoolIamMemberMapOutput) ElementType() reflect.Type

func (CaPoolIamMemberMapOutput) MapIndex

func (CaPoolIamMemberMapOutput) ToCaPoolIamMemberMapOutput

func (o CaPoolIamMemberMapOutput) ToCaPoolIamMemberMapOutput() CaPoolIamMemberMapOutput

func (CaPoolIamMemberMapOutput) ToCaPoolIamMemberMapOutputWithContext

func (o CaPoolIamMemberMapOutput) ToCaPoolIamMemberMapOutputWithContext(ctx context.Context) CaPoolIamMemberMapOutput

type CaPoolIamMemberOutput

type CaPoolIamMemberOutput struct{ *pulumi.OutputState }

func (CaPoolIamMemberOutput) CaPool

Used to find the parent resource to bind the IAM policy to

func (CaPoolIamMemberOutput) Condition

An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.

func (CaPoolIamMemberOutput) ElementType

func (CaPoolIamMemberOutput) ElementType() reflect.Type

func (CaPoolIamMemberOutput) Etag

(Computed) The etag of the IAM policy.

func (CaPoolIamMemberOutput) Location

Location of the CaPool. A full list of valid locations can be found by running `gcloud privateca locations list`. Used to find the parent resource to bind the IAM policy to

func (CaPoolIamMemberOutput) Member

Identities that will be granted the privilege in `role`. Each entry can have one of the following values: * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com. * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project" * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project" * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"

func (CaPoolIamMemberOutput) Project

The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.

func (CaPoolIamMemberOutput) Role

The role that should be applied. Only one `certificateauthority.CaPoolIamBinding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.

func (CaPoolIamMemberOutput) ToCaPoolIamMemberOutput

func (o CaPoolIamMemberOutput) ToCaPoolIamMemberOutput() CaPoolIamMemberOutput

func (CaPoolIamMemberOutput) ToCaPoolIamMemberOutputWithContext

func (o CaPoolIamMemberOutput) ToCaPoolIamMemberOutputWithContext(ctx context.Context) CaPoolIamMemberOutput

type CaPoolIamMemberState

type CaPoolIamMemberState struct {
	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringPtrInput
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CaPoolIamMemberConditionPtrInput
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringPtrInput
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Member pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `certificateauthority.CaPoolIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringPtrInput
}

func (CaPoolIamMemberState) ElementType

func (CaPoolIamMemberState) ElementType() reflect.Type

type CaPoolIamPolicy

type CaPoolIamPolicy struct {
	pulumi.CustomResourceState

	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringOutput `pulumi:"caPool"`
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringOutput `pulumi:"location"`
	// The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData pulumi.StringOutput `pulumi:"policyData"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
}

Three different resources help you manage your IAM policy for Certificate Authority Service CaPool. Each of these resources serves a different use case:

* `certificateauthority.CaPoolIamPolicy`: Authoritative. Sets the IAM policy for the capool and replaces any existing policy already attached. * `certificateauthority.CaPoolIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the capool are preserved. * `certificateauthority.CaPoolIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the capool are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `certificateauthority.CaPoolIamPolicy`: Retrieves the IAM policy for the capool

> **Note:** `certificateauthority.CaPoolIamPolicy` **cannot** be used in conjunction with `certificateauthority.CaPoolIamBinding` and `certificateauthority.CaPoolIamMember` or they will fight over what your policy should be.

> **Note:** `certificateauthority.CaPoolIamBinding` resources **can be** used in conjunction with `certificateauthority.CaPoolIamMember` resources **only if** they do not grant privilege to the same role.

> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.

## google\_privateca\_ca\_pool\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CaPoolIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CaPoolIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## google\_privateca\_ca\_pool\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.certificateManager",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCaPoolIamPolicy(ctx, "policy", &certificateauthority.CaPoolIamPolicyArgs{
			CaPool:     pulumi.Any(_default.Id),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamBinding(ctx, "binding", &certificateauthority.CaPoolIamBindingArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CaPoolIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_ca\_pool\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPoolIamMember(ctx, "member", &certificateauthority.CaPoolIamMemberArgs{
			CaPool: pulumi.Any(_default.Id),
			Role:   pulumi.String("roles/privateca.certificateManager"),
			Member: pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CaPoolIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

For all import syntaxes, the "resource in question" can take any of the following forms:

* projects/{{project}}/locations/{{location}}/caPools/{{name}}

* {{project}}/{{location}}/{{name}}

* {{location}}/{{name}}

Any variables not passed in the import command will be taken from the provider configuration.

Certificate Authority Service capool IAM resources can be imported using the resource identifiers, role, and member.

IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.

```sh $ pulumi import gcp:certificateauthority/caPoolIamPolicy:CaPoolIamPolicy editor "projects/{{project}}/locations/{{location}}/caPools/{{ca_pool}} roles/privateca.certificateManager user:jane@example.com" ```

IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.

```sh $ pulumi import gcp:certificateauthority/caPoolIamPolicy:CaPoolIamPolicy editor "projects/{{project}}/locations/{{location}}/caPools/{{ca_pool}} roles/privateca.certificateManager" ```

IAM policy imports use the identifier of the resource in question, e.g.

```sh $ pulumi import gcp:certificateauthority/caPoolIamPolicy:CaPoolIamPolicy editor projects/{{project}}/locations/{{location}}/caPools/{{ca_pool}} ```

-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.

func GetCaPoolIamPolicy

func GetCaPoolIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CaPoolIamPolicyState, opts ...pulumi.ResourceOption) (*CaPoolIamPolicy, error)

GetCaPoolIamPolicy gets an existing CaPoolIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCaPoolIamPolicy

func NewCaPoolIamPolicy(ctx *pulumi.Context,
	name string, args *CaPoolIamPolicyArgs, opts ...pulumi.ResourceOption) (*CaPoolIamPolicy, error)

NewCaPoolIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*CaPoolIamPolicy) ElementType

func (*CaPoolIamPolicy) ElementType() reflect.Type

func (*CaPoolIamPolicy) ToCaPoolIamPolicyOutput

func (i *CaPoolIamPolicy) ToCaPoolIamPolicyOutput() CaPoolIamPolicyOutput

func (*CaPoolIamPolicy) ToCaPoolIamPolicyOutputWithContext

func (i *CaPoolIamPolicy) ToCaPoolIamPolicyOutputWithContext(ctx context.Context) CaPoolIamPolicyOutput

type CaPoolIamPolicyArgs

type CaPoolIamPolicyArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringInput
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringPtrInput
	// The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData pulumi.StringInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a CaPoolIamPolicy resource.

func (CaPoolIamPolicyArgs) ElementType

func (CaPoolIamPolicyArgs) ElementType() reflect.Type

type CaPoolIamPolicyArray

type CaPoolIamPolicyArray []CaPoolIamPolicyInput

func (CaPoolIamPolicyArray) ElementType

func (CaPoolIamPolicyArray) ElementType() reflect.Type

func (CaPoolIamPolicyArray) ToCaPoolIamPolicyArrayOutput

func (i CaPoolIamPolicyArray) ToCaPoolIamPolicyArrayOutput() CaPoolIamPolicyArrayOutput

func (CaPoolIamPolicyArray) ToCaPoolIamPolicyArrayOutputWithContext

func (i CaPoolIamPolicyArray) ToCaPoolIamPolicyArrayOutputWithContext(ctx context.Context) CaPoolIamPolicyArrayOutput

type CaPoolIamPolicyArrayInput

type CaPoolIamPolicyArrayInput interface {
	pulumi.Input

	ToCaPoolIamPolicyArrayOutput() CaPoolIamPolicyArrayOutput
	ToCaPoolIamPolicyArrayOutputWithContext(context.Context) CaPoolIamPolicyArrayOutput
}

CaPoolIamPolicyArrayInput is an input type that accepts CaPoolIamPolicyArray and CaPoolIamPolicyArrayOutput values. You can construct a concrete instance of `CaPoolIamPolicyArrayInput` via:

CaPoolIamPolicyArray{ CaPoolIamPolicyArgs{...} }

type CaPoolIamPolicyArrayOutput

type CaPoolIamPolicyArrayOutput struct{ *pulumi.OutputState }

func (CaPoolIamPolicyArrayOutput) ElementType

func (CaPoolIamPolicyArrayOutput) ElementType() reflect.Type

func (CaPoolIamPolicyArrayOutput) Index

func (CaPoolIamPolicyArrayOutput) ToCaPoolIamPolicyArrayOutput

func (o CaPoolIamPolicyArrayOutput) ToCaPoolIamPolicyArrayOutput() CaPoolIamPolicyArrayOutput

func (CaPoolIamPolicyArrayOutput) ToCaPoolIamPolicyArrayOutputWithContext

func (o CaPoolIamPolicyArrayOutput) ToCaPoolIamPolicyArrayOutputWithContext(ctx context.Context) CaPoolIamPolicyArrayOutput

type CaPoolIamPolicyInput

type CaPoolIamPolicyInput interface {
	pulumi.Input

	ToCaPoolIamPolicyOutput() CaPoolIamPolicyOutput
	ToCaPoolIamPolicyOutputWithContext(ctx context.Context) CaPoolIamPolicyOutput
}

type CaPoolIamPolicyMap

type CaPoolIamPolicyMap map[string]CaPoolIamPolicyInput

func (CaPoolIamPolicyMap) ElementType

func (CaPoolIamPolicyMap) ElementType() reflect.Type

func (CaPoolIamPolicyMap) ToCaPoolIamPolicyMapOutput

func (i CaPoolIamPolicyMap) ToCaPoolIamPolicyMapOutput() CaPoolIamPolicyMapOutput

func (CaPoolIamPolicyMap) ToCaPoolIamPolicyMapOutputWithContext

func (i CaPoolIamPolicyMap) ToCaPoolIamPolicyMapOutputWithContext(ctx context.Context) CaPoolIamPolicyMapOutput

type CaPoolIamPolicyMapInput

type CaPoolIamPolicyMapInput interface {
	pulumi.Input

	ToCaPoolIamPolicyMapOutput() CaPoolIamPolicyMapOutput
	ToCaPoolIamPolicyMapOutputWithContext(context.Context) CaPoolIamPolicyMapOutput
}

CaPoolIamPolicyMapInput is an input type that accepts CaPoolIamPolicyMap and CaPoolIamPolicyMapOutput values. You can construct a concrete instance of `CaPoolIamPolicyMapInput` via:

CaPoolIamPolicyMap{ "key": CaPoolIamPolicyArgs{...} }

type CaPoolIamPolicyMapOutput

type CaPoolIamPolicyMapOutput struct{ *pulumi.OutputState }

func (CaPoolIamPolicyMapOutput) ElementType

func (CaPoolIamPolicyMapOutput) ElementType() reflect.Type

func (CaPoolIamPolicyMapOutput) MapIndex

func (CaPoolIamPolicyMapOutput) ToCaPoolIamPolicyMapOutput

func (o CaPoolIamPolicyMapOutput) ToCaPoolIamPolicyMapOutput() CaPoolIamPolicyMapOutput

func (CaPoolIamPolicyMapOutput) ToCaPoolIamPolicyMapOutputWithContext

func (o CaPoolIamPolicyMapOutput) ToCaPoolIamPolicyMapOutputWithContext(ctx context.Context) CaPoolIamPolicyMapOutput

type CaPoolIamPolicyOutput

type CaPoolIamPolicyOutput struct{ *pulumi.OutputState }

func (CaPoolIamPolicyOutput) CaPool

Used to find the parent resource to bind the IAM policy to

func (CaPoolIamPolicyOutput) ElementType

func (CaPoolIamPolicyOutput) ElementType() reflect.Type

func (CaPoolIamPolicyOutput) Etag

(Computed) The etag of the IAM policy.

func (CaPoolIamPolicyOutput) Location

Location of the CaPool. A full list of valid locations can be found by running `gcloud privateca locations list`. Used to find the parent resource to bind the IAM policy to

func (CaPoolIamPolicyOutput) PolicyData

func (o CaPoolIamPolicyOutput) PolicyData() pulumi.StringOutput

The policy data generated by a `organizations.getIAMPolicy` data source.

func (CaPoolIamPolicyOutput) Project

The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.

func (CaPoolIamPolicyOutput) ToCaPoolIamPolicyOutput

func (o CaPoolIamPolicyOutput) ToCaPoolIamPolicyOutput() CaPoolIamPolicyOutput

func (CaPoolIamPolicyOutput) ToCaPoolIamPolicyOutputWithContext

func (o CaPoolIamPolicyOutput) ToCaPoolIamPolicyOutputWithContext(ctx context.Context) CaPoolIamPolicyOutput

type CaPoolIamPolicyState

type CaPoolIamPolicyState struct {
	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringPtrInput
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringPtrInput
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringPtrInput
	// The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
}

func (CaPoolIamPolicyState) ElementType

func (CaPoolIamPolicyState) ElementType() reflect.Type

type CaPoolInput

type CaPoolInput interface {
	pulumi.Input

	ToCaPoolOutput() CaPoolOutput
	ToCaPoolOutputWithContext(ctx context.Context) CaPoolOutput
}

type CaPoolIssuancePolicy

type CaPoolIssuancePolicy struct {
	// IssuanceModes specifies the allowed ways in which Certificates may be requested from this CaPool.
	// Structure is documented below.
	AllowedIssuanceModes *CaPoolIssuancePolicyAllowedIssuanceModes `pulumi:"allowedIssuanceModes"`
	// If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here.
	// Otherwise, any key may be used.
	// Structure is documented below.
	AllowedKeyTypes []CaPoolIssuancePolicyAllowedKeyType `pulumi:"allowedKeyTypes"`
	// A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request
	// includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate
	// request uses a CertificateTemplate that defines conflicting predefinedValues for the same properties, the certificate
	// issuance request will fail.
	// Structure is documented below.
	BaselineValues *CaPoolIssuancePolicyBaselineValues `pulumi:"baselineValues"`
	// Describes constraints on identities that may appear in Certificates issued through this CaPool.
	// If this is omitted, then this CaPool will not add restrictions on a certificate's identity.
	// Structure is documented below.
	IdentityConstraints *CaPoolIssuancePolicyIdentityConstraints `pulumi:"identityConstraints"`
	// The maximum lifetime allowed for issued Certificates. Note that if the issuing CertificateAuthority
	// expires before a Certificate's requested maximumLifetime, the effective lifetime will be explicitly truncated to match it.
	MaximumLifetime *string `pulumi:"maximumLifetime"`
}

type CaPoolIssuancePolicyAllowedIssuanceModes

type CaPoolIssuancePolicyAllowedIssuanceModes struct {
	// When true, allows callers to create Certificates by specifying a CertificateConfig.
	AllowConfigBasedIssuance bool `pulumi:"allowConfigBasedIssuance"`
	// When true, allows callers to create Certificates by specifying a CSR.
	AllowCsrBasedIssuance bool `pulumi:"allowCsrBasedIssuance"`
}

type CaPoolIssuancePolicyAllowedIssuanceModesArgs

type CaPoolIssuancePolicyAllowedIssuanceModesArgs struct {
	// When true, allows callers to create Certificates by specifying a CertificateConfig.
	AllowConfigBasedIssuance pulumi.BoolInput `pulumi:"allowConfigBasedIssuance"`
	// When true, allows callers to create Certificates by specifying a CSR.
	AllowCsrBasedIssuance pulumi.BoolInput `pulumi:"allowCsrBasedIssuance"`
}

func (CaPoolIssuancePolicyAllowedIssuanceModesArgs) ElementType

func (CaPoolIssuancePolicyAllowedIssuanceModesArgs) ToCaPoolIssuancePolicyAllowedIssuanceModesOutput

func (i CaPoolIssuancePolicyAllowedIssuanceModesArgs) ToCaPoolIssuancePolicyAllowedIssuanceModesOutput() CaPoolIssuancePolicyAllowedIssuanceModesOutput

func (CaPoolIssuancePolicyAllowedIssuanceModesArgs) ToCaPoolIssuancePolicyAllowedIssuanceModesOutputWithContext

func (i CaPoolIssuancePolicyAllowedIssuanceModesArgs) ToCaPoolIssuancePolicyAllowedIssuanceModesOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedIssuanceModesOutput

func (CaPoolIssuancePolicyAllowedIssuanceModesArgs) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

func (i CaPoolIssuancePolicyAllowedIssuanceModesArgs) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutput() CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

func (CaPoolIssuancePolicyAllowedIssuanceModesArgs) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutputWithContext

func (i CaPoolIssuancePolicyAllowedIssuanceModesArgs) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

type CaPoolIssuancePolicyAllowedIssuanceModesInput

type CaPoolIssuancePolicyAllowedIssuanceModesInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyAllowedIssuanceModesOutput() CaPoolIssuancePolicyAllowedIssuanceModesOutput
	ToCaPoolIssuancePolicyAllowedIssuanceModesOutputWithContext(context.Context) CaPoolIssuancePolicyAllowedIssuanceModesOutput
}

CaPoolIssuancePolicyAllowedIssuanceModesInput is an input type that accepts CaPoolIssuancePolicyAllowedIssuanceModesArgs and CaPoolIssuancePolicyAllowedIssuanceModesOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyAllowedIssuanceModesInput` via:

CaPoolIssuancePolicyAllowedIssuanceModesArgs{...}

type CaPoolIssuancePolicyAllowedIssuanceModesOutput

type CaPoolIssuancePolicyAllowedIssuanceModesOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyAllowedIssuanceModesOutput) AllowConfigBasedIssuance

When true, allows callers to create Certificates by specifying a CertificateConfig.

func (CaPoolIssuancePolicyAllowedIssuanceModesOutput) AllowCsrBasedIssuance

When true, allows callers to create Certificates by specifying a CSR.

func (CaPoolIssuancePolicyAllowedIssuanceModesOutput) ElementType

func (CaPoolIssuancePolicyAllowedIssuanceModesOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesOutput

func (o CaPoolIssuancePolicyAllowedIssuanceModesOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesOutput() CaPoolIssuancePolicyAllowedIssuanceModesOutput

func (CaPoolIssuancePolicyAllowedIssuanceModesOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesOutputWithContext

func (o CaPoolIssuancePolicyAllowedIssuanceModesOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedIssuanceModesOutput

func (CaPoolIssuancePolicyAllowedIssuanceModesOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

func (o CaPoolIssuancePolicyAllowedIssuanceModesOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutput() CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

func (CaPoolIssuancePolicyAllowedIssuanceModesOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutputWithContext

func (o CaPoolIssuancePolicyAllowedIssuanceModesOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

type CaPoolIssuancePolicyAllowedIssuanceModesPtrInput

type CaPoolIssuancePolicyAllowedIssuanceModesPtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutput() CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput
	ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutputWithContext(context.Context) CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput
}

CaPoolIssuancePolicyAllowedIssuanceModesPtrInput is an input type that accepts CaPoolIssuancePolicyAllowedIssuanceModesArgs, CaPoolIssuancePolicyAllowedIssuanceModesPtr and CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyAllowedIssuanceModesPtrInput` via:

        CaPoolIssuancePolicyAllowedIssuanceModesArgs{...}

or:

        nil

type CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

type CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput) AllowConfigBasedIssuance

When true, allows callers to create Certificates by specifying a CertificateConfig.

func (CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput) AllowCsrBasedIssuance

When true, allows callers to create Certificates by specifying a CSR.

func (CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput) Elem

func (CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput) ElementType

func (CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

func (o CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutput() CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

func (CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutputWithContext

func (o CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput) ToCaPoolIssuancePolicyAllowedIssuanceModesPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedIssuanceModesPtrOutput

type CaPoolIssuancePolicyAllowedKeyType

type CaPoolIssuancePolicyAllowedKeyType struct {
	// Represents an allowed Elliptic Curve key type.
	// Structure is documented below.
	EllipticCurve *CaPoolIssuancePolicyAllowedKeyTypeEllipticCurve `pulumi:"ellipticCurve"`
	// Describes an RSA key that may be used in a Certificate issued from a CaPool.
	// Structure is documented below.
	Rsa *CaPoolIssuancePolicyAllowedKeyTypeRsa `pulumi:"rsa"`
}

type CaPoolIssuancePolicyAllowedKeyTypeArgs

type CaPoolIssuancePolicyAllowedKeyTypeArgs struct {
	// Represents an allowed Elliptic Curve key type.
	// Structure is documented below.
	EllipticCurve CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrInput `pulumi:"ellipticCurve"`
	// Describes an RSA key that may be used in a Certificate issued from a CaPool.
	// Structure is documented below.
	Rsa CaPoolIssuancePolicyAllowedKeyTypeRsaPtrInput `pulumi:"rsa"`
}

func (CaPoolIssuancePolicyAllowedKeyTypeArgs) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeArgs) ToCaPoolIssuancePolicyAllowedKeyTypeOutput

func (i CaPoolIssuancePolicyAllowedKeyTypeArgs) ToCaPoolIssuancePolicyAllowedKeyTypeOutput() CaPoolIssuancePolicyAllowedKeyTypeOutput

func (CaPoolIssuancePolicyAllowedKeyTypeArgs) ToCaPoolIssuancePolicyAllowedKeyTypeOutputWithContext

func (i CaPoolIssuancePolicyAllowedKeyTypeArgs) ToCaPoolIssuancePolicyAllowedKeyTypeOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeOutput

type CaPoolIssuancePolicyAllowedKeyTypeArray

type CaPoolIssuancePolicyAllowedKeyTypeArray []CaPoolIssuancePolicyAllowedKeyTypeInput

func (CaPoolIssuancePolicyAllowedKeyTypeArray) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeArray) ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutput

func (i CaPoolIssuancePolicyAllowedKeyTypeArray) ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutput() CaPoolIssuancePolicyAllowedKeyTypeArrayOutput

func (CaPoolIssuancePolicyAllowedKeyTypeArray) ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutputWithContext

func (i CaPoolIssuancePolicyAllowedKeyTypeArray) ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeArrayOutput

type CaPoolIssuancePolicyAllowedKeyTypeArrayInput

type CaPoolIssuancePolicyAllowedKeyTypeArrayInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutput() CaPoolIssuancePolicyAllowedKeyTypeArrayOutput
	ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutputWithContext(context.Context) CaPoolIssuancePolicyAllowedKeyTypeArrayOutput
}

CaPoolIssuancePolicyAllowedKeyTypeArrayInput is an input type that accepts CaPoolIssuancePolicyAllowedKeyTypeArray and CaPoolIssuancePolicyAllowedKeyTypeArrayOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyAllowedKeyTypeArrayInput` via:

CaPoolIssuancePolicyAllowedKeyTypeArray{ CaPoolIssuancePolicyAllowedKeyTypeArgs{...} }

type CaPoolIssuancePolicyAllowedKeyTypeArrayOutput

type CaPoolIssuancePolicyAllowedKeyTypeArrayOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyAllowedKeyTypeArrayOutput) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeArrayOutput) Index

func (CaPoolIssuancePolicyAllowedKeyTypeArrayOutput) ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutput

func (o CaPoolIssuancePolicyAllowedKeyTypeArrayOutput) ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutput() CaPoolIssuancePolicyAllowedKeyTypeArrayOutput

func (CaPoolIssuancePolicyAllowedKeyTypeArrayOutput) ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutputWithContext

func (o CaPoolIssuancePolicyAllowedKeyTypeArrayOutput) ToCaPoolIssuancePolicyAllowedKeyTypeArrayOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeArrayOutput

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurve

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurve struct {
	// The algorithm used.
	// Possible values are: `ECDSA_P256`, `ECDSA_P384`, `EDDSA_25519`.
	SignatureAlgorithm string `pulumi:"signatureAlgorithm"`
}

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs struct {
	// The algorithm used.
	// Possible values are: `ECDSA_P256`, `ECDSA_P384`, `EDDSA_25519`.
	SignatureAlgorithm pulumi.StringInput `pulumi:"signatureAlgorithm"`
}

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput

func (i CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput() CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutputWithContext

func (i CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput

func (i CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput() CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutputWithContext

func (i CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveInput

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput() CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput
	ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutputWithContext(context.Context) CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput
}

CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveInput is an input type that accepts CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs and CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveInput` via:

CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs{...}

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput) SignatureAlgorithm

The algorithm used. Possible values are: `ECDSA_P256`, `ECDSA_P384`, `EDDSA_25519`.

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutputWithContext

func (o CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput

func (o CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput() CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutputWithContext

func (o CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrInput

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput() CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput
	ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutputWithContext(context.Context) CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput
}

CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrInput is an input type that accepts CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs, CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtr and CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrInput` via:

        CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs{...}

or:

        nil

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput

type CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput) Elem

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput) SignatureAlgorithm

The algorithm used. Possible values are: `ECDSA_P256`, `ECDSA_P384`, `EDDSA_25519`.

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput

func (CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutputWithContext

func (o CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput) ToCaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeEllipticCurvePtrOutput

type CaPoolIssuancePolicyAllowedKeyTypeInput

type CaPoolIssuancePolicyAllowedKeyTypeInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyAllowedKeyTypeOutput() CaPoolIssuancePolicyAllowedKeyTypeOutput
	ToCaPoolIssuancePolicyAllowedKeyTypeOutputWithContext(context.Context) CaPoolIssuancePolicyAllowedKeyTypeOutput
}

CaPoolIssuancePolicyAllowedKeyTypeInput is an input type that accepts CaPoolIssuancePolicyAllowedKeyTypeArgs and CaPoolIssuancePolicyAllowedKeyTypeOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyAllowedKeyTypeInput` via:

CaPoolIssuancePolicyAllowedKeyTypeArgs{...}

type CaPoolIssuancePolicyAllowedKeyTypeOutput

type CaPoolIssuancePolicyAllowedKeyTypeOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyAllowedKeyTypeOutput) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeOutput) EllipticCurve

Represents an allowed Elliptic Curve key type. Structure is documented below.

func (CaPoolIssuancePolicyAllowedKeyTypeOutput) Rsa

Describes an RSA key that may be used in a Certificate issued from a CaPool. Structure is documented below.

func (CaPoolIssuancePolicyAllowedKeyTypeOutput) ToCaPoolIssuancePolicyAllowedKeyTypeOutput

func (o CaPoolIssuancePolicyAllowedKeyTypeOutput) ToCaPoolIssuancePolicyAllowedKeyTypeOutput() CaPoolIssuancePolicyAllowedKeyTypeOutput

func (CaPoolIssuancePolicyAllowedKeyTypeOutput) ToCaPoolIssuancePolicyAllowedKeyTypeOutputWithContext

func (o CaPoolIssuancePolicyAllowedKeyTypeOutput) ToCaPoolIssuancePolicyAllowedKeyTypeOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeOutput

type CaPoolIssuancePolicyAllowedKeyTypeRsa

type CaPoolIssuancePolicyAllowedKeyTypeRsa struct {
	// The maximum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the
	// service will not enforce an explicit upper bound on RSA modulus sizes.
	MaxModulusSize *string `pulumi:"maxModulusSize"`
	// The minimum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the
	// service-level min RSA modulus size will continue to apply.
	MinModulusSize *string `pulumi:"minModulusSize"`
}

type CaPoolIssuancePolicyAllowedKeyTypeRsaArgs

type CaPoolIssuancePolicyAllowedKeyTypeRsaArgs struct {
	// The maximum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the
	// service will not enforce an explicit upper bound on RSA modulus sizes.
	MaxModulusSize pulumi.StringPtrInput `pulumi:"maxModulusSize"`
	// The minimum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the
	// service-level min RSA modulus size will continue to apply.
	MinModulusSize pulumi.StringPtrInput `pulumi:"minModulusSize"`
}

func (CaPoolIssuancePolicyAllowedKeyTypeRsaArgs) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeRsaArgs) ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutput

func (i CaPoolIssuancePolicyAllowedKeyTypeRsaArgs) ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutput() CaPoolIssuancePolicyAllowedKeyTypeRsaOutput

func (CaPoolIssuancePolicyAllowedKeyTypeRsaArgs) ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutputWithContext

func (i CaPoolIssuancePolicyAllowedKeyTypeRsaArgs) ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeRsaOutput

func (CaPoolIssuancePolicyAllowedKeyTypeRsaArgs) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

func (i CaPoolIssuancePolicyAllowedKeyTypeRsaArgs) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput() CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

func (CaPoolIssuancePolicyAllowedKeyTypeRsaArgs) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutputWithContext

func (i CaPoolIssuancePolicyAllowedKeyTypeRsaArgs) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

type CaPoolIssuancePolicyAllowedKeyTypeRsaInput

type CaPoolIssuancePolicyAllowedKeyTypeRsaInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutput() CaPoolIssuancePolicyAllowedKeyTypeRsaOutput
	ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutputWithContext(context.Context) CaPoolIssuancePolicyAllowedKeyTypeRsaOutput
}

CaPoolIssuancePolicyAllowedKeyTypeRsaInput is an input type that accepts CaPoolIssuancePolicyAllowedKeyTypeRsaArgs and CaPoolIssuancePolicyAllowedKeyTypeRsaOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyAllowedKeyTypeRsaInput` via:

CaPoolIssuancePolicyAllowedKeyTypeRsaArgs{...}

type CaPoolIssuancePolicyAllowedKeyTypeRsaOutput

type CaPoolIssuancePolicyAllowedKeyTypeRsaOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) MaxModulusSize

The maximum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the service will not enforce an explicit upper bound on RSA modulus sizes.

func (CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) MinModulusSize

The minimum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the service-level min RSA modulus size will continue to apply.

func (CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutput

func (o CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutput() CaPoolIssuancePolicyAllowedKeyTypeRsaOutput

func (CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutputWithContext

func (o CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeRsaOutput

func (CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

func (o CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput() CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

func (CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutputWithContext

func (o CaPoolIssuancePolicyAllowedKeyTypeRsaOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

type CaPoolIssuancePolicyAllowedKeyTypeRsaPtrInput

type CaPoolIssuancePolicyAllowedKeyTypeRsaPtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput() CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput
	ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutputWithContext(context.Context) CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput
}

CaPoolIssuancePolicyAllowedKeyTypeRsaPtrInput is an input type that accepts CaPoolIssuancePolicyAllowedKeyTypeRsaArgs, CaPoolIssuancePolicyAllowedKeyTypeRsaPtr and CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyAllowedKeyTypeRsaPtrInput` via:

        CaPoolIssuancePolicyAllowedKeyTypeRsaArgs{...}

or:

        nil

type CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

type CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput) Elem

func (CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput) ElementType

func (CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput) MaxModulusSize

The maximum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the service will not enforce an explicit upper bound on RSA modulus sizes.

func (CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput) MinModulusSize

The minimum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the service-level min RSA modulus size will continue to apply.

func (CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

func (o CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput() CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

func (CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutputWithContext

func (o CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput) ToCaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyAllowedKeyTypeRsaPtrOutput

type CaPoolIssuancePolicyArgs

type CaPoolIssuancePolicyArgs struct {
	// IssuanceModes specifies the allowed ways in which Certificates may be requested from this CaPool.
	// Structure is documented below.
	AllowedIssuanceModes CaPoolIssuancePolicyAllowedIssuanceModesPtrInput `pulumi:"allowedIssuanceModes"`
	// If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here.
	// Otherwise, any key may be used.
	// Structure is documented below.
	AllowedKeyTypes CaPoolIssuancePolicyAllowedKeyTypeArrayInput `pulumi:"allowedKeyTypes"`
	// A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request
	// includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate
	// request uses a CertificateTemplate that defines conflicting predefinedValues for the same properties, the certificate
	// issuance request will fail.
	// Structure is documented below.
	BaselineValues CaPoolIssuancePolicyBaselineValuesPtrInput `pulumi:"baselineValues"`
	// Describes constraints on identities that may appear in Certificates issued through this CaPool.
	// If this is omitted, then this CaPool will not add restrictions on a certificate's identity.
	// Structure is documented below.
	IdentityConstraints CaPoolIssuancePolicyIdentityConstraintsPtrInput `pulumi:"identityConstraints"`
	// The maximum lifetime allowed for issued Certificates. Note that if the issuing CertificateAuthority
	// expires before a Certificate's requested maximumLifetime, the effective lifetime will be explicitly truncated to match it.
	MaximumLifetime pulumi.StringPtrInput `pulumi:"maximumLifetime"`
}

func (CaPoolIssuancePolicyArgs) ElementType

func (CaPoolIssuancePolicyArgs) ElementType() reflect.Type

func (CaPoolIssuancePolicyArgs) ToCaPoolIssuancePolicyOutput

func (i CaPoolIssuancePolicyArgs) ToCaPoolIssuancePolicyOutput() CaPoolIssuancePolicyOutput

func (CaPoolIssuancePolicyArgs) ToCaPoolIssuancePolicyOutputWithContext

func (i CaPoolIssuancePolicyArgs) ToCaPoolIssuancePolicyOutputWithContext(ctx context.Context) CaPoolIssuancePolicyOutput

func (CaPoolIssuancePolicyArgs) ToCaPoolIssuancePolicyPtrOutput

func (i CaPoolIssuancePolicyArgs) ToCaPoolIssuancePolicyPtrOutput() CaPoolIssuancePolicyPtrOutput

func (CaPoolIssuancePolicyArgs) ToCaPoolIssuancePolicyPtrOutputWithContext

func (i CaPoolIssuancePolicyArgs) ToCaPoolIssuancePolicyPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyPtrOutput

type CaPoolIssuancePolicyBaselineValues

type CaPoolIssuancePolicyBaselineValues struct {
	// Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
	// Structure is documented below.
	AdditionalExtensions []CaPoolIssuancePolicyBaselineValuesAdditionalExtension `pulumi:"additionalExtensions"`
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers []string `pulumi:"aiaOcspServers"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	CaOptions CaPoolIssuancePolicyBaselineValuesCaOptions `pulumi:"caOptions"`
	// Indicates the intended use for keys that correspond to a certificate.
	// Structure is documented below.
	KeyUsage CaPoolIssuancePolicyBaselineValuesKeyUsage `pulumi:"keyUsage"`
	// Describes the X.509 name constraints extension.
	// Structure is documented below.
	NameConstraints *CaPoolIssuancePolicyBaselineValuesNameConstraints `pulumi:"nameConstraints"`
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// Structure is documented below.
	PolicyIds []CaPoolIssuancePolicyBaselineValuesPolicyId `pulumi:"policyIds"`
}

type CaPoolIssuancePolicyBaselineValuesAdditionalExtension

type CaPoolIssuancePolicyBaselineValuesAdditionalExtension struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical bool `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	ObjectId CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectId `pulumi:"objectId"`
	// The value of this X.509 extension. A base64-encoded string.
	Value string `pulumi:"value"`
}

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical pulumi.BoolInput `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	ObjectId CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdInput `pulumi:"objectId"`
	// The value of this X.509 extension. A base64-encoded string.
	Value pulumi.StringInput `pulumi:"value"`
}

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArray

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArray []CaPoolIssuancePolicyBaselineValuesAdditionalExtensionInput

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArray) ElementType

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArray) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArray) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArray) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayInput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput() CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput
	ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput
}

CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArray and CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayInput` via:

CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArray{ CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs{...} }

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput) Index

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayOutput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionInput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput() CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput
	ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput
}

CaPoolIssuancePolicyBaselineValuesAdditionalExtensionInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs and CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesAdditionalExtensionInput` via:

CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs{...}

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectId

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdInput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput() CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput
	ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput
}

CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs and CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdInput` via:

CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs{...}

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdOutput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput

type CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput) Critical

Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput) ObjectId

Describes values that are relevant in a CA certificate. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput) ToCaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput

func (CaPoolIssuancePolicyBaselineValuesAdditionalExtensionOutput) Value

The value of this X.509 extension. A base64-encoded string.

type CaPoolIssuancePolicyBaselineValuesArgs

type CaPoolIssuancePolicyBaselineValuesArgs struct {
	// Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
	// Structure is documented below.
	AdditionalExtensions CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArrayInput `pulumi:"additionalExtensions"`
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers pulumi.StringArrayInput `pulumi:"aiaOcspServers"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	CaOptions CaPoolIssuancePolicyBaselineValuesCaOptionsInput `pulumi:"caOptions"`
	// Indicates the intended use for keys that correspond to a certificate.
	// Structure is documented below.
	KeyUsage CaPoolIssuancePolicyBaselineValuesKeyUsageInput `pulumi:"keyUsage"`
	// Describes the X.509 name constraints extension.
	// Structure is documented below.
	NameConstraints CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrInput `pulumi:"nameConstraints"`
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// Structure is documented below.
	PolicyIds CaPoolIssuancePolicyBaselineValuesPolicyIdArrayInput `pulumi:"policyIds"`
}

func (CaPoolIssuancePolicyBaselineValuesArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesArgs) ToCaPoolIssuancePolicyBaselineValuesOutput

func (i CaPoolIssuancePolicyBaselineValuesArgs) ToCaPoolIssuancePolicyBaselineValuesOutput() CaPoolIssuancePolicyBaselineValuesOutput

func (CaPoolIssuancePolicyBaselineValuesArgs) ToCaPoolIssuancePolicyBaselineValuesOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesArgs) ToCaPoolIssuancePolicyBaselineValuesOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesOutput

func (CaPoolIssuancePolicyBaselineValuesArgs) ToCaPoolIssuancePolicyBaselineValuesPtrOutput

func (i CaPoolIssuancePolicyBaselineValuesArgs) ToCaPoolIssuancePolicyBaselineValuesPtrOutput() CaPoolIssuancePolicyBaselineValuesPtrOutput

func (CaPoolIssuancePolicyBaselineValuesArgs) ToCaPoolIssuancePolicyBaselineValuesPtrOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesArgs) ToCaPoolIssuancePolicyBaselineValuesPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesPtrOutput

type CaPoolIssuancePolicyBaselineValuesCaOptions

type CaPoolIssuancePolicyBaselineValuesCaOptions struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa *bool `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
	MaxIssuerPathLength *int `pulumi:"maxIssuerPathLength"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.
	NonCa *bool `pulumi:"nonCa"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// if both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset,
	// the max path length will be omitted from the CA certificate.
	ZeroMaxIssuerPathLength *bool `pulumi:"zeroMaxIssuerPathLength"`
}

type CaPoolIssuancePolicyBaselineValuesCaOptionsArgs

type CaPoolIssuancePolicyBaselineValuesCaOptionsArgs struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa pulumi.BoolPtrInput `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
	MaxIssuerPathLength pulumi.IntPtrInput `pulumi:"maxIssuerPathLength"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.
	NonCa pulumi.BoolPtrInput `pulumi:"nonCa"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// if both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset,
	// the max path length will be omitted from the CA certificate.
	ZeroMaxIssuerPathLength pulumi.BoolPtrInput `pulumi:"zeroMaxIssuerPathLength"`
}

func (CaPoolIssuancePolicyBaselineValuesCaOptionsArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesCaOptionsArgs) ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutput

func (i CaPoolIssuancePolicyBaselineValuesCaOptionsArgs) ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutput() CaPoolIssuancePolicyBaselineValuesCaOptionsOutput

func (CaPoolIssuancePolicyBaselineValuesCaOptionsArgs) ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesCaOptionsArgs) ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesCaOptionsOutput

func (CaPoolIssuancePolicyBaselineValuesCaOptionsArgs) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput

func (i CaPoolIssuancePolicyBaselineValuesCaOptionsArgs) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput() CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput

func (CaPoolIssuancePolicyBaselineValuesCaOptionsArgs) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesCaOptionsArgs) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput

type CaPoolIssuancePolicyBaselineValuesCaOptionsInput

type CaPoolIssuancePolicyBaselineValuesCaOptionsInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutput() CaPoolIssuancePolicyBaselineValuesCaOptionsOutput
	ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesCaOptionsOutput
}

CaPoolIssuancePolicyBaselineValuesCaOptionsInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesCaOptionsArgs and CaPoolIssuancePolicyBaselineValuesCaOptionsOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesCaOptionsInput` via:

CaPoolIssuancePolicyBaselineValuesCaOptionsArgs{...}

type CaPoolIssuancePolicyBaselineValuesCaOptionsOutput

type CaPoolIssuancePolicyBaselineValuesCaOptionsOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) IsCa

When true, the "CA" in Basic Constraints extension will be set to true.

func (CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) MaxIssuerPathLength

Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.

func (CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) NonCa

When true, the "CA" in Basic Constraints extension will be set to false. If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.

func (CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutput

func (o CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutput() CaPoolIssuancePolicyBaselineValuesCaOptionsOutput

func (CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesCaOptionsOutput

func (CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput

func (o CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput() CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput

func (CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput

func (CaPoolIssuancePolicyBaselineValuesCaOptionsOutput) ZeroMaxIssuerPathLength

When true, the "path length constraint" in Basic Constraints extension will be set to 0. if both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset, the max path length will be omitted from the CA certificate.

type CaPoolIssuancePolicyBaselineValuesCaOptionsPtrInput

type CaPoolIssuancePolicyBaselineValuesCaOptionsPtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput() CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput
	ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput
}

CaPoolIssuancePolicyBaselineValuesCaOptionsPtrInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesCaOptionsArgs, CaPoolIssuancePolicyBaselineValuesCaOptionsPtr and CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesCaOptionsPtrInput` via:

        CaPoolIssuancePolicyBaselineValuesCaOptionsArgs{...}

or:

        nil

type CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput

type CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput) Elem

func (CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput) IsCa

When true, the "CA" in Basic Constraints extension will be set to true.

func (CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput) MaxIssuerPathLength

Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.

func (CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput) NonCa

When true, the "CA" in Basic Constraints extension will be set to false. If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.

func (CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput

func (CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput) ToCaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput

func (CaPoolIssuancePolicyBaselineValuesCaOptionsPtrOutput) ZeroMaxIssuerPathLength

When true, the "path length constraint" in Basic Constraints extension will be set to 0. if both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset, the max path length will be omitted from the CA certificate.

type CaPoolIssuancePolicyBaselineValuesInput

type CaPoolIssuancePolicyBaselineValuesInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesOutput() CaPoolIssuancePolicyBaselineValuesOutput
	ToCaPoolIssuancePolicyBaselineValuesOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesOutput
}

CaPoolIssuancePolicyBaselineValuesInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesArgs and CaPoolIssuancePolicyBaselineValuesOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesInput` via:

CaPoolIssuancePolicyBaselineValuesArgs{...}

type CaPoolIssuancePolicyBaselineValuesKeyUsage

type CaPoolIssuancePolicyBaselineValuesKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	BaseKeyUsage CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsage `pulumi:"baseKeyUsage"`
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	ExtendedKeyUsage CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsage `pulumi:"extendedKeyUsage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// Structure is documented below.
	UnknownExtendedKeyUsages []CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsage `pulumi:"unknownExtendedKeyUsages"`
}

type CaPoolIssuancePolicyBaselineValuesKeyUsageArgs

type CaPoolIssuancePolicyBaselineValuesKeyUsageArgs struct {
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	BaseKeyUsage CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageInput `pulumi:"baseKeyUsage"`
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	ExtendedKeyUsage CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageInput `pulumi:"extendedKeyUsage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// Structure is documented below.
	UnknownExtendedKeyUsages CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayInput `pulumi:"unknownExtendedKeyUsages"`
}

func (CaPoolIssuancePolicyBaselineValuesKeyUsageArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutput

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutput() CaPoolIssuancePolicyBaselineValuesKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput() CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsage

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	CertSign *bool `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment *bool `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign *bool `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment *bool `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly *bool `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature *bool `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly *bool `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement *bool `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment *bool `pulumi:"keyEncipherment"`
}

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs struct {
	// The key may be used to sign certificates.
	CertSign pulumi.BoolPtrInput `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment pulumi.BoolPtrInput `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign pulumi.BoolPtrInput `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment pulumi.BoolPtrInput `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly pulumi.BoolPtrInput `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature pulumi.BoolPtrInput `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly pulumi.BoolPtrInput `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement pulumi.BoolPtrInput `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment pulumi.BoolPtrInput `pulumi:"keyEncipherment"`
}

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageInput

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput() CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput
	ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput
}

CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs and CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageInput` via:

CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs{...}

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) CertSign

The key may be used to sign certificates.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) CrlSign

The key may be used sign certificate revocation lists.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) DataEncipherment

The key may be used to encipher data.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) DecipherOnly

The key may be used to decipher only.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) DigitalSignature

The key may be used for digital signatures.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) EncipherOnly

The key may be used to encipher only.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) KeyEncipherment

The key may be used to encipher other keys.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrInput

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput() CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput
	ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput
}

CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs, CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtr and CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrInput` via:

        CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs{...}

or:

        nil

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) CertSign

The key may be used to sign certificates.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) CrlSign

The key may be used sign certificate revocation lists.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) DataEncipherment

The key may be used to encipher data.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) DecipherOnly

The key may be used to decipher only.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) DigitalSignature

The key may be used for digital signatures.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) Elem

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) EncipherOnly

The key may be used to encipher only.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) KeyEncipherment

The key may be used to encipher other keys.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsage

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth *bool `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning *bool `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection *bool `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning *bool `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth *bool `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping *bool `pulumi:"timeStamping"`
}

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth pulumi.BoolPtrInput `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning pulumi.BoolPtrInput `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection pulumi.BoolPtrInput `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning pulumi.BoolPtrInput `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth pulumi.BoolPtrInput `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping pulumi.BoolPtrInput `pulumi:"timeStamping"`
}

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageInput

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput() CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput
	ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput
}

CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs and CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageInput` via:

CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs{...}

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrInput

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput() CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput
	ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput
}

CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs, CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtr and CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrInput` via:

        CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs{...}

or:

        nil

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) Elem

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageInput

type CaPoolIssuancePolicyBaselineValuesKeyUsageInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutput() CaPoolIssuancePolicyBaselineValuesKeyUsageOutput
	ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageOutput
}

CaPoolIssuancePolicyBaselineValuesKeyUsageInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesKeyUsageArgs and CaPoolIssuancePolicyBaselineValuesKeyUsageOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesKeyUsageInput` via:

CaPoolIssuancePolicyBaselineValuesKeyUsageArgs{...}

type CaPoolIssuancePolicyBaselineValuesKeyUsageOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) BaseKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ExtendedKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutput

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutput() CaPoolIssuancePolicyBaselineValuesKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput() CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageOutput) UnknownExtendedKeyUsages

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages. Structure is documented below.

type CaPoolIssuancePolicyBaselineValuesKeyUsagePtrInput

type CaPoolIssuancePolicyBaselineValuesKeyUsagePtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput() CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput
	ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput
}

CaPoolIssuancePolicyBaselineValuesKeyUsagePtrInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesKeyUsageArgs, CaPoolIssuancePolicyBaselineValuesKeyUsagePtr and CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesKeyUsagePtrInput` via:

        CaPoolIssuancePolicyBaselineValuesKeyUsageArgs{...}

or:

        nil

type CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput) BaseKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput) Elem

func (CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput) ExtendedKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

func (o CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput() CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsagePtrOutput) UnknownExtendedKeyUsages

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages. Structure is documented below.

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsage

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsage struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArray

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArray []CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageInput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArray) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArray) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArray) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArray) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayInput

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput() CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput
	ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput
}

CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArray and CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayInput` via:

CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArray{ CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs{...} }

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageInput

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput() CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput
	ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput
}

CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs and CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageInput` via:

CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs{...}

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput

type CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput

func (CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput) ToCaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageOutput

type CaPoolIssuancePolicyBaselineValuesNameConstraints

type CaPoolIssuancePolicyBaselineValuesNameConstraints struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical bool `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	ExcludedDnsNames []string `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses []string `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges []string `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	ExcludedUris []string `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	PermittedDnsNames []string `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses []string `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges []string `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	PermittedUris []string `pulumi:"permittedUris"`
}

type CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs

type CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical pulumi.BoolInput `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	ExcludedDnsNames pulumi.StringArrayInput `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses pulumi.StringArrayInput `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges pulumi.StringArrayInput `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	ExcludedUris pulumi.StringArrayInput `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	PermittedDnsNames pulumi.StringArrayInput `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses pulumi.StringArrayInput `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges pulumi.StringArrayInput `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	PermittedUris pulumi.StringArrayInput `pulumi:"permittedUris"`
}

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsOutput

func (i CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsOutput() CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput

func (i CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput() CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput

type CaPoolIssuancePolicyBaselineValuesNameConstraintsInput

type CaPoolIssuancePolicyBaselineValuesNameConstraintsInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesNameConstraintsOutput() CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput
	ToCaPoolIssuancePolicyBaselineValuesNameConstraintsOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput
}

CaPoolIssuancePolicyBaselineValuesNameConstraintsInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs and CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesNameConstraintsInput` via:

CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs{...}

type CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput

type CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) Critical

Indicates whether or not the name constraints are marked critical.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ExcludedDnsNames

Contains excluded DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ExcludedEmailAddresses

Contains the excluded email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ExcludedIpRanges

Contains the excluded IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ExcludedUris

Contains the excluded URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) PermittedDnsNames

Contains permitted DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) PermittedEmailAddresses

Contains the permitted email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) PermittedIpRanges

Contains the permitted IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) PermittedUris

Contains the permitted URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsOutput

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesNameConstraintsOutput) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput

type CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrInput

type CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput() CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput
	ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput
}

CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs, CaPoolIssuancePolicyBaselineValuesNameConstraintsPtr and CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrInput` via:

        CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs{...}

or:

        nil

type CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput

type CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) Critical

Indicates whether or not the name constraints are marked critical.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) Elem

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) ExcludedDnsNames

Contains excluded DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) ExcludedEmailAddresses

Contains the excluded email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) ExcludedIpRanges

Contains the excluded IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) ExcludedUris

Contains the excluded URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) PermittedDnsNames

Contains permitted DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) PermittedEmailAddresses

Contains the permitted email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) PermittedIpRanges

Contains the permitted IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) PermittedUris

Contains the permitted URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput

func (CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput) ToCaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesNameConstraintsPtrOutput

type CaPoolIssuancePolicyBaselineValuesOutput

type CaPoolIssuancePolicyBaselineValuesOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesOutput) AdditionalExtensions

Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesOutput) AiaOcspServers

Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (CaPoolIssuancePolicyBaselineValuesOutput) CaOptions

Describes values that are relevant in a CA certificate. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesOutput) KeyUsage

Indicates the intended use for keys that correspond to a certificate. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesOutput) NameConstraints

Describes the X.509 name constraints extension. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesOutput) PolicyIds

Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesOutput) ToCaPoolIssuancePolicyBaselineValuesOutput

func (o CaPoolIssuancePolicyBaselineValuesOutput) ToCaPoolIssuancePolicyBaselineValuesOutput() CaPoolIssuancePolicyBaselineValuesOutput

func (CaPoolIssuancePolicyBaselineValuesOutput) ToCaPoolIssuancePolicyBaselineValuesOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesOutput) ToCaPoolIssuancePolicyBaselineValuesOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesOutput

func (CaPoolIssuancePolicyBaselineValuesOutput) ToCaPoolIssuancePolicyBaselineValuesPtrOutput

func (o CaPoolIssuancePolicyBaselineValuesOutput) ToCaPoolIssuancePolicyBaselineValuesPtrOutput() CaPoolIssuancePolicyBaselineValuesPtrOutput

func (CaPoolIssuancePolicyBaselineValuesOutput) ToCaPoolIssuancePolicyBaselineValuesPtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesOutput) ToCaPoolIssuancePolicyBaselineValuesPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesPtrOutput

type CaPoolIssuancePolicyBaselineValuesPolicyId

type CaPoolIssuancePolicyBaselineValuesPolicyId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CaPoolIssuancePolicyBaselineValuesPolicyIdArgs

type CaPoolIssuancePolicyBaselineValuesPolicyIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArgs) ElementType

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArgs) ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutput

func (i CaPoolIssuancePolicyBaselineValuesPolicyIdArgs) ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutput() CaPoolIssuancePolicyBaselineValuesPolicyIdOutput

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArgs) ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesPolicyIdArgs) ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesPolicyIdOutput

type CaPoolIssuancePolicyBaselineValuesPolicyIdArray

type CaPoolIssuancePolicyBaselineValuesPolicyIdArray []CaPoolIssuancePolicyBaselineValuesPolicyIdInput

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArray) ElementType

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArray) ToCaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput

func (i CaPoolIssuancePolicyBaselineValuesPolicyIdArray) ToCaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput() CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArray) ToCaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutputWithContext

func (i CaPoolIssuancePolicyBaselineValuesPolicyIdArray) ToCaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput

type CaPoolIssuancePolicyBaselineValuesPolicyIdArrayInput

type CaPoolIssuancePolicyBaselineValuesPolicyIdArrayInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput() CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput
	ToCaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput
}

CaPoolIssuancePolicyBaselineValuesPolicyIdArrayInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesPolicyIdArray and CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesPolicyIdArrayInput` via:

CaPoolIssuancePolicyBaselineValuesPolicyIdArray{ CaPoolIssuancePolicyBaselineValuesPolicyIdArgs{...} }

type CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput

type CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput) Index

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput) ToCaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput

func (CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput) ToCaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput) ToCaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesPolicyIdArrayOutput

type CaPoolIssuancePolicyBaselineValuesPolicyIdInput

type CaPoolIssuancePolicyBaselineValuesPolicyIdInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutput() CaPoolIssuancePolicyBaselineValuesPolicyIdOutput
	ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesPolicyIdOutput
}

CaPoolIssuancePolicyBaselineValuesPolicyIdInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesPolicyIdArgs and CaPoolIssuancePolicyBaselineValuesPolicyIdOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesPolicyIdInput` via:

CaPoolIssuancePolicyBaselineValuesPolicyIdArgs{...}

type CaPoolIssuancePolicyBaselineValuesPolicyIdOutput

type CaPoolIssuancePolicyBaselineValuesPolicyIdOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesPolicyIdOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesPolicyIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CaPoolIssuancePolicyBaselineValuesPolicyIdOutput) ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutput

func (o CaPoolIssuancePolicyBaselineValuesPolicyIdOutput) ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutput() CaPoolIssuancePolicyBaselineValuesPolicyIdOutput

func (CaPoolIssuancePolicyBaselineValuesPolicyIdOutput) ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesPolicyIdOutput) ToCaPoolIssuancePolicyBaselineValuesPolicyIdOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesPolicyIdOutput

type CaPoolIssuancePolicyBaselineValuesPtrInput

type CaPoolIssuancePolicyBaselineValuesPtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyBaselineValuesPtrOutput() CaPoolIssuancePolicyBaselineValuesPtrOutput
	ToCaPoolIssuancePolicyBaselineValuesPtrOutputWithContext(context.Context) CaPoolIssuancePolicyBaselineValuesPtrOutput
}

CaPoolIssuancePolicyBaselineValuesPtrInput is an input type that accepts CaPoolIssuancePolicyBaselineValuesArgs, CaPoolIssuancePolicyBaselineValuesPtr and CaPoolIssuancePolicyBaselineValuesPtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyBaselineValuesPtrInput` via:

        CaPoolIssuancePolicyBaselineValuesArgs{...}

or:

        nil

type CaPoolIssuancePolicyBaselineValuesPtrOutput

type CaPoolIssuancePolicyBaselineValuesPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) AdditionalExtensions

Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) AiaOcspServers

Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) CaOptions

Describes values that are relevant in a CA certificate. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) Elem

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) ElementType

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) KeyUsage

Indicates the intended use for keys that correspond to a certificate. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) NameConstraints

Describes the X.509 name constraints extension. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) PolicyIds

Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4. Structure is documented below.

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) ToCaPoolIssuancePolicyBaselineValuesPtrOutput

func (o CaPoolIssuancePolicyBaselineValuesPtrOutput) ToCaPoolIssuancePolicyBaselineValuesPtrOutput() CaPoolIssuancePolicyBaselineValuesPtrOutput

func (CaPoolIssuancePolicyBaselineValuesPtrOutput) ToCaPoolIssuancePolicyBaselineValuesPtrOutputWithContext

func (o CaPoolIssuancePolicyBaselineValuesPtrOutput) ToCaPoolIssuancePolicyBaselineValuesPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyBaselineValuesPtrOutput

type CaPoolIssuancePolicyIdentityConstraints

type CaPoolIssuancePolicyIdentityConstraints struct {
	// If this is set, the SubjectAltNames extension may be copied from a certificate request into the signed certificate.
	// Otherwise, the requested SubjectAltNames will be discarded.
	AllowSubjectAltNamesPassthrough bool `pulumi:"allowSubjectAltNamesPassthrough"`
	// If this is set, the Subject field may be copied from a certificate request into the signed certificate.
	// Otherwise, the requested Subject will be discarded.
	AllowSubjectPassthrough bool `pulumi:"allowSubjectPassthrough"`
	// A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a
	// certificate is signed. To see the full allowed syntax and some examples,
	// see https://cloud.google.com/certificate-authority-service/docs/cel-guide
	// Structure is documented below.
	CelExpression *CaPoolIssuancePolicyIdentityConstraintsCelExpression `pulumi:"celExpression"`
}

type CaPoolIssuancePolicyIdentityConstraintsArgs

type CaPoolIssuancePolicyIdentityConstraintsArgs struct {
	// If this is set, the SubjectAltNames extension may be copied from a certificate request into the signed certificate.
	// Otherwise, the requested SubjectAltNames will be discarded.
	AllowSubjectAltNamesPassthrough pulumi.BoolInput `pulumi:"allowSubjectAltNamesPassthrough"`
	// If this is set, the Subject field may be copied from a certificate request into the signed certificate.
	// Otherwise, the requested Subject will be discarded.
	AllowSubjectPassthrough pulumi.BoolInput `pulumi:"allowSubjectPassthrough"`
	// A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a
	// certificate is signed. To see the full allowed syntax and some examples,
	// see https://cloud.google.com/certificate-authority-service/docs/cel-guide
	// Structure is documented below.
	CelExpression CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrInput `pulumi:"celExpression"`
}

func (CaPoolIssuancePolicyIdentityConstraintsArgs) ElementType

func (CaPoolIssuancePolicyIdentityConstraintsArgs) ToCaPoolIssuancePolicyIdentityConstraintsOutput

func (i CaPoolIssuancePolicyIdentityConstraintsArgs) ToCaPoolIssuancePolicyIdentityConstraintsOutput() CaPoolIssuancePolicyIdentityConstraintsOutput

func (CaPoolIssuancePolicyIdentityConstraintsArgs) ToCaPoolIssuancePolicyIdentityConstraintsOutputWithContext

func (i CaPoolIssuancePolicyIdentityConstraintsArgs) ToCaPoolIssuancePolicyIdentityConstraintsOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsOutput

func (CaPoolIssuancePolicyIdentityConstraintsArgs) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutput

func (i CaPoolIssuancePolicyIdentityConstraintsArgs) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutput() CaPoolIssuancePolicyIdentityConstraintsPtrOutput

func (CaPoolIssuancePolicyIdentityConstraintsArgs) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutputWithContext

func (i CaPoolIssuancePolicyIdentityConstraintsArgs) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsPtrOutput

type CaPoolIssuancePolicyIdentityConstraintsCelExpression

type CaPoolIssuancePolicyIdentityConstraintsCelExpression struct {
	// Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location *string `pulumi:"location"`
	// Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title *string `pulumi:"title"`
}

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs struct {
	// Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringInput `pulumi:"expression"`
	// String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs) ElementType

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionOutputWithContext

func (i CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput

func (i CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput() CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutputWithContext

func (i CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionInput

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput() CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput
	ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionOutputWithContext(context.Context) CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput
}

CaPoolIssuancePolicyIdentityConstraintsCelExpressionInput is an input type that accepts CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs and CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyIdentityConstraintsCelExpressionInput` via:

CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs{...}

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) Description

Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) ElementType

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) Location

String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) Title

Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionOutputWithContext

func (o CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutputWithContext

func (o CaPoolIssuancePolicyIdentityConstraintsCelExpressionOutput) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrInput

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput() CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput
	ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutputWithContext(context.Context) CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput
}

CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrInput is an input type that accepts CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs, CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtr and CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrInput` via:

        CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs{...}

or:

        nil

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput

type CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput) Description

Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput) Elem

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput) ElementType

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput) Location

String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput) Title

Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput

func (CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutputWithContext

func (o CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput) ToCaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsCelExpressionPtrOutput

type CaPoolIssuancePolicyIdentityConstraintsInput

type CaPoolIssuancePolicyIdentityConstraintsInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyIdentityConstraintsOutput() CaPoolIssuancePolicyIdentityConstraintsOutput
	ToCaPoolIssuancePolicyIdentityConstraintsOutputWithContext(context.Context) CaPoolIssuancePolicyIdentityConstraintsOutput
}

CaPoolIssuancePolicyIdentityConstraintsInput is an input type that accepts CaPoolIssuancePolicyIdentityConstraintsArgs and CaPoolIssuancePolicyIdentityConstraintsOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyIdentityConstraintsInput` via:

CaPoolIssuancePolicyIdentityConstraintsArgs{...}

type CaPoolIssuancePolicyIdentityConstraintsOutput

type CaPoolIssuancePolicyIdentityConstraintsOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyIdentityConstraintsOutput) AllowSubjectAltNamesPassthrough

func (o CaPoolIssuancePolicyIdentityConstraintsOutput) AllowSubjectAltNamesPassthrough() pulumi.BoolOutput

If this is set, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.

func (CaPoolIssuancePolicyIdentityConstraintsOutput) AllowSubjectPassthrough

If this is set, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.

func (CaPoolIssuancePolicyIdentityConstraintsOutput) CelExpression

A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/cel-guide Structure is documented below.

func (CaPoolIssuancePolicyIdentityConstraintsOutput) ElementType

func (CaPoolIssuancePolicyIdentityConstraintsOutput) ToCaPoolIssuancePolicyIdentityConstraintsOutput

func (o CaPoolIssuancePolicyIdentityConstraintsOutput) ToCaPoolIssuancePolicyIdentityConstraintsOutput() CaPoolIssuancePolicyIdentityConstraintsOutput

func (CaPoolIssuancePolicyIdentityConstraintsOutput) ToCaPoolIssuancePolicyIdentityConstraintsOutputWithContext

func (o CaPoolIssuancePolicyIdentityConstraintsOutput) ToCaPoolIssuancePolicyIdentityConstraintsOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsOutput

func (CaPoolIssuancePolicyIdentityConstraintsOutput) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutput

func (o CaPoolIssuancePolicyIdentityConstraintsOutput) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutput() CaPoolIssuancePolicyIdentityConstraintsPtrOutput

func (CaPoolIssuancePolicyIdentityConstraintsOutput) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutputWithContext

func (o CaPoolIssuancePolicyIdentityConstraintsOutput) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsPtrOutput

type CaPoolIssuancePolicyIdentityConstraintsPtrInput

type CaPoolIssuancePolicyIdentityConstraintsPtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyIdentityConstraintsPtrOutput() CaPoolIssuancePolicyIdentityConstraintsPtrOutput
	ToCaPoolIssuancePolicyIdentityConstraintsPtrOutputWithContext(context.Context) CaPoolIssuancePolicyIdentityConstraintsPtrOutput
}

CaPoolIssuancePolicyIdentityConstraintsPtrInput is an input type that accepts CaPoolIssuancePolicyIdentityConstraintsArgs, CaPoolIssuancePolicyIdentityConstraintsPtr and CaPoolIssuancePolicyIdentityConstraintsPtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyIdentityConstraintsPtrInput` via:

        CaPoolIssuancePolicyIdentityConstraintsArgs{...}

or:

        nil

type CaPoolIssuancePolicyIdentityConstraintsPtrOutput

type CaPoolIssuancePolicyIdentityConstraintsPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyIdentityConstraintsPtrOutput) AllowSubjectAltNamesPassthrough

func (o CaPoolIssuancePolicyIdentityConstraintsPtrOutput) AllowSubjectAltNamesPassthrough() pulumi.BoolPtrOutput

If this is set, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.

func (CaPoolIssuancePolicyIdentityConstraintsPtrOutput) AllowSubjectPassthrough

If this is set, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.

func (CaPoolIssuancePolicyIdentityConstraintsPtrOutput) CelExpression

A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/cel-guide Structure is documented below.

func (CaPoolIssuancePolicyIdentityConstraintsPtrOutput) Elem

func (CaPoolIssuancePolicyIdentityConstraintsPtrOutput) ElementType

func (CaPoolIssuancePolicyIdentityConstraintsPtrOutput) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutput

func (o CaPoolIssuancePolicyIdentityConstraintsPtrOutput) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutput() CaPoolIssuancePolicyIdentityConstraintsPtrOutput

func (CaPoolIssuancePolicyIdentityConstraintsPtrOutput) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutputWithContext

func (o CaPoolIssuancePolicyIdentityConstraintsPtrOutput) ToCaPoolIssuancePolicyIdentityConstraintsPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyIdentityConstraintsPtrOutput

type CaPoolIssuancePolicyInput

type CaPoolIssuancePolicyInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyOutput() CaPoolIssuancePolicyOutput
	ToCaPoolIssuancePolicyOutputWithContext(context.Context) CaPoolIssuancePolicyOutput
}

CaPoolIssuancePolicyInput is an input type that accepts CaPoolIssuancePolicyArgs and CaPoolIssuancePolicyOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyInput` via:

CaPoolIssuancePolicyArgs{...}

type CaPoolIssuancePolicyOutput

type CaPoolIssuancePolicyOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyOutput) AllowedIssuanceModes

IssuanceModes specifies the allowed ways in which Certificates may be requested from this CaPool. Structure is documented below.

func (CaPoolIssuancePolicyOutput) AllowedKeyTypes

If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here. Otherwise, any key may be used. Structure is documented below.

func (CaPoolIssuancePolicyOutput) BaselineValues

A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate request uses a CertificateTemplate that defines conflicting predefinedValues for the same properties, the certificate issuance request will fail. Structure is documented below.

func (CaPoolIssuancePolicyOutput) ElementType

func (CaPoolIssuancePolicyOutput) ElementType() reflect.Type

func (CaPoolIssuancePolicyOutput) IdentityConstraints

Describes constraints on identities that may appear in Certificates issued through this CaPool. If this is omitted, then this CaPool will not add restrictions on a certificate's identity. Structure is documented below.

func (CaPoolIssuancePolicyOutput) MaximumLifetime

The maximum lifetime allowed for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate's requested maximumLifetime, the effective lifetime will be explicitly truncated to match it.

func (CaPoolIssuancePolicyOutput) ToCaPoolIssuancePolicyOutput

func (o CaPoolIssuancePolicyOutput) ToCaPoolIssuancePolicyOutput() CaPoolIssuancePolicyOutput

func (CaPoolIssuancePolicyOutput) ToCaPoolIssuancePolicyOutputWithContext

func (o CaPoolIssuancePolicyOutput) ToCaPoolIssuancePolicyOutputWithContext(ctx context.Context) CaPoolIssuancePolicyOutput

func (CaPoolIssuancePolicyOutput) ToCaPoolIssuancePolicyPtrOutput

func (o CaPoolIssuancePolicyOutput) ToCaPoolIssuancePolicyPtrOutput() CaPoolIssuancePolicyPtrOutput

func (CaPoolIssuancePolicyOutput) ToCaPoolIssuancePolicyPtrOutputWithContext

func (o CaPoolIssuancePolicyOutput) ToCaPoolIssuancePolicyPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyPtrOutput

type CaPoolIssuancePolicyPtrInput

type CaPoolIssuancePolicyPtrInput interface {
	pulumi.Input

	ToCaPoolIssuancePolicyPtrOutput() CaPoolIssuancePolicyPtrOutput
	ToCaPoolIssuancePolicyPtrOutputWithContext(context.Context) CaPoolIssuancePolicyPtrOutput
}

CaPoolIssuancePolicyPtrInput is an input type that accepts CaPoolIssuancePolicyArgs, CaPoolIssuancePolicyPtr and CaPoolIssuancePolicyPtrOutput values. You can construct a concrete instance of `CaPoolIssuancePolicyPtrInput` via:

        CaPoolIssuancePolicyArgs{...}

or:

        nil

type CaPoolIssuancePolicyPtrOutput

type CaPoolIssuancePolicyPtrOutput struct{ *pulumi.OutputState }

func (CaPoolIssuancePolicyPtrOutput) AllowedIssuanceModes

IssuanceModes specifies the allowed ways in which Certificates may be requested from this CaPool. Structure is documented below.

func (CaPoolIssuancePolicyPtrOutput) AllowedKeyTypes

If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here. Otherwise, any key may be used. Structure is documented below.

func (CaPoolIssuancePolicyPtrOutput) BaselineValues

A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate request uses a CertificateTemplate that defines conflicting predefinedValues for the same properties, the certificate issuance request will fail. Structure is documented below.

func (CaPoolIssuancePolicyPtrOutput) Elem

func (CaPoolIssuancePolicyPtrOutput) ElementType

func (CaPoolIssuancePolicyPtrOutput) IdentityConstraints

Describes constraints on identities that may appear in Certificates issued through this CaPool. If this is omitted, then this CaPool will not add restrictions on a certificate's identity. Structure is documented below.

func (CaPoolIssuancePolicyPtrOutput) MaximumLifetime

The maximum lifetime allowed for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate's requested maximumLifetime, the effective lifetime will be explicitly truncated to match it.

func (CaPoolIssuancePolicyPtrOutput) ToCaPoolIssuancePolicyPtrOutput

func (o CaPoolIssuancePolicyPtrOutput) ToCaPoolIssuancePolicyPtrOutput() CaPoolIssuancePolicyPtrOutput

func (CaPoolIssuancePolicyPtrOutput) ToCaPoolIssuancePolicyPtrOutputWithContext

func (o CaPoolIssuancePolicyPtrOutput) ToCaPoolIssuancePolicyPtrOutputWithContext(ctx context.Context) CaPoolIssuancePolicyPtrOutput

type CaPoolMap

type CaPoolMap map[string]CaPoolInput

func (CaPoolMap) ElementType

func (CaPoolMap) ElementType() reflect.Type

func (CaPoolMap) ToCaPoolMapOutput

func (i CaPoolMap) ToCaPoolMapOutput() CaPoolMapOutput

func (CaPoolMap) ToCaPoolMapOutputWithContext

func (i CaPoolMap) ToCaPoolMapOutputWithContext(ctx context.Context) CaPoolMapOutput

type CaPoolMapInput

type CaPoolMapInput interface {
	pulumi.Input

	ToCaPoolMapOutput() CaPoolMapOutput
	ToCaPoolMapOutputWithContext(context.Context) CaPoolMapOutput
}

CaPoolMapInput is an input type that accepts CaPoolMap and CaPoolMapOutput values. You can construct a concrete instance of `CaPoolMapInput` via:

CaPoolMap{ "key": CaPoolArgs{...} }

type CaPoolMapOutput

type CaPoolMapOutput struct{ *pulumi.OutputState }

func (CaPoolMapOutput) ElementType

func (CaPoolMapOutput) ElementType() reflect.Type

func (CaPoolMapOutput) MapIndex

func (CaPoolMapOutput) ToCaPoolMapOutput

func (o CaPoolMapOutput) ToCaPoolMapOutput() CaPoolMapOutput

func (CaPoolMapOutput) ToCaPoolMapOutputWithContext

func (o CaPoolMapOutput) ToCaPoolMapOutputWithContext(ctx context.Context) CaPoolMapOutput

type CaPoolOutput

type CaPoolOutput struct{ *pulumi.OutputState }

func (CaPoolOutput) EffectiveLabels

func (o CaPoolOutput) EffectiveLabels() pulumi.StringMapOutput

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

func (CaPoolOutput) ElementType

func (CaPoolOutput) ElementType() reflect.Type

func (CaPoolOutput) IssuancePolicy

func (o CaPoolOutput) IssuancePolicy() CaPoolIssuancePolicyPtrOutput

The IssuancePolicy to control how Certificates will be issued from this CaPool. Structure is documented below.

func (CaPoolOutput) Labels

func (o CaPoolOutput) Labels() pulumi.StringMapOutput

Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.

**Note**: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field `effectiveLabels` for all of the labels present on the resource.

func (CaPoolOutput) Location

func (o CaPoolOutput) Location() pulumi.StringOutput

Location of the CaPool. A full list of valid locations can be found by running `gcloud privateca locations list`.

***

func (CaPoolOutput) Name

func (o CaPoolOutput) Name() pulumi.StringOutput

The name for this CaPool.

func (CaPoolOutput) Project

func (o CaPoolOutput) Project() pulumi.StringOutput

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

func (CaPoolOutput) PublishingOptions

func (o CaPoolOutput) PublishingOptions() CaPoolPublishingOptionsPtrOutput

The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool. Structure is documented below.

func (CaPoolOutput) PulumiLabels

func (o CaPoolOutput) PulumiLabels() pulumi.StringMapOutput

The combination of labels configured directly on the resource and default labels configured on the provider.

func (CaPoolOutput) Tier

func (o CaPoolOutput) Tier() pulumi.StringOutput

The Tier of this CaPool. Possible values are: `ENTERPRISE`, `DEVOPS`.

func (CaPoolOutput) ToCaPoolOutput

func (o CaPoolOutput) ToCaPoolOutput() CaPoolOutput

func (CaPoolOutput) ToCaPoolOutputWithContext

func (o CaPoolOutput) ToCaPoolOutputWithContext(ctx context.Context) CaPoolOutput

type CaPoolPublishingOptions

type CaPoolPublishingOptions struct {
	// Specifies the encoding format of each CertificateAuthority's CA
	// certificate and CRLs. If this is omitted, CA certificates and CRLs
	// will be published in PEM.
	// Possible values are: `PEM`, `DER`.
	EncodingFormat *string `pulumi:"encodingFormat"`
	// When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"
	// X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding
	// X.509 extension will not be written in issued certificates.
	PublishCaCert bool `pulumi:"publishCaCert"`
	// When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension
	// in all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not
	// be written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are
	// also rebuilt shortly after a certificate is revoked.
	PublishCrl bool `pulumi:"publishCrl"`
}

type CaPoolPublishingOptionsArgs

type CaPoolPublishingOptionsArgs struct {
	// Specifies the encoding format of each CertificateAuthority's CA
	// certificate and CRLs. If this is omitted, CA certificates and CRLs
	// will be published in PEM.
	// Possible values are: `PEM`, `DER`.
	EncodingFormat pulumi.StringPtrInput `pulumi:"encodingFormat"`
	// When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"
	// X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding
	// X.509 extension will not be written in issued certificates.
	PublishCaCert pulumi.BoolInput `pulumi:"publishCaCert"`
	// When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension
	// in all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not
	// be written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are
	// also rebuilt shortly after a certificate is revoked.
	PublishCrl pulumi.BoolInput `pulumi:"publishCrl"`
}

func (CaPoolPublishingOptionsArgs) ElementType

func (CaPoolPublishingOptionsArgs) ToCaPoolPublishingOptionsOutput

func (i CaPoolPublishingOptionsArgs) ToCaPoolPublishingOptionsOutput() CaPoolPublishingOptionsOutput

func (CaPoolPublishingOptionsArgs) ToCaPoolPublishingOptionsOutputWithContext

func (i CaPoolPublishingOptionsArgs) ToCaPoolPublishingOptionsOutputWithContext(ctx context.Context) CaPoolPublishingOptionsOutput

func (CaPoolPublishingOptionsArgs) ToCaPoolPublishingOptionsPtrOutput

func (i CaPoolPublishingOptionsArgs) ToCaPoolPublishingOptionsPtrOutput() CaPoolPublishingOptionsPtrOutput

func (CaPoolPublishingOptionsArgs) ToCaPoolPublishingOptionsPtrOutputWithContext

func (i CaPoolPublishingOptionsArgs) ToCaPoolPublishingOptionsPtrOutputWithContext(ctx context.Context) CaPoolPublishingOptionsPtrOutput

type CaPoolPublishingOptionsInput

type CaPoolPublishingOptionsInput interface {
	pulumi.Input

	ToCaPoolPublishingOptionsOutput() CaPoolPublishingOptionsOutput
	ToCaPoolPublishingOptionsOutputWithContext(context.Context) CaPoolPublishingOptionsOutput
}

CaPoolPublishingOptionsInput is an input type that accepts CaPoolPublishingOptionsArgs and CaPoolPublishingOptionsOutput values. You can construct a concrete instance of `CaPoolPublishingOptionsInput` via:

CaPoolPublishingOptionsArgs{...}

type CaPoolPublishingOptionsOutput

type CaPoolPublishingOptionsOutput struct{ *pulumi.OutputState }

func (CaPoolPublishingOptionsOutput) ElementType

func (CaPoolPublishingOptionsOutput) EncodingFormat

Specifies the encoding format of each CertificateAuthority's CA certificate and CRLs. If this is omitted, CA certificates and CRLs will be published in PEM. Possible values are: `PEM`, `DER`.

func (CaPoolPublishingOptionsOutput) PublishCaCert

When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access" X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding X.509 extension will not be written in issued certificates.

func (CaPoolPublishingOptionsOutput) PublishCrl

When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension in all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not be written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are also rebuilt shortly after a certificate is revoked.

func (CaPoolPublishingOptionsOutput) ToCaPoolPublishingOptionsOutput

func (o CaPoolPublishingOptionsOutput) ToCaPoolPublishingOptionsOutput() CaPoolPublishingOptionsOutput

func (CaPoolPublishingOptionsOutput) ToCaPoolPublishingOptionsOutputWithContext

func (o CaPoolPublishingOptionsOutput) ToCaPoolPublishingOptionsOutputWithContext(ctx context.Context) CaPoolPublishingOptionsOutput

func (CaPoolPublishingOptionsOutput) ToCaPoolPublishingOptionsPtrOutput

func (o CaPoolPublishingOptionsOutput) ToCaPoolPublishingOptionsPtrOutput() CaPoolPublishingOptionsPtrOutput

func (CaPoolPublishingOptionsOutput) ToCaPoolPublishingOptionsPtrOutputWithContext

func (o CaPoolPublishingOptionsOutput) ToCaPoolPublishingOptionsPtrOutputWithContext(ctx context.Context) CaPoolPublishingOptionsPtrOutput

type CaPoolPublishingOptionsPtrInput

type CaPoolPublishingOptionsPtrInput interface {
	pulumi.Input

	ToCaPoolPublishingOptionsPtrOutput() CaPoolPublishingOptionsPtrOutput
	ToCaPoolPublishingOptionsPtrOutputWithContext(context.Context) CaPoolPublishingOptionsPtrOutput
}

CaPoolPublishingOptionsPtrInput is an input type that accepts CaPoolPublishingOptionsArgs, CaPoolPublishingOptionsPtr and CaPoolPublishingOptionsPtrOutput values. You can construct a concrete instance of `CaPoolPublishingOptionsPtrInput` via:

        CaPoolPublishingOptionsArgs{...}

or:

        nil

type CaPoolPublishingOptionsPtrOutput

type CaPoolPublishingOptionsPtrOutput struct{ *pulumi.OutputState }

func (CaPoolPublishingOptionsPtrOutput) Elem

func (CaPoolPublishingOptionsPtrOutput) ElementType

func (CaPoolPublishingOptionsPtrOutput) EncodingFormat

Specifies the encoding format of each CertificateAuthority's CA certificate and CRLs. If this is omitted, CA certificates and CRLs will be published in PEM. Possible values are: `PEM`, `DER`.

func (CaPoolPublishingOptionsPtrOutput) PublishCaCert

When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access" X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding X.509 extension will not be written in issued certificates.

func (CaPoolPublishingOptionsPtrOutput) PublishCrl

When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension in all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not be written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are also rebuilt shortly after a certificate is revoked.

func (CaPoolPublishingOptionsPtrOutput) ToCaPoolPublishingOptionsPtrOutput

func (o CaPoolPublishingOptionsPtrOutput) ToCaPoolPublishingOptionsPtrOutput() CaPoolPublishingOptionsPtrOutput

func (CaPoolPublishingOptionsPtrOutput) ToCaPoolPublishingOptionsPtrOutputWithContext

func (o CaPoolPublishingOptionsPtrOutput) ToCaPoolPublishingOptionsPtrOutputWithContext(ctx context.Context) CaPoolPublishingOptionsPtrOutput

type CaPoolState

type CaPoolState struct {
	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.StringMapInput
	// The IssuancePolicy to control how Certificates will be issued from this CaPool.
	// Structure is documented below.
	IssuancePolicy CaPoolIssuancePolicyPtrInput
	// Labels with user-defined metadata.
	// An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
	// "1.3kg", "count": "3" }.
	//
	// **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
	// Please refer to the field `effectiveLabels` for all of the labels present on the resource.
	Labels pulumi.StringMapInput
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	//
	// ***
	Location pulumi.StringPtrInput
	// The name for this CaPool.
	Name pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
	// Structure is documented below.
	PublishingOptions CaPoolPublishingOptionsPtrInput
	// The combination of labels configured directly on the resource
	// and default labels configured on the provider.
	PulumiLabels pulumi.StringMapInput
	// The Tier of this CaPool.
	// Possible values are: `ENTERPRISE`, `DEVOPS`.
	Tier pulumi.StringPtrInput
}

func (CaPoolState) ElementType

func (CaPoolState) ElementType() reflect.Type

type Certificate

type Certificate struct {
	pulumi.CustomResourceState

	// The Certificate Authority ID that should issue the certificate. For example, to issue a Certificate from
	// a Certificate Authority with resource name `projects/my-project/locations/us-central1/caPools/my-pool/certificateAuthorities/my-ca`,
	// argument `pool` should be set to `projects/my-project/locations/us-central1/caPools/my-pool`, argument `certificateAuthority`
	// should be set to `my-ca`.
	CertificateAuthority pulumi.StringPtrOutput `pulumi:"certificateAuthority"`
	// Output only. Details regarding the revocation of this Certificate. This Certificate is considered revoked if and only if this field is present.
	// Structure is documented below.
	CertificateDescriptions CertificateCertificateDescriptionArrayOutput `pulumi:"certificateDescriptions"`
	// The resource name for a CertificateTemplate used to issue this certificate,
	// in the format `projects/*/locations/*/certificateTemplates/*`. If this is specified,
	// the caller must have the necessary permission to use this template. If this is
	// omitted, no template will be used. This template must be in the same location
	// as the Certificate.
	CertificateTemplate pulumi.StringPtrOutput `pulumi:"certificateTemplate"`
	// The config used to create a self-signed X.509 certificate or CSR.
	// Structure is documented below.
	Config CertificateConfigPtrOutput `pulumi:"config"`
	// The time that this resource was created on the server.
	// This is in RFC3339 text format.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.StringMapOutput `pulumi:"effectiveLabels"`
	// The resource name of the issuing CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
	IssuerCertificateAuthority pulumi.StringOutput `pulumi:"issuerCertificateAuthority"`
	// Labels with user-defined metadata to apply to this resource.
	//
	// **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
	// Please refer to the field `effectiveLabels` for all of the labels present on the resource.
	Labels pulumi.StringMapOutput `pulumi:"labels"`
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
	// "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
	// fractional digits, terminated by 's'. Example: "3.5s".
	Lifetime pulumi.StringPtrOutput `pulumi:"lifetime"`
	// Location of the Certificate. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	//
	// ***
	Location pulumi.StringOutput `pulumi:"location"`
	// The name for this Certificate.
	Name pulumi.StringOutput `pulumi:"name"`
	// Output only. The pem-encoded, signed X.509 certificate.
	PemCertificate pulumi.StringOutput `pulumi:"pemCertificate"`
	// The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
	PemCertificateChains pulumi.StringArrayOutput `pulumi:"pemCertificateChains"`
	// Immutable. A pem-encoded X.509 certificate signing request (CSR).
	PemCsr pulumi.StringPtrOutput `pulumi:"pemCsr"`
	// The name of the CaPool this Certificate belongs to.
	Pool pulumi.StringOutput `pulumi:"pool"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// The combination of labels configured directly on the resource
	// and default labels configured on the provider.
	PulumiLabels pulumi.StringMapOutput `pulumi:"pulumiLabels"`
	// Output only. Details regarding the revocation of this Certificate. This Certificate is
	// considered revoked if and only if this field is present.
	// Structure is documented below.
	RevocationDetails CertificateRevocationDetailArrayOutput `pulumi:"revocationDetails"`
	// Output only. The time at which this CertificateAuthority was updated.
	// This is in RFC3339 text format.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

A Certificate corresponds to a signed X.509 certificate issued by a Certificate.

> **Note:** The Certificate Authority that is referenced by this resource **must** be `tier = "ENTERPRISE"`

## Example Usage

### Privateca Certificate Generated Key

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-std/sdk/go/std"
"github.com/pulumi/pulumi-tls/sdk/v4/go/tls"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPool(ctx, "default", &certificateauthority.CaPoolArgs{
			Location: pulumi.String("us-central1"),
			Name:     pulumi.String("default"),
			Tier:     pulumi.String("ENTERPRISE"),
		})
		if err != nil {
			return err
		}
		defaultAuthority, err := certificateauthority.NewAuthority(ctx, "default", &certificateauthority.AuthorityArgs{
			Location:               pulumi.String("us-central1"),
			Pool:                   _default.Name,
			CertificateAuthorityId: pulumi.String("my-authority"),
			Config: &certificateauthority.AuthorityConfigArgs{
				SubjectConfig: &certificateauthority.AuthorityConfigSubjectConfigArgs{
					Subject: &certificateauthority.AuthorityConfigSubjectConfigSubjectArgs{
						Organization: pulumi.String("HashiCorp"),
						CommonName:   pulumi.String("my-certificate-authority"),
					},
					SubjectAltName: &certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs{
						DnsNames: pulumi.StringArray{
							pulumi.String("hashicorp.com"),
						},
					},
				},
				X509Config: &certificateauthority.AuthorityConfigX509ConfigArgs{
					CaOptions: &certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs{
						IsCa: pulumi.Bool(true),
					},
					KeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							CertSign: pulumi.Bool(true),
							CrlSign:  pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth: pulumi.Bool(true),
						},
					},
				},
			},
			KeySpec: &certificateauthority.AuthorityKeySpecArgs{
				Algorithm: pulumi.String("RSA_PKCS1_4096_SHA256"),
			},
			DeletionProtection:                 pulumi.Bool(false),
			SkipGracePeriod:                    pulumi.Bool(true),
			IgnoreActiveCertificatesOnDeletion: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		certKey, err := tls.NewPrivateKey(ctx, "cert_key", &tls.PrivateKeyArgs{
			Algorithm: pulumi.String("RSA"),
		})
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificate(ctx, "default", &certificateauthority.CertificateArgs{
			Location:             pulumi.String("us-central1"),
			Pool:                 _default.Name,
			CertificateAuthority: defaultAuthority.CertificateAuthorityId,
			Lifetime:             pulumi.String("86000s"),
			Name:                 pulumi.String("cert-1"),
			Config: &certificateauthority.CertificateConfigArgs{
				SubjectConfig: &certificateauthority.CertificateConfigSubjectConfigArgs{
					Subject: &certificateauthority.CertificateConfigSubjectConfigSubjectArgs{
						CommonName:         pulumi.String("san1.example.com"),
						CountryCode:        pulumi.String("us"),
						Organization:       pulumi.String("google"),
						OrganizationalUnit: pulumi.String("enterprise"),
						Locality:           pulumi.String("mountain view"),
						Province:           pulumi.String("california"),
						StreetAddress:      pulumi.String("1600 amphitheatre parkway"),
					},
					SubjectAltName: &certificateauthority.CertificateConfigSubjectConfigSubjectAltNameArgs{
						EmailAddresses: pulumi.StringArray{
							pulumi.String("email@example.com"),
						},
						IpAddresses: pulumi.StringArray{
							pulumi.String("127.0.0.1"),
						},
						Uris: pulumi.StringArray{
							pulumi.String("http://www.ietf.org/rfc/rfc3986.txt"),
						},
					},
				},
				X509Config: &certificateauthority.CertificateConfigX509ConfigArgs{
					CaOptions: &certificateauthority.CertificateConfigX509ConfigCaOptionsArgs{
						IsCa: pulumi.Bool(true),
					},
					KeyUsage: &certificateauthority.CertificateConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							CertSign: pulumi.Bool(true),
							CrlSign:  pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth: pulumi.Bool(false),
						},
					},
					NameConstraints: &certificateauthority.CertificateConfigX509ConfigNameConstraintsArgs{
						Critical: pulumi.Bool(true),
						PermittedDnsNames: pulumi.StringArray{
							pulumi.String("*.example.com"),
						},
						ExcludedDnsNames: pulumi.StringArray{
							pulumi.String("*.deny.example.com"),
						},
						PermittedIpRanges: pulumi.StringArray{
							pulumi.String("10.0.0.0/8"),
						},
						ExcludedIpRanges: pulumi.StringArray{
							pulumi.String("10.1.1.0/24"),
						},
						PermittedEmailAddresses: pulumi.StringArray{
							pulumi.String(".example.com"),
						},
						ExcludedEmailAddresses: pulumi.StringArray{
							pulumi.String(".deny.example.com"),
						},
						PermittedUris: pulumi.StringArray{
							pulumi.String(".example.com"),
						},
						ExcludedUris: pulumi.StringArray{
							pulumi.String(".deny.example.com"),
						},
					},
				},
				PublicKey: &certificateauthority.CertificateConfigPublicKeyArgs{
					Format: pulumi.String("PEM"),
					Key: std.Base64encodeOutput(ctx, std.Base64encodeOutputArgs{
						Input: certKey.PublicKeyPem,
					}, nil).ApplyT(func(invoke std.Base64encodeResult) (*string, error) {
						return invoke.Result, nil
					}).(pulumi.StringPtrOutput),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Privateca Certificate With Template

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-std/sdk/go/std"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPool(ctx, "default", &certificateauthority.CaPoolArgs{
			Location: pulumi.String("us-central1"),
			Name:     pulumi.String("my-pool"),
			Tier:     pulumi.String("ENTERPRISE"),
		})
		if err != nil {
			return err
		}
		defaultCertificateTemplate, err := certificateauthority.NewCertificateTemplate(ctx, "default", &certificateauthority.CertificateTemplateArgs{
			Location:    pulumi.String("us-central1"),
			Name:        pulumi.String("my-certificate-template"),
			Description: pulumi.String("An updated sample certificate template"),
			IdentityConstraints: &certificateauthority.CertificateTemplateIdentityConstraintsArgs{
				AllowSubjectAltNamesPassthrough: pulumi.Bool(true),
				AllowSubjectPassthrough:         pulumi.Bool(true),
				CelExpression: &certificateauthority.CertificateTemplateIdentityConstraintsCelExpressionArgs{
					Description: pulumi.String("Always true"),
					Expression:  pulumi.String("true"),
					Location:    pulumi.String("any.file.anywhere"),
					Title:       pulumi.String("Sample expression"),
				},
			},
			PassthroughExtensions: &certificateauthority.CertificateTemplatePassthroughExtensionsArgs{
				AdditionalExtensions: certificateauthority.CertificateTemplatePassthroughExtensionsAdditionalExtensionArray{
					&certificateauthority.CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs{
						ObjectIdPaths: pulumi.IntArray{
							pulumi.Int(1),
							pulumi.Int(6),
						},
					},
				},
				KnownExtensions: pulumi.StringArray{
					pulumi.String("EXTENDED_KEY_USAGE"),
				},
			},
			PredefinedValues: &certificateauthority.CertificateTemplatePredefinedValuesArgs{
				AdditionalExtensions: certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionArray{
					&certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionArgs{
						ObjectId: &certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs{
							ObjectIdPaths: pulumi.IntArray{
								pulumi.Int(1),
								pulumi.Int(6),
							},
						},
						Value:    pulumi.String("c3RyaW5nCg=="),
						Critical: pulumi.Bool(true),
					},
				},
				AiaOcspServers: pulumi.StringArray{
					pulumi.String("string"),
				},
				CaOptions: &certificateauthority.CertificateTemplatePredefinedValuesCaOptionsArgs{
					IsCa:                pulumi.Bool(false),
					MaxIssuerPathLength: pulumi.Int(6),
				},
				KeyUsage: &certificateauthority.CertificateTemplatePredefinedValuesKeyUsageArgs{
					BaseKeyUsage: &certificateauthority.CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs{
						CertSign:          pulumi.Bool(false),
						ContentCommitment: pulumi.Bool(true),
						CrlSign:           pulumi.Bool(false),
						DataEncipherment:  pulumi.Bool(true),
						DecipherOnly:      pulumi.Bool(true),
						DigitalSignature:  pulumi.Bool(true),
						EncipherOnly:      pulumi.Bool(true),
						KeyAgreement:      pulumi.Bool(true),
						KeyEncipherment:   pulumi.Bool(true),
					},
					ExtendedKeyUsage: &certificateauthority.CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs{
						ClientAuth:      pulumi.Bool(true),
						CodeSigning:     pulumi.Bool(true),
						EmailProtection: pulumi.Bool(true),
						OcspSigning:     pulumi.Bool(true),
						ServerAuth:      pulumi.Bool(true),
						TimeStamping:    pulumi.Bool(true),
					},
					UnknownExtendedKeyUsages: certificateauthority.CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray{
						&certificateauthority.CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs{
							ObjectIdPaths: pulumi.IntArray{
								pulumi.Int(1),
								pulumi.Int(6),
							},
						},
					},
				},
				PolicyIds: certificateauthority.CertificateTemplatePredefinedValuesPolicyIdArray{
					&certificateauthority.CertificateTemplatePredefinedValuesPolicyIdArgs{
						ObjectIdPaths: pulumi.IntArray{
							pulumi.Int(1),
							pulumi.Int(6),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		defaultAuthority, err := certificateauthority.NewAuthority(ctx, "default", &certificateauthority.AuthorityArgs{
			Location:               pulumi.String("us-central1"),
			Pool:                   _default.Name,
			CertificateAuthorityId: pulumi.String("my-authority"),
			Config: &certificateauthority.AuthorityConfigArgs{
				SubjectConfig: &certificateauthority.AuthorityConfigSubjectConfigArgs{
					Subject: &certificateauthority.AuthorityConfigSubjectConfigSubjectArgs{
						Organization: pulumi.String("HashiCorp"),
						CommonName:   pulumi.String("my-certificate-authority"),
					},
					SubjectAltName: &certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs{
						DnsNames: pulumi.StringArray{
							pulumi.String("hashicorp.com"),
						},
					},
				},
				X509Config: &certificateauthority.AuthorityConfigX509ConfigArgs{
					CaOptions: &certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs{
						IsCa: pulumi.Bool(true),
					},
					KeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							CertSign: pulumi.Bool(true),
							CrlSign:  pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth: pulumi.Bool(false),
						},
					},
				},
			},
			KeySpec: &certificateauthority.AuthorityKeySpecArgs{
				Algorithm: pulumi.String("RSA_PKCS1_4096_SHA256"),
			},
			DeletionProtection:                 pulumi.Bool(false),
			SkipGracePeriod:                    pulumi.Bool(true),
			IgnoreActiveCertificatesOnDeletion: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		invokeFile, err := std.File(ctx, &std.FileArgs{
			Input: "test-fixtures/rsa_csr.pem",
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificate(ctx, "default", &certificateauthority.CertificateArgs{
			Location:             pulumi.String("us-central1"),
			Pool:                 _default.Name,
			CertificateAuthority: defaultAuthority.CertificateAuthorityId,
			Name:                 pulumi.String("my-certificate"),
			Lifetime:             pulumi.String("860s"),
			PemCsr:               invokeFile.Result,
			CertificateTemplate:  defaultCertificateTemplate.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Privateca Certificate Csr

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-std/sdk/go/std"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPool(ctx, "default", &certificateauthority.CaPoolArgs{
			Location: pulumi.String("us-central1"),
			Name:     pulumi.String("my-pool"),
			Tier:     pulumi.String("ENTERPRISE"),
		})
		if err != nil {
			return err
		}
		defaultAuthority, err := certificateauthority.NewAuthority(ctx, "default", &certificateauthority.AuthorityArgs{
			Location:               pulumi.String("us-central1"),
			Pool:                   _default.Name,
			CertificateAuthorityId: pulumi.String("my-authority"),
			Config: &certificateauthority.AuthorityConfigArgs{
				SubjectConfig: &certificateauthority.AuthorityConfigSubjectConfigArgs{
					Subject: &certificateauthority.AuthorityConfigSubjectConfigSubjectArgs{
						Organization: pulumi.String("HashiCorp"),
						CommonName:   pulumi.String("my-certificate-authority"),
					},
					SubjectAltName: &certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs{
						DnsNames: pulumi.StringArray{
							pulumi.String("hashicorp.com"),
						},
					},
				},
				X509Config: &certificateauthority.AuthorityConfigX509ConfigArgs{
					CaOptions: &certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs{
						IsCa: pulumi.Bool(true),
					},
					KeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							CertSign: pulumi.Bool(true),
							CrlSign:  pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth: pulumi.Bool(false),
						},
					},
				},
			},
			KeySpec: &certificateauthority.AuthorityKeySpecArgs{
				Algorithm: pulumi.String("RSA_PKCS1_4096_SHA256"),
			},
			DeletionProtection:                 pulumi.Bool(false),
			SkipGracePeriod:                    pulumi.Bool(true),
			IgnoreActiveCertificatesOnDeletion: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		invokeFile, err := std.File(ctx, &std.FileArgs{
			Input: "test-fixtures/rsa_csr.pem",
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificate(ctx, "default", &certificateauthority.CertificateArgs{
			Location:             pulumi.String("us-central1"),
			Pool:                 _default.Name,
			CertificateAuthority: defaultAuthority.CertificateAuthorityId,
			Name:                 pulumi.String("my-certificate"),
			Lifetime:             pulumi.String("860s"),
			PemCsr:               invokeFile.Result,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Privateca Certificate No Authority

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-std/sdk/go/std"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCaPool(ctx, "default", &certificateauthority.CaPoolArgs{
			Location: pulumi.String("us-central1"),
			Name:     pulumi.String("my-pool"),
			Tier:     pulumi.String("ENTERPRISE"),
		})
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewAuthority(ctx, "default", &certificateauthority.AuthorityArgs{
			Location:               pulumi.String("us-central1"),
			Pool:                   _default.Name,
			CertificateAuthorityId: pulumi.String("my-authority"),
			Config: &certificateauthority.AuthorityConfigArgs{
				SubjectConfig: &certificateauthority.AuthorityConfigSubjectConfigArgs{
					Subject: &certificateauthority.AuthorityConfigSubjectConfigSubjectArgs{
						Organization: pulumi.String("HashiCorp"),
						CommonName:   pulumi.String("my-certificate-authority"),
					},
					SubjectAltName: &certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs{
						DnsNames: pulumi.StringArray{
							pulumi.String("hashicorp.com"),
						},
					},
				},
				X509Config: &certificateauthority.AuthorityConfigX509ConfigArgs{
					CaOptions: &certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs{
						IsCa: pulumi.Bool(true),
					},
					KeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							DigitalSignature: pulumi.Bool(true),
							CertSign:         pulumi.Bool(true),
							CrlSign:          pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth: pulumi.Bool(true),
						},
					},
				},
			},
			Lifetime: pulumi.String("86400s"),
			KeySpec: &certificateauthority.AuthorityKeySpecArgs{
				Algorithm: pulumi.String("RSA_PKCS1_4096_SHA256"),
			},
			DeletionProtection:                 pulumi.Bool(false),
			SkipGracePeriod:                    pulumi.Bool(true),
			IgnoreActiveCertificatesOnDeletion: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		invokeFilebase64, err := std.Filebase64(ctx, &std.Filebase64Args{
			Input: "test-fixtures/rsa_public.pem",
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificate(ctx, "default", &certificateauthority.CertificateArgs{
			Location: pulumi.String("us-central1"),
			Pool:     _default.Name,
			Name:     pulumi.String("my-certificate"),
			Lifetime: pulumi.String("860s"),
			Config: &certificateauthority.CertificateConfigArgs{
				SubjectConfig: &certificateauthority.CertificateConfigSubjectConfigArgs{
					Subject: &certificateauthority.CertificateConfigSubjectConfigSubjectArgs{
						CommonName:         pulumi.String("san1.example.com"),
						CountryCode:        pulumi.String("us"),
						Organization:       pulumi.String("google"),
						OrganizationalUnit: pulumi.String("enterprise"),
						Locality:           pulumi.String("mountain view"),
						Province:           pulumi.String("california"),
						StreetAddress:      pulumi.String("1600 amphitheatre parkway"),
						PostalCode:         pulumi.String("94109"),
					},
				},
				X509Config: &certificateauthority.CertificateConfigX509ConfigArgs{
					CaOptions: &certificateauthority.CertificateConfigX509ConfigCaOptionsArgs{
						IsCa: pulumi.Bool(false),
					},
					KeyUsage: &certificateauthority.CertificateConfigX509ConfigKeyUsageArgs{
						BaseKeyUsage: &certificateauthority.CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs{
							CrlSign: pulumi.Bool(true),
						},
						ExtendedKeyUsage: &certificateauthority.CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs{
							ServerAuth: pulumi.Bool(true),
						},
					},
				},
				PublicKey: &certificateauthority.CertificateConfigPublicKeyArgs{
					Format: pulumi.String("PEM"),
					Key:    invokeFilebase64.Result,
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Certificate can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/caPools/{{pool}}/certificates/{{name}}`

* `{{project}}/{{location}}/{{pool}}/{{name}}`

* `{{location}}/{{pool}}/{{name}}`

When using the `pulumi import` command, Certificate can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:certificateauthority/certificate:Certificate default projects/{{project}}/locations/{{location}}/caPools/{{pool}}/certificates/{{name}} ```

```sh $ pulumi import gcp:certificateauthority/certificate:Certificate default {{project}}/{{location}}/{{pool}}/{{name}} ```

```sh $ pulumi import gcp:certificateauthority/certificate:Certificate default {{location}}/{{pool}}/{{name}} ```

func GetCertificate

func GetCertificate(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertificateState, opts ...pulumi.ResourceOption) (*Certificate, error)

GetCertificate gets an existing Certificate resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertificate

func NewCertificate(ctx *pulumi.Context,
	name string, args *CertificateArgs, opts ...pulumi.ResourceOption) (*Certificate, error)

NewCertificate registers a new resource with the given unique name, arguments, and options.

func (*Certificate) ElementType

func (*Certificate) ElementType() reflect.Type

func (*Certificate) ToCertificateOutput

func (i *Certificate) ToCertificateOutput() CertificateOutput

func (*Certificate) ToCertificateOutputWithContext

func (i *Certificate) ToCertificateOutputWithContext(ctx context.Context) CertificateOutput

type CertificateArgs

type CertificateArgs struct {
	// The Certificate Authority ID that should issue the certificate. For example, to issue a Certificate from
	// a Certificate Authority with resource name `projects/my-project/locations/us-central1/caPools/my-pool/certificateAuthorities/my-ca`,
	// argument `pool` should be set to `projects/my-project/locations/us-central1/caPools/my-pool`, argument `certificateAuthority`
	// should be set to `my-ca`.
	CertificateAuthority pulumi.StringPtrInput
	// The resource name for a CertificateTemplate used to issue this certificate,
	// in the format `projects/*/locations/*/certificateTemplates/*`. If this is specified,
	// the caller must have the necessary permission to use this template. If this is
	// omitted, no template will be used. This template must be in the same location
	// as the Certificate.
	CertificateTemplate pulumi.StringPtrInput
	// The config used to create a self-signed X.509 certificate or CSR.
	// Structure is documented below.
	Config CertificateConfigPtrInput
	// Labels with user-defined metadata to apply to this resource.
	//
	// **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
	// Please refer to the field `effectiveLabels` for all of the labels present on the resource.
	Labels pulumi.StringMapInput
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
	// "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
	// fractional digits, terminated by 's'. Example: "3.5s".
	Lifetime pulumi.StringPtrInput
	// Location of the Certificate. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	//
	// ***
	Location pulumi.StringInput
	// The name for this Certificate.
	Name pulumi.StringPtrInput
	// Immutable. A pem-encoded X.509 certificate signing request (CSR).
	PemCsr pulumi.StringPtrInput
	// The name of the CaPool this Certificate belongs to.
	Pool pulumi.StringInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a Certificate resource.

func (CertificateArgs) ElementType

func (CertificateArgs) ElementType() reflect.Type

type CertificateArray

type CertificateArray []CertificateInput

func (CertificateArray) ElementType

func (CertificateArray) ElementType() reflect.Type

func (CertificateArray) ToCertificateArrayOutput

func (i CertificateArray) ToCertificateArrayOutput() CertificateArrayOutput

func (CertificateArray) ToCertificateArrayOutputWithContext

func (i CertificateArray) ToCertificateArrayOutputWithContext(ctx context.Context) CertificateArrayOutput

type CertificateArrayInput

type CertificateArrayInput interface {
	pulumi.Input

	ToCertificateArrayOutput() CertificateArrayOutput
	ToCertificateArrayOutputWithContext(context.Context) CertificateArrayOutput
}

CertificateArrayInput is an input type that accepts CertificateArray and CertificateArrayOutput values. You can construct a concrete instance of `CertificateArrayInput` via:

CertificateArray{ CertificateArgs{...} }

type CertificateArrayOutput

type CertificateArrayOutput struct{ *pulumi.OutputState }

func (CertificateArrayOutput) ElementType

func (CertificateArrayOutput) ElementType() reflect.Type

func (CertificateArrayOutput) Index

func (CertificateArrayOutput) ToCertificateArrayOutput

func (o CertificateArrayOutput) ToCertificateArrayOutput() CertificateArrayOutput

func (CertificateArrayOutput) ToCertificateArrayOutputWithContext

func (o CertificateArrayOutput) ToCertificateArrayOutputWithContext(ctx context.Context) CertificateArrayOutput

type CertificateCertificateDescription

type CertificateCertificateDescription struct {
	// (Output)
	// Describes lists of issuer CA certificate URLs that appear in the "Authority Information Access" extension in the certificate.
	AiaIssuingCertificateUrls []string `pulumi:"aiaIssuingCertificateUrls"`
	// (Output)
	// Identifies the subjectKeyId of the parent certificate, per https://tools.ietf.org/html/rfc5280#section-4.2.1.1
	// Structure is documented below.
	AuthorityKeyIds []CertificateCertificateDescriptionAuthorityKeyId `pulumi:"authorityKeyIds"`
	// (Output)
	// The hash of the x.509 certificate.
	// Structure is documented below.
	CertFingerprints []CertificateCertificateDescriptionCertFingerprint `pulumi:"certFingerprints"`
	// (Output)
	// Describes a list of locations to obtain CRL information, i.e. the DistributionPoint.fullName described by https://tools.ietf.org/html/rfc5280#section-4.2.1.13
	CrlDistributionPoints []string `pulumi:"crlDistributionPoints"`
	// (Output)
	// A PublicKey describes a public key.
	// Structure is documented below.
	PublicKeys []CertificateCertificateDescriptionPublicKey `pulumi:"publicKeys"`
	// (Output)
	// Describes some of the values in a certificate that are related to the subject and lifetime.
	// Structure is documented below.
	SubjectDescriptions []CertificateCertificateDescriptionSubjectDescription `pulumi:"subjectDescriptions"`
	// (Output)
	// Provides a means of identifiying certificates that contain a particular public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
	// Structure is documented below.
	SubjectKeyIds []CertificateCertificateDescriptionSubjectKeyId `pulumi:"subjectKeyIds"`
	// (Output)
	// A structured description of the issued X.509 certificate.
	// Structure is documented below.
	X509Descriptions []CertificateCertificateDescriptionX509Description `pulumi:"x509Descriptions"`
}

type CertificateCertificateDescriptionArgs

type CertificateCertificateDescriptionArgs struct {
	// (Output)
	// Describes lists of issuer CA certificate URLs that appear in the "Authority Information Access" extension in the certificate.
	AiaIssuingCertificateUrls pulumi.StringArrayInput `pulumi:"aiaIssuingCertificateUrls"`
	// (Output)
	// Identifies the subjectKeyId of the parent certificate, per https://tools.ietf.org/html/rfc5280#section-4.2.1.1
	// Structure is documented below.
	AuthorityKeyIds CertificateCertificateDescriptionAuthorityKeyIdArrayInput `pulumi:"authorityKeyIds"`
	// (Output)
	// The hash of the x.509 certificate.
	// Structure is documented below.
	CertFingerprints CertificateCertificateDescriptionCertFingerprintArrayInput `pulumi:"certFingerprints"`
	// (Output)
	// Describes a list of locations to obtain CRL information, i.e. the DistributionPoint.fullName described by https://tools.ietf.org/html/rfc5280#section-4.2.1.13
	CrlDistributionPoints pulumi.StringArrayInput `pulumi:"crlDistributionPoints"`
	// (Output)
	// A PublicKey describes a public key.
	// Structure is documented below.
	PublicKeys CertificateCertificateDescriptionPublicKeyArrayInput `pulumi:"publicKeys"`
	// (Output)
	// Describes some of the values in a certificate that are related to the subject and lifetime.
	// Structure is documented below.
	SubjectDescriptions CertificateCertificateDescriptionSubjectDescriptionArrayInput `pulumi:"subjectDescriptions"`
	// (Output)
	// Provides a means of identifiying certificates that contain a particular public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
	// Structure is documented below.
	SubjectKeyIds CertificateCertificateDescriptionSubjectKeyIdArrayInput `pulumi:"subjectKeyIds"`
	// (Output)
	// A structured description of the issued X.509 certificate.
	// Structure is documented below.
	X509Descriptions CertificateCertificateDescriptionX509DescriptionArrayInput `pulumi:"x509Descriptions"`
}

func (CertificateCertificateDescriptionArgs) ElementType

func (CertificateCertificateDescriptionArgs) ToCertificateCertificateDescriptionOutput

func (i CertificateCertificateDescriptionArgs) ToCertificateCertificateDescriptionOutput() CertificateCertificateDescriptionOutput

func (CertificateCertificateDescriptionArgs) ToCertificateCertificateDescriptionOutputWithContext

func (i CertificateCertificateDescriptionArgs) ToCertificateCertificateDescriptionOutputWithContext(ctx context.Context) CertificateCertificateDescriptionOutput

type CertificateCertificateDescriptionArray

type CertificateCertificateDescriptionArray []CertificateCertificateDescriptionInput

func (CertificateCertificateDescriptionArray) ElementType

func (CertificateCertificateDescriptionArray) ToCertificateCertificateDescriptionArrayOutput

func (i CertificateCertificateDescriptionArray) ToCertificateCertificateDescriptionArrayOutput() CertificateCertificateDescriptionArrayOutput

func (CertificateCertificateDescriptionArray) ToCertificateCertificateDescriptionArrayOutputWithContext

func (i CertificateCertificateDescriptionArray) ToCertificateCertificateDescriptionArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionArrayOutput

type CertificateCertificateDescriptionArrayInput

type CertificateCertificateDescriptionArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionArrayOutput() CertificateCertificateDescriptionArrayOutput
	ToCertificateCertificateDescriptionArrayOutputWithContext(context.Context) CertificateCertificateDescriptionArrayOutput
}

CertificateCertificateDescriptionArrayInput is an input type that accepts CertificateCertificateDescriptionArray and CertificateCertificateDescriptionArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionArrayInput` via:

CertificateCertificateDescriptionArray{ CertificateCertificateDescriptionArgs{...} }

type CertificateCertificateDescriptionArrayOutput

type CertificateCertificateDescriptionArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionArrayOutput) ElementType

func (CertificateCertificateDescriptionArrayOutput) Index

func (CertificateCertificateDescriptionArrayOutput) ToCertificateCertificateDescriptionArrayOutput

func (o CertificateCertificateDescriptionArrayOutput) ToCertificateCertificateDescriptionArrayOutput() CertificateCertificateDescriptionArrayOutput

func (CertificateCertificateDescriptionArrayOutput) ToCertificateCertificateDescriptionArrayOutputWithContext

func (o CertificateCertificateDescriptionArrayOutput) ToCertificateCertificateDescriptionArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionArrayOutput

type CertificateCertificateDescriptionAuthorityKeyId

type CertificateCertificateDescriptionAuthorityKeyId struct {
	// (Output)
	// Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.
	KeyId *string `pulumi:"keyId"`
}

type CertificateCertificateDescriptionAuthorityKeyIdArgs

type CertificateCertificateDescriptionAuthorityKeyIdArgs struct {
	// (Output)
	// Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.
	KeyId pulumi.StringPtrInput `pulumi:"keyId"`
}

func (CertificateCertificateDescriptionAuthorityKeyIdArgs) ElementType

func (CertificateCertificateDescriptionAuthorityKeyIdArgs) ToCertificateCertificateDescriptionAuthorityKeyIdOutput

func (i CertificateCertificateDescriptionAuthorityKeyIdArgs) ToCertificateCertificateDescriptionAuthorityKeyIdOutput() CertificateCertificateDescriptionAuthorityKeyIdOutput

func (CertificateCertificateDescriptionAuthorityKeyIdArgs) ToCertificateCertificateDescriptionAuthorityKeyIdOutputWithContext

func (i CertificateCertificateDescriptionAuthorityKeyIdArgs) ToCertificateCertificateDescriptionAuthorityKeyIdOutputWithContext(ctx context.Context) CertificateCertificateDescriptionAuthorityKeyIdOutput

type CertificateCertificateDescriptionAuthorityKeyIdArray

type CertificateCertificateDescriptionAuthorityKeyIdArray []CertificateCertificateDescriptionAuthorityKeyIdInput

func (CertificateCertificateDescriptionAuthorityKeyIdArray) ElementType

func (CertificateCertificateDescriptionAuthorityKeyIdArray) ToCertificateCertificateDescriptionAuthorityKeyIdArrayOutput

func (i CertificateCertificateDescriptionAuthorityKeyIdArray) ToCertificateCertificateDescriptionAuthorityKeyIdArrayOutput() CertificateCertificateDescriptionAuthorityKeyIdArrayOutput

func (CertificateCertificateDescriptionAuthorityKeyIdArray) ToCertificateCertificateDescriptionAuthorityKeyIdArrayOutputWithContext

func (i CertificateCertificateDescriptionAuthorityKeyIdArray) ToCertificateCertificateDescriptionAuthorityKeyIdArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionAuthorityKeyIdArrayOutput

type CertificateCertificateDescriptionAuthorityKeyIdArrayInput

type CertificateCertificateDescriptionAuthorityKeyIdArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionAuthorityKeyIdArrayOutput() CertificateCertificateDescriptionAuthorityKeyIdArrayOutput
	ToCertificateCertificateDescriptionAuthorityKeyIdArrayOutputWithContext(context.Context) CertificateCertificateDescriptionAuthorityKeyIdArrayOutput
}

CertificateCertificateDescriptionAuthorityKeyIdArrayInput is an input type that accepts CertificateCertificateDescriptionAuthorityKeyIdArray and CertificateCertificateDescriptionAuthorityKeyIdArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionAuthorityKeyIdArrayInput` via:

CertificateCertificateDescriptionAuthorityKeyIdArray{ CertificateCertificateDescriptionAuthorityKeyIdArgs{...} }

type CertificateCertificateDescriptionAuthorityKeyIdArrayOutput

type CertificateCertificateDescriptionAuthorityKeyIdArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionAuthorityKeyIdArrayOutput) ElementType

func (CertificateCertificateDescriptionAuthorityKeyIdArrayOutput) Index

func (CertificateCertificateDescriptionAuthorityKeyIdArrayOutput) ToCertificateCertificateDescriptionAuthorityKeyIdArrayOutput

func (CertificateCertificateDescriptionAuthorityKeyIdArrayOutput) ToCertificateCertificateDescriptionAuthorityKeyIdArrayOutputWithContext

func (o CertificateCertificateDescriptionAuthorityKeyIdArrayOutput) ToCertificateCertificateDescriptionAuthorityKeyIdArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionAuthorityKeyIdArrayOutput

type CertificateCertificateDescriptionAuthorityKeyIdInput

type CertificateCertificateDescriptionAuthorityKeyIdInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionAuthorityKeyIdOutput() CertificateCertificateDescriptionAuthorityKeyIdOutput
	ToCertificateCertificateDescriptionAuthorityKeyIdOutputWithContext(context.Context) CertificateCertificateDescriptionAuthorityKeyIdOutput
}

CertificateCertificateDescriptionAuthorityKeyIdInput is an input type that accepts CertificateCertificateDescriptionAuthorityKeyIdArgs and CertificateCertificateDescriptionAuthorityKeyIdOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionAuthorityKeyIdInput` via:

CertificateCertificateDescriptionAuthorityKeyIdArgs{...}

type CertificateCertificateDescriptionAuthorityKeyIdOutput

type CertificateCertificateDescriptionAuthorityKeyIdOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionAuthorityKeyIdOutput) ElementType

func (CertificateCertificateDescriptionAuthorityKeyIdOutput) KeyId

(Output) Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.

func (CertificateCertificateDescriptionAuthorityKeyIdOutput) ToCertificateCertificateDescriptionAuthorityKeyIdOutput

func (CertificateCertificateDescriptionAuthorityKeyIdOutput) ToCertificateCertificateDescriptionAuthorityKeyIdOutputWithContext

func (o CertificateCertificateDescriptionAuthorityKeyIdOutput) ToCertificateCertificateDescriptionAuthorityKeyIdOutputWithContext(ctx context.Context) CertificateCertificateDescriptionAuthorityKeyIdOutput

type CertificateCertificateDescriptionCertFingerprint

type CertificateCertificateDescriptionCertFingerprint struct {
	// (Output)
	// The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
	Sha256Hash *string `pulumi:"sha256Hash"`
}

type CertificateCertificateDescriptionCertFingerprintArgs

type CertificateCertificateDescriptionCertFingerprintArgs struct {
	// (Output)
	// The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
	Sha256Hash pulumi.StringPtrInput `pulumi:"sha256Hash"`
}

func (CertificateCertificateDescriptionCertFingerprintArgs) ElementType

func (CertificateCertificateDescriptionCertFingerprintArgs) ToCertificateCertificateDescriptionCertFingerprintOutput

func (i CertificateCertificateDescriptionCertFingerprintArgs) ToCertificateCertificateDescriptionCertFingerprintOutput() CertificateCertificateDescriptionCertFingerprintOutput

func (CertificateCertificateDescriptionCertFingerprintArgs) ToCertificateCertificateDescriptionCertFingerprintOutputWithContext

func (i CertificateCertificateDescriptionCertFingerprintArgs) ToCertificateCertificateDescriptionCertFingerprintOutputWithContext(ctx context.Context) CertificateCertificateDescriptionCertFingerprintOutput

type CertificateCertificateDescriptionCertFingerprintArray

type CertificateCertificateDescriptionCertFingerprintArray []CertificateCertificateDescriptionCertFingerprintInput

func (CertificateCertificateDescriptionCertFingerprintArray) ElementType

func (CertificateCertificateDescriptionCertFingerprintArray) ToCertificateCertificateDescriptionCertFingerprintArrayOutput

func (i CertificateCertificateDescriptionCertFingerprintArray) ToCertificateCertificateDescriptionCertFingerprintArrayOutput() CertificateCertificateDescriptionCertFingerprintArrayOutput

func (CertificateCertificateDescriptionCertFingerprintArray) ToCertificateCertificateDescriptionCertFingerprintArrayOutputWithContext

func (i CertificateCertificateDescriptionCertFingerprintArray) ToCertificateCertificateDescriptionCertFingerprintArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionCertFingerprintArrayOutput

type CertificateCertificateDescriptionCertFingerprintArrayInput

type CertificateCertificateDescriptionCertFingerprintArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionCertFingerprintArrayOutput() CertificateCertificateDescriptionCertFingerprintArrayOutput
	ToCertificateCertificateDescriptionCertFingerprintArrayOutputWithContext(context.Context) CertificateCertificateDescriptionCertFingerprintArrayOutput
}

CertificateCertificateDescriptionCertFingerprintArrayInput is an input type that accepts CertificateCertificateDescriptionCertFingerprintArray and CertificateCertificateDescriptionCertFingerprintArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionCertFingerprintArrayInput` via:

CertificateCertificateDescriptionCertFingerprintArray{ CertificateCertificateDescriptionCertFingerprintArgs{...} }

type CertificateCertificateDescriptionCertFingerprintArrayOutput

type CertificateCertificateDescriptionCertFingerprintArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionCertFingerprintArrayOutput) ElementType

func (CertificateCertificateDescriptionCertFingerprintArrayOutput) Index

func (CertificateCertificateDescriptionCertFingerprintArrayOutput) ToCertificateCertificateDescriptionCertFingerprintArrayOutput

func (CertificateCertificateDescriptionCertFingerprintArrayOutput) ToCertificateCertificateDescriptionCertFingerprintArrayOutputWithContext

func (o CertificateCertificateDescriptionCertFingerprintArrayOutput) ToCertificateCertificateDescriptionCertFingerprintArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionCertFingerprintArrayOutput

type CertificateCertificateDescriptionCertFingerprintInput

type CertificateCertificateDescriptionCertFingerprintInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionCertFingerprintOutput() CertificateCertificateDescriptionCertFingerprintOutput
	ToCertificateCertificateDescriptionCertFingerprintOutputWithContext(context.Context) CertificateCertificateDescriptionCertFingerprintOutput
}

CertificateCertificateDescriptionCertFingerprintInput is an input type that accepts CertificateCertificateDescriptionCertFingerprintArgs and CertificateCertificateDescriptionCertFingerprintOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionCertFingerprintInput` via:

CertificateCertificateDescriptionCertFingerprintArgs{...}

type CertificateCertificateDescriptionCertFingerprintOutput

type CertificateCertificateDescriptionCertFingerprintOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionCertFingerprintOutput) ElementType

func (CertificateCertificateDescriptionCertFingerprintOutput) Sha256Hash

(Output) The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.

func (CertificateCertificateDescriptionCertFingerprintOutput) ToCertificateCertificateDescriptionCertFingerprintOutput

func (CertificateCertificateDescriptionCertFingerprintOutput) ToCertificateCertificateDescriptionCertFingerprintOutputWithContext

func (o CertificateCertificateDescriptionCertFingerprintOutput) ToCertificateCertificateDescriptionCertFingerprintOutputWithContext(ctx context.Context) CertificateCertificateDescriptionCertFingerprintOutput

type CertificateCertificateDescriptionInput

type CertificateCertificateDescriptionInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionOutput() CertificateCertificateDescriptionOutput
	ToCertificateCertificateDescriptionOutputWithContext(context.Context) CertificateCertificateDescriptionOutput
}

CertificateCertificateDescriptionInput is an input type that accepts CertificateCertificateDescriptionArgs and CertificateCertificateDescriptionOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionInput` via:

CertificateCertificateDescriptionArgs{...}

type CertificateCertificateDescriptionOutput

type CertificateCertificateDescriptionOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionOutput) AiaIssuingCertificateUrls

(Output) Describes lists of issuer CA certificate URLs that appear in the "Authority Information Access" extension in the certificate.

func (CertificateCertificateDescriptionOutput) AuthorityKeyIds

(Output) Identifies the subjectKeyId of the parent certificate, per https://tools.ietf.org/html/rfc5280#section-4.2.1.1 Structure is documented below.

func (CertificateCertificateDescriptionOutput) CertFingerprints

(Output) The hash of the x.509 certificate. Structure is documented below.

func (CertificateCertificateDescriptionOutput) CrlDistributionPoints

(Output) Describes a list of locations to obtain CRL information, i.e. the DistributionPoint.fullName described by https://tools.ietf.org/html/rfc5280#section-4.2.1.13

func (CertificateCertificateDescriptionOutput) ElementType

func (CertificateCertificateDescriptionOutput) PublicKeys

(Output) A PublicKey describes a public key. Structure is documented below.

func (CertificateCertificateDescriptionOutput) SubjectDescriptions

(Output) Describes some of the values in a certificate that are related to the subject and lifetime. Structure is documented below.

func (CertificateCertificateDescriptionOutput) SubjectKeyIds

(Output) Provides a means of identifiying certificates that contain a particular public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2. Structure is documented below.

func (CertificateCertificateDescriptionOutput) ToCertificateCertificateDescriptionOutput

func (o CertificateCertificateDescriptionOutput) ToCertificateCertificateDescriptionOutput() CertificateCertificateDescriptionOutput

func (CertificateCertificateDescriptionOutput) ToCertificateCertificateDescriptionOutputWithContext

func (o CertificateCertificateDescriptionOutput) ToCertificateCertificateDescriptionOutputWithContext(ctx context.Context) CertificateCertificateDescriptionOutput

func (CertificateCertificateDescriptionOutput) X509Descriptions

(Output) A structured description of the issued X.509 certificate. Structure is documented below.

type CertificateCertificateDescriptionPublicKey

type CertificateCertificateDescriptionPublicKey struct {
	// The format of the public key. Currently, only PEM format is supported.
	// Possible values are: `KEY_TYPE_UNSPECIFIED`, `PEM`.
	Format *string `pulumi:"format"`
	// Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.
	Key *string `pulumi:"key"`
}

type CertificateCertificateDescriptionPublicKeyArgs

type CertificateCertificateDescriptionPublicKeyArgs struct {
	// The format of the public key. Currently, only PEM format is supported.
	// Possible values are: `KEY_TYPE_UNSPECIFIED`, `PEM`.
	Format pulumi.StringPtrInput `pulumi:"format"`
	// Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.
	Key pulumi.StringPtrInput `pulumi:"key"`
}

func (CertificateCertificateDescriptionPublicKeyArgs) ElementType

func (CertificateCertificateDescriptionPublicKeyArgs) ToCertificateCertificateDescriptionPublicKeyOutput

func (i CertificateCertificateDescriptionPublicKeyArgs) ToCertificateCertificateDescriptionPublicKeyOutput() CertificateCertificateDescriptionPublicKeyOutput

func (CertificateCertificateDescriptionPublicKeyArgs) ToCertificateCertificateDescriptionPublicKeyOutputWithContext

func (i CertificateCertificateDescriptionPublicKeyArgs) ToCertificateCertificateDescriptionPublicKeyOutputWithContext(ctx context.Context) CertificateCertificateDescriptionPublicKeyOutput

type CertificateCertificateDescriptionPublicKeyArray

type CertificateCertificateDescriptionPublicKeyArray []CertificateCertificateDescriptionPublicKeyInput

func (CertificateCertificateDescriptionPublicKeyArray) ElementType

func (CertificateCertificateDescriptionPublicKeyArray) ToCertificateCertificateDescriptionPublicKeyArrayOutput

func (i CertificateCertificateDescriptionPublicKeyArray) ToCertificateCertificateDescriptionPublicKeyArrayOutput() CertificateCertificateDescriptionPublicKeyArrayOutput

func (CertificateCertificateDescriptionPublicKeyArray) ToCertificateCertificateDescriptionPublicKeyArrayOutputWithContext

func (i CertificateCertificateDescriptionPublicKeyArray) ToCertificateCertificateDescriptionPublicKeyArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionPublicKeyArrayOutput

type CertificateCertificateDescriptionPublicKeyArrayInput

type CertificateCertificateDescriptionPublicKeyArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionPublicKeyArrayOutput() CertificateCertificateDescriptionPublicKeyArrayOutput
	ToCertificateCertificateDescriptionPublicKeyArrayOutputWithContext(context.Context) CertificateCertificateDescriptionPublicKeyArrayOutput
}

CertificateCertificateDescriptionPublicKeyArrayInput is an input type that accepts CertificateCertificateDescriptionPublicKeyArray and CertificateCertificateDescriptionPublicKeyArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionPublicKeyArrayInput` via:

CertificateCertificateDescriptionPublicKeyArray{ CertificateCertificateDescriptionPublicKeyArgs{...} }

type CertificateCertificateDescriptionPublicKeyArrayOutput

type CertificateCertificateDescriptionPublicKeyArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionPublicKeyArrayOutput) ElementType

func (CertificateCertificateDescriptionPublicKeyArrayOutput) Index

func (CertificateCertificateDescriptionPublicKeyArrayOutput) ToCertificateCertificateDescriptionPublicKeyArrayOutput

func (CertificateCertificateDescriptionPublicKeyArrayOutput) ToCertificateCertificateDescriptionPublicKeyArrayOutputWithContext

func (o CertificateCertificateDescriptionPublicKeyArrayOutput) ToCertificateCertificateDescriptionPublicKeyArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionPublicKeyArrayOutput

type CertificateCertificateDescriptionPublicKeyInput

type CertificateCertificateDescriptionPublicKeyInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionPublicKeyOutput() CertificateCertificateDescriptionPublicKeyOutput
	ToCertificateCertificateDescriptionPublicKeyOutputWithContext(context.Context) CertificateCertificateDescriptionPublicKeyOutput
}

CertificateCertificateDescriptionPublicKeyInput is an input type that accepts CertificateCertificateDescriptionPublicKeyArgs and CertificateCertificateDescriptionPublicKeyOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionPublicKeyInput` via:

CertificateCertificateDescriptionPublicKeyArgs{...}

type CertificateCertificateDescriptionPublicKeyOutput

type CertificateCertificateDescriptionPublicKeyOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionPublicKeyOutput) ElementType

func (CertificateCertificateDescriptionPublicKeyOutput) Format

The format of the public key. Currently, only PEM format is supported. Possible values are: `KEY_TYPE_UNSPECIFIED`, `PEM`.

func (CertificateCertificateDescriptionPublicKeyOutput) Key

Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.

func (CertificateCertificateDescriptionPublicKeyOutput) ToCertificateCertificateDescriptionPublicKeyOutput

func (o CertificateCertificateDescriptionPublicKeyOutput) ToCertificateCertificateDescriptionPublicKeyOutput() CertificateCertificateDescriptionPublicKeyOutput

func (CertificateCertificateDescriptionPublicKeyOutput) ToCertificateCertificateDescriptionPublicKeyOutputWithContext

func (o CertificateCertificateDescriptionPublicKeyOutput) ToCertificateCertificateDescriptionPublicKeyOutputWithContext(ctx context.Context) CertificateCertificateDescriptionPublicKeyOutput

type CertificateCertificateDescriptionSubjectDescription

type CertificateCertificateDescriptionSubjectDescription struct {
	// (Output)
	// The serial number encoded in lowercase hexadecimal.
	HexSerialNumber *string `pulumi:"hexSerialNumber"`
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
	// "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
	// fractional digits, terminated by 's'. Example: "3.5s".
	Lifetime *string `pulumi:"lifetime"`
	// (Output)
	// The time at which the certificate expires.
	NotAfterTime *string `pulumi:"notAfterTime"`
	// (Output)
	// The time at which the certificate becomes valid.
	NotBeforeTime *string `pulumi:"notBeforeTime"`
	// (Output)
	// The subject alternative name fields.
	// Structure is documented below.
	SubjectAltNames []CertificateCertificateDescriptionSubjectDescriptionSubjectAltName `pulumi:"subjectAltNames"`
	// (Output)
	// Contains distinguished name fields such as the location and organization.
	// Structure is documented below.
	Subjects []CertificateCertificateDescriptionSubjectDescriptionSubject `pulumi:"subjects"`
}

type CertificateCertificateDescriptionSubjectDescriptionArgs

type CertificateCertificateDescriptionSubjectDescriptionArgs struct {
	// (Output)
	// The serial number encoded in lowercase hexadecimal.
	HexSerialNumber pulumi.StringPtrInput `pulumi:"hexSerialNumber"`
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
	// "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
	// fractional digits, terminated by 's'. Example: "3.5s".
	Lifetime pulumi.StringPtrInput `pulumi:"lifetime"`
	// (Output)
	// The time at which the certificate expires.
	NotAfterTime pulumi.StringPtrInput `pulumi:"notAfterTime"`
	// (Output)
	// The time at which the certificate becomes valid.
	NotBeforeTime pulumi.StringPtrInput `pulumi:"notBeforeTime"`
	// (Output)
	// The subject alternative name fields.
	// Structure is documented below.
	SubjectAltNames CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayInput `pulumi:"subjectAltNames"`
	// (Output)
	// Contains distinguished name fields such as the location and organization.
	// Structure is documented below.
	Subjects CertificateCertificateDescriptionSubjectDescriptionSubjectArrayInput `pulumi:"subjects"`
}

func (CertificateCertificateDescriptionSubjectDescriptionArgs) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionArgs) ToCertificateCertificateDescriptionSubjectDescriptionOutput

func (CertificateCertificateDescriptionSubjectDescriptionArgs) ToCertificateCertificateDescriptionSubjectDescriptionOutputWithContext

func (i CertificateCertificateDescriptionSubjectDescriptionArgs) ToCertificateCertificateDescriptionSubjectDescriptionOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionOutput

type CertificateCertificateDescriptionSubjectDescriptionArray

type CertificateCertificateDescriptionSubjectDescriptionArray []CertificateCertificateDescriptionSubjectDescriptionInput

func (CertificateCertificateDescriptionSubjectDescriptionArray) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionArray) ToCertificateCertificateDescriptionSubjectDescriptionArrayOutput

func (i CertificateCertificateDescriptionSubjectDescriptionArray) ToCertificateCertificateDescriptionSubjectDescriptionArrayOutput() CertificateCertificateDescriptionSubjectDescriptionArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionArray) ToCertificateCertificateDescriptionSubjectDescriptionArrayOutputWithContext

func (i CertificateCertificateDescriptionSubjectDescriptionArray) ToCertificateCertificateDescriptionSubjectDescriptionArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionArrayInput

type CertificateCertificateDescriptionSubjectDescriptionArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionArrayOutput() CertificateCertificateDescriptionSubjectDescriptionArrayOutput
	ToCertificateCertificateDescriptionSubjectDescriptionArrayOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionArrayOutput
}

CertificateCertificateDescriptionSubjectDescriptionArrayInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionArray and CertificateCertificateDescriptionSubjectDescriptionArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionArrayInput` via:

CertificateCertificateDescriptionSubjectDescriptionArray{ CertificateCertificateDescriptionSubjectDescriptionArgs{...} }

type CertificateCertificateDescriptionSubjectDescriptionArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionArrayOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionArrayOutput) Index

func (CertificateCertificateDescriptionSubjectDescriptionArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionArrayOutputWithContext

func (o CertificateCertificateDescriptionSubjectDescriptionArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionInput

type CertificateCertificateDescriptionSubjectDescriptionInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionOutput() CertificateCertificateDescriptionSubjectDescriptionOutput
	ToCertificateCertificateDescriptionSubjectDescriptionOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionOutput
}

CertificateCertificateDescriptionSubjectDescriptionInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionArgs and CertificateCertificateDescriptionSubjectDescriptionOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionInput` via:

CertificateCertificateDescriptionSubjectDescriptionArgs{...}

type CertificateCertificateDescriptionSubjectDescriptionOutput

type CertificateCertificateDescriptionSubjectDescriptionOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionOutput) HexSerialNumber

(Output) The serial number encoded in lowercase hexadecimal.

func (CertificateCertificateDescriptionSubjectDescriptionOutput) Lifetime

The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".

func (CertificateCertificateDescriptionSubjectDescriptionOutput) NotAfterTime

(Output) The time at which the certificate expires.

func (CertificateCertificateDescriptionSubjectDescriptionOutput) NotBeforeTime

(Output) The time at which the certificate becomes valid.

func (CertificateCertificateDescriptionSubjectDescriptionOutput) SubjectAltNames

(Output) The subject alternative name fields. Structure is documented below.

func (CertificateCertificateDescriptionSubjectDescriptionOutput) Subjects

(Output) Contains distinguished name fields such as the location and organization. Structure is documented below.

func (CertificateCertificateDescriptionSubjectDescriptionOutput) ToCertificateCertificateDescriptionSubjectDescriptionOutput

func (CertificateCertificateDescriptionSubjectDescriptionOutput) ToCertificateCertificateDescriptionSubjectDescriptionOutputWithContext

func (o CertificateCertificateDescriptionSubjectDescriptionOutput) ToCertificateCertificateDescriptionSubjectDescriptionOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionOutput

type CertificateCertificateDescriptionSubjectDescriptionSubject

type CertificateCertificateDescriptionSubjectDescriptionSubject struct {
	// The common name of the distinguished name.
	CommonName *string `pulumi:"commonName"`
	// The country code of the subject.
	CountryCode *string `pulumi:"countryCode"`
	// The locality or city of the subject.
	Locality *string `pulumi:"locality"`
	// The organization of the subject.
	Organization *string `pulumi:"organization"`
	// The organizational unit of the subject.
	OrganizationalUnit *string `pulumi:"organizationalUnit"`
	// The postal code of the subject.
	PostalCode *string `pulumi:"postalCode"`
	// The province, territory, or regional state of the subject.
	Province *string `pulumi:"province"`
	// The street address of the subject.
	StreetAddress *string `pulumi:"streetAddress"`
}

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltName

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltName struct {
	// (Output)
	// Contains additional subject alternative name values.
	// Structure is documented below.
	CustomSans []CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSan `pulumi:"customSans"`
	// Contains only valid, fully-qualified host names.
	DnsNames []string `pulumi:"dnsNames"`
	// Contains only valid RFC 2822 E-mail addresses.
	EmailAddresses []string `pulumi:"emailAddresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	IpAddresses []string `pulumi:"ipAddresses"`
	// Contains only valid RFC 3986 URIs.
	Uris []string `pulumi:"uris"`
}

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs struct {
	// (Output)
	// Contains additional subject alternative name values.
	// Structure is documented below.
	CustomSans CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayInput `pulumi:"customSans"`
	// Contains only valid, fully-qualified host names.
	DnsNames pulumi.StringArrayInput `pulumi:"dnsNames"`
	// Contains only valid RFC 2822 E-mail addresses.
	EmailAddresses pulumi.StringArrayInput `pulumi:"emailAddresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	IpAddresses pulumi.StringArrayInput `pulumi:"ipAddresses"`
	// Contains only valid RFC 3986 URIs.
	Uris pulumi.StringArrayInput `pulumi:"uris"`
}

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutputWithContext

func (i CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArray

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArray []CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameInput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArray) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutputWithContext

func (i CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayInput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput() CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput
	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput
}

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArray and CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayInput` via:

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArray{ CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs{...} }

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArrayOutputWithContext

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSan

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSan struct {
	// (Output)
	// Indicates whether or not the name constraints are marked critical.
	Critical *bool `pulumi:"critical"`
	// (Output)
	// Describes how some of the technical fields in a certificate should be populated.
	// Structure is documented below.
	ObectIds []CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectId `pulumi:"obectIds"`
	// The value of this X.509 extension. A base64-encoded string.
	Value *string `pulumi:"value"`
}

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs struct {
	// (Output)
	// Indicates whether or not the name constraints are marked critical.
	Critical pulumi.BoolPtrInput `pulumi:"critical"`
	// (Output)
	// Describes how some of the technical fields in a certificate should be populated.
	// Structure is documented below.
	ObectIds CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayInput `pulumi:"obectIds"`
	// The value of this X.509 extension. A base64-encoded string.
	Value pulumi.StringPtrInput `pulumi:"value"`
}

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutputWithContext

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArray

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArray []CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanInput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArray) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutputWithContext

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayInput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput() CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput
	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput
}

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArray and CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayInput` via:

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArray{ CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs{...} }

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArrayOutputWithContext

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanInput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput() CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput
	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput
}

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs and CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanInput` via:

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs{...}

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectId

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectId struct {
	// (Output)
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs struct {
	// (Output)
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutputWithContext

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArray

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArray []CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdInput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArray) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutputWithContext

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayInput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput() CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput
	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput
}

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArray and CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayInput` via:

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArray{ CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs{...} }

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArrayOutputWithContext

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdInput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput() CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput
	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput
}

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs and CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdInput` via:

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs{...}

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput) ObjectIdPaths

(Output) An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdOutputWithContext

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput) Critical

(Output) Indicates whether or not the name constraints are marked critical.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput) ObectIds

(Output) Describes how some of the technical fields in a certificate should be populated. Structure is documented below.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutputWithContext

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanOutput) Value

The value of this X.509 extension. A base64-encoded string.

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameInput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput() CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput
	ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput
}

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs and CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameInput` via:

CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs{...}

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput) CustomSans

(Output) Contains additional subject alternative name values. Structure is documented below.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput) DnsNames

Contains only valid, fully-qualified host names.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput) EmailAddresses

Contains only valid RFC 2822 E-mail addresses.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput) IpAddresses

Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutputWithContext

func (o CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameOutput) Uris

Contains only valid RFC 3986 URIs.

type CertificateCertificateDescriptionSubjectDescriptionSubjectArgs

type CertificateCertificateDescriptionSubjectDescriptionSubjectArgs struct {
	// The common name of the distinguished name.
	CommonName pulumi.StringPtrInput `pulumi:"commonName"`
	// The country code of the subject.
	CountryCode pulumi.StringPtrInput `pulumi:"countryCode"`
	// The locality or city of the subject.
	Locality pulumi.StringPtrInput `pulumi:"locality"`
	// The organization of the subject.
	Organization pulumi.StringPtrInput `pulumi:"organization"`
	// The organizational unit of the subject.
	OrganizationalUnit pulumi.StringPtrInput `pulumi:"organizationalUnit"`
	// The postal code of the subject.
	PostalCode pulumi.StringPtrInput `pulumi:"postalCode"`
	// The province, territory, or regional state of the subject.
	Province pulumi.StringPtrInput `pulumi:"province"`
	// The street address of the subject.
	StreetAddress pulumi.StringPtrInput `pulumi:"streetAddress"`
}

func (CertificateCertificateDescriptionSubjectDescriptionSubjectArgs) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectOutputWithContext

func (i CertificateCertificateDescriptionSubjectDescriptionSubjectArgs) ToCertificateCertificateDescriptionSubjectDescriptionSubjectOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectArray

type CertificateCertificateDescriptionSubjectDescriptionSubjectArray []CertificateCertificateDescriptionSubjectDescriptionSubjectInput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectArray) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutputWithContext

func (i CertificateCertificateDescriptionSubjectDescriptionSubjectArray) ToCertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectArrayInput

type CertificateCertificateDescriptionSubjectDescriptionSubjectArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput() CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput
	ToCertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput
}

CertificateCertificateDescriptionSubjectDescriptionSubjectArrayInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionSubjectArray and CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionSubjectArrayInput` via:

CertificateCertificateDescriptionSubjectDescriptionSubjectArray{ CertificateCertificateDescriptionSubjectDescriptionSubjectArgs{...} }

type CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutputWithContext

func (o CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectArrayOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectInput

type CertificateCertificateDescriptionSubjectDescriptionSubjectInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectDescriptionSubjectOutput() CertificateCertificateDescriptionSubjectDescriptionSubjectOutput
	ToCertificateCertificateDescriptionSubjectDescriptionSubjectOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectOutput
}

CertificateCertificateDescriptionSubjectDescriptionSubjectInput is an input type that accepts CertificateCertificateDescriptionSubjectDescriptionSubjectArgs and CertificateCertificateDescriptionSubjectDescriptionSubjectOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectDescriptionSubjectInput` via:

CertificateCertificateDescriptionSubjectDescriptionSubjectArgs{...}

type CertificateCertificateDescriptionSubjectDescriptionSubjectOutput

type CertificateCertificateDescriptionSubjectDescriptionSubjectOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) CommonName

The common name of the distinguished name.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) CountryCode

The country code of the subject.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) ElementType

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) Locality

The locality or city of the subject.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) Organization

The organization of the subject.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) OrganizationalUnit

The organizational unit of the subject.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) PostalCode

The postal code of the subject.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) Province

The province, territory, or regional state of the subject.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) StreetAddress

The street address of the subject.

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectOutput

func (CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectOutputWithContext

func (o CertificateCertificateDescriptionSubjectDescriptionSubjectOutput) ToCertificateCertificateDescriptionSubjectDescriptionSubjectOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectDescriptionSubjectOutput

type CertificateCertificateDescriptionSubjectKeyId

type CertificateCertificateDescriptionSubjectKeyId struct {
	// (Output)
	// Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.
	KeyId *string `pulumi:"keyId"`
}

type CertificateCertificateDescriptionSubjectKeyIdArgs

type CertificateCertificateDescriptionSubjectKeyIdArgs struct {
	// (Output)
	// Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.
	KeyId pulumi.StringPtrInput `pulumi:"keyId"`
}

func (CertificateCertificateDescriptionSubjectKeyIdArgs) ElementType

func (CertificateCertificateDescriptionSubjectKeyIdArgs) ToCertificateCertificateDescriptionSubjectKeyIdOutput

func (i CertificateCertificateDescriptionSubjectKeyIdArgs) ToCertificateCertificateDescriptionSubjectKeyIdOutput() CertificateCertificateDescriptionSubjectKeyIdOutput

func (CertificateCertificateDescriptionSubjectKeyIdArgs) ToCertificateCertificateDescriptionSubjectKeyIdOutputWithContext

func (i CertificateCertificateDescriptionSubjectKeyIdArgs) ToCertificateCertificateDescriptionSubjectKeyIdOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectKeyIdOutput

type CertificateCertificateDescriptionSubjectKeyIdArray

type CertificateCertificateDescriptionSubjectKeyIdArray []CertificateCertificateDescriptionSubjectKeyIdInput

func (CertificateCertificateDescriptionSubjectKeyIdArray) ElementType

func (CertificateCertificateDescriptionSubjectKeyIdArray) ToCertificateCertificateDescriptionSubjectKeyIdArrayOutput

func (i CertificateCertificateDescriptionSubjectKeyIdArray) ToCertificateCertificateDescriptionSubjectKeyIdArrayOutput() CertificateCertificateDescriptionSubjectKeyIdArrayOutput

func (CertificateCertificateDescriptionSubjectKeyIdArray) ToCertificateCertificateDescriptionSubjectKeyIdArrayOutputWithContext

func (i CertificateCertificateDescriptionSubjectKeyIdArray) ToCertificateCertificateDescriptionSubjectKeyIdArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectKeyIdArrayOutput

type CertificateCertificateDescriptionSubjectKeyIdArrayInput

type CertificateCertificateDescriptionSubjectKeyIdArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectKeyIdArrayOutput() CertificateCertificateDescriptionSubjectKeyIdArrayOutput
	ToCertificateCertificateDescriptionSubjectKeyIdArrayOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectKeyIdArrayOutput
}

CertificateCertificateDescriptionSubjectKeyIdArrayInput is an input type that accepts CertificateCertificateDescriptionSubjectKeyIdArray and CertificateCertificateDescriptionSubjectKeyIdArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectKeyIdArrayInput` via:

CertificateCertificateDescriptionSubjectKeyIdArray{ CertificateCertificateDescriptionSubjectKeyIdArgs{...} }

type CertificateCertificateDescriptionSubjectKeyIdArrayOutput

type CertificateCertificateDescriptionSubjectKeyIdArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectKeyIdArrayOutput) ElementType

func (CertificateCertificateDescriptionSubjectKeyIdArrayOutput) Index

func (CertificateCertificateDescriptionSubjectKeyIdArrayOutput) ToCertificateCertificateDescriptionSubjectKeyIdArrayOutput

func (CertificateCertificateDescriptionSubjectKeyIdArrayOutput) ToCertificateCertificateDescriptionSubjectKeyIdArrayOutputWithContext

func (o CertificateCertificateDescriptionSubjectKeyIdArrayOutput) ToCertificateCertificateDescriptionSubjectKeyIdArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectKeyIdArrayOutput

type CertificateCertificateDescriptionSubjectKeyIdInput

type CertificateCertificateDescriptionSubjectKeyIdInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionSubjectKeyIdOutput() CertificateCertificateDescriptionSubjectKeyIdOutput
	ToCertificateCertificateDescriptionSubjectKeyIdOutputWithContext(context.Context) CertificateCertificateDescriptionSubjectKeyIdOutput
}

CertificateCertificateDescriptionSubjectKeyIdInput is an input type that accepts CertificateCertificateDescriptionSubjectKeyIdArgs and CertificateCertificateDescriptionSubjectKeyIdOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionSubjectKeyIdInput` via:

CertificateCertificateDescriptionSubjectKeyIdArgs{...}

type CertificateCertificateDescriptionSubjectKeyIdOutput

type CertificateCertificateDescriptionSubjectKeyIdOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionSubjectKeyIdOutput) ElementType

func (CertificateCertificateDescriptionSubjectKeyIdOutput) KeyId

(Output) Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.

func (CertificateCertificateDescriptionSubjectKeyIdOutput) ToCertificateCertificateDescriptionSubjectKeyIdOutput

func (o CertificateCertificateDescriptionSubjectKeyIdOutput) ToCertificateCertificateDescriptionSubjectKeyIdOutput() CertificateCertificateDescriptionSubjectKeyIdOutput

func (CertificateCertificateDescriptionSubjectKeyIdOutput) ToCertificateCertificateDescriptionSubjectKeyIdOutputWithContext

func (o CertificateCertificateDescriptionSubjectKeyIdOutput) ToCertificateCertificateDescriptionSubjectKeyIdOutputWithContext(ctx context.Context) CertificateCertificateDescriptionSubjectKeyIdOutput

type CertificateCertificateDescriptionX509Description

type CertificateCertificateDescriptionX509Description struct {
	// (Output)
	// Describes custom X.509 extensions.
	// Structure is documented below.
	AdditionalExtensions []CertificateCertificateDescriptionX509DescriptionAdditionalExtension `pulumi:"additionalExtensions"`
	// (Output)
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers []string `pulumi:"aiaOcspServers"`
	// (Output)
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	CaOptions []CertificateCertificateDescriptionX509DescriptionCaOption `pulumi:"caOptions"`
	// (Output)
	// Indicates the intended use for keys that correspond to a certificate.
	// Structure is documented below.
	KeyUsages []CertificateCertificateDescriptionX509DescriptionKeyUsage `pulumi:"keyUsages"`
	// (Output)
	// Describes the X.509 name constraints extension.
	// Structure is documented below.
	NameConstraints []CertificateCertificateDescriptionX509DescriptionNameConstraint `pulumi:"nameConstraints"`
	// (Output)
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// Structure is documented below.
	PolicyIds []CertificateCertificateDescriptionX509DescriptionPolicyId `pulumi:"policyIds"`
}

type CertificateCertificateDescriptionX509DescriptionAdditionalExtension

type CertificateCertificateDescriptionX509DescriptionAdditionalExtension struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical *bool `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	ObjectIds []CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectId `pulumi:"objectIds"`
	// The value of this X.509 extension. A base64-encoded string.
	Value *string `pulumi:"value"`
}

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical pulumi.BoolPtrInput `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	ObjectIds CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayInput `pulumi:"objectIds"`
	// The value of this X.509 extension. A base64-encoded string.
	Value pulumi.StringPtrInput `pulumi:"value"`
}

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArray

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArray []CertificateCertificateDescriptionX509DescriptionAdditionalExtensionInput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArray) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArray) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArray) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayInput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput() CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput
}

CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArray and CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayInput` via:

CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArray{ CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs{...} }

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutput) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayOutputWithContext

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionInput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput() CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput
	ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput
}

CertificateCertificateDescriptionX509DescriptionAdditionalExtensionInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs and CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionAdditionalExtensionInput` via:

CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs{...}

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectId

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutputWithContext

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArray

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArray []CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdInput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArray) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArray) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutputWithContext

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayInput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput() CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput
}

CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArray and CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayInput` via:

CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArray{ CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs{...} }

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutput) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArrayOutputWithContext

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdInput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput() CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput
	ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput
}

CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs and CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdInput` via:

CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs{...}

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutput) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdOutputWithContext

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput

type CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput) Critical

Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput) ObjectIds

Describes values that are relevant in a CA certificate. Structure is documented below.

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput) ToCertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutputWithContext

func (CertificateCertificateDescriptionX509DescriptionAdditionalExtensionOutput) Value

The value of this X.509 extension. A base64-encoded string.

type CertificateCertificateDescriptionX509DescriptionArgs

type CertificateCertificateDescriptionX509DescriptionArgs struct {
	// (Output)
	// Describes custom X.509 extensions.
	// Structure is documented below.
	AdditionalExtensions CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArrayInput `pulumi:"additionalExtensions"`
	// (Output)
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers pulumi.StringArrayInput `pulumi:"aiaOcspServers"`
	// (Output)
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	CaOptions CertificateCertificateDescriptionX509DescriptionCaOptionArrayInput `pulumi:"caOptions"`
	// (Output)
	// Indicates the intended use for keys that correspond to a certificate.
	// Structure is documented below.
	KeyUsages CertificateCertificateDescriptionX509DescriptionKeyUsageArrayInput `pulumi:"keyUsages"`
	// (Output)
	// Describes the X.509 name constraints extension.
	// Structure is documented below.
	NameConstraints CertificateCertificateDescriptionX509DescriptionNameConstraintArrayInput `pulumi:"nameConstraints"`
	// (Output)
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// Structure is documented below.
	PolicyIds CertificateCertificateDescriptionX509DescriptionPolicyIdArrayInput `pulumi:"policyIds"`
}

func (CertificateCertificateDescriptionX509DescriptionArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionArgs) ToCertificateCertificateDescriptionX509DescriptionOutput

func (i CertificateCertificateDescriptionX509DescriptionArgs) ToCertificateCertificateDescriptionX509DescriptionOutput() CertificateCertificateDescriptionX509DescriptionOutput

func (CertificateCertificateDescriptionX509DescriptionArgs) ToCertificateCertificateDescriptionX509DescriptionOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionArgs) ToCertificateCertificateDescriptionX509DescriptionOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionOutput

type CertificateCertificateDescriptionX509DescriptionArray

type CertificateCertificateDescriptionX509DescriptionArray []CertificateCertificateDescriptionX509DescriptionInput

func (CertificateCertificateDescriptionX509DescriptionArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionArray) ToCertificateCertificateDescriptionX509DescriptionArrayOutput

func (i CertificateCertificateDescriptionX509DescriptionArray) ToCertificateCertificateDescriptionX509DescriptionArrayOutput() CertificateCertificateDescriptionX509DescriptionArrayOutput

func (CertificateCertificateDescriptionX509DescriptionArray) ToCertificateCertificateDescriptionX509DescriptionArrayOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionArray) ToCertificateCertificateDescriptionX509DescriptionArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionArrayOutput

type CertificateCertificateDescriptionX509DescriptionArrayInput

type CertificateCertificateDescriptionX509DescriptionArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionArrayOutput() CertificateCertificateDescriptionX509DescriptionArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionArrayOutput
}

CertificateCertificateDescriptionX509DescriptionArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionArray and CertificateCertificateDescriptionX509DescriptionArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionArrayInput` via:

CertificateCertificateDescriptionX509DescriptionArray{ CertificateCertificateDescriptionX509DescriptionArgs{...} }

type CertificateCertificateDescriptionX509DescriptionArrayOutput

type CertificateCertificateDescriptionX509DescriptionArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionArrayOutput) Index

func (CertificateCertificateDescriptionX509DescriptionArrayOutput) ToCertificateCertificateDescriptionX509DescriptionArrayOutput

func (CertificateCertificateDescriptionX509DescriptionArrayOutput) ToCertificateCertificateDescriptionX509DescriptionArrayOutputWithContext

func (o CertificateCertificateDescriptionX509DescriptionArrayOutput) ToCertificateCertificateDescriptionX509DescriptionArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionArrayOutput

type CertificateCertificateDescriptionX509DescriptionCaOption

type CertificateCertificateDescriptionX509DescriptionCaOption struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa *bool `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
	MaxIssuerPathLength *int `pulumi:"maxIssuerPathLength"`
}

type CertificateCertificateDescriptionX509DescriptionCaOptionArgs

type CertificateCertificateDescriptionX509DescriptionCaOptionArgs struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa pulumi.BoolPtrInput `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
	MaxIssuerPathLength pulumi.IntPtrInput `pulumi:"maxIssuerPathLength"`
}

func (CertificateCertificateDescriptionX509DescriptionCaOptionArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionCaOptionArgs) ToCertificateCertificateDescriptionX509DescriptionCaOptionOutput

func (CertificateCertificateDescriptionX509DescriptionCaOptionArgs) ToCertificateCertificateDescriptionX509DescriptionCaOptionOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionCaOptionArgs) ToCertificateCertificateDescriptionX509DescriptionCaOptionOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionCaOptionOutput

type CertificateCertificateDescriptionX509DescriptionCaOptionArray

type CertificateCertificateDescriptionX509DescriptionCaOptionArray []CertificateCertificateDescriptionX509DescriptionCaOptionInput

func (CertificateCertificateDescriptionX509DescriptionCaOptionArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionCaOptionArray) ToCertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput

func (CertificateCertificateDescriptionX509DescriptionCaOptionArray) ToCertificateCertificateDescriptionX509DescriptionCaOptionArrayOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionCaOptionArray) ToCertificateCertificateDescriptionX509DescriptionCaOptionArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput

type CertificateCertificateDescriptionX509DescriptionCaOptionArrayInput

type CertificateCertificateDescriptionX509DescriptionCaOptionArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput() CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionCaOptionArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput
}

CertificateCertificateDescriptionX509DescriptionCaOptionArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionCaOptionArray and CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionCaOptionArrayInput` via:

CertificateCertificateDescriptionX509DescriptionCaOptionArray{ CertificateCertificateDescriptionX509DescriptionCaOptionArgs{...} }

type CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput

type CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput) Index

func (CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput) ToCertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput

func (CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput) ToCertificateCertificateDescriptionX509DescriptionCaOptionArrayOutputWithContext

func (o CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput) ToCertificateCertificateDescriptionX509DescriptionCaOptionArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionCaOptionArrayOutput

type CertificateCertificateDescriptionX509DescriptionCaOptionInput

type CertificateCertificateDescriptionX509DescriptionCaOptionInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionCaOptionOutput() CertificateCertificateDescriptionX509DescriptionCaOptionOutput
	ToCertificateCertificateDescriptionX509DescriptionCaOptionOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionCaOptionOutput
}

CertificateCertificateDescriptionX509DescriptionCaOptionInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionCaOptionArgs and CertificateCertificateDescriptionX509DescriptionCaOptionOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionCaOptionInput` via:

CertificateCertificateDescriptionX509DescriptionCaOptionArgs{...}

type CertificateCertificateDescriptionX509DescriptionCaOptionOutput

type CertificateCertificateDescriptionX509DescriptionCaOptionOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionCaOptionOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionCaOptionOutput) IsCa

When true, the "CA" in Basic Constraints extension will be set to true.

func (CertificateCertificateDescriptionX509DescriptionCaOptionOutput) MaxIssuerPathLength

Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.

func (CertificateCertificateDescriptionX509DescriptionCaOptionOutput) ToCertificateCertificateDescriptionX509DescriptionCaOptionOutput

func (CertificateCertificateDescriptionX509DescriptionCaOptionOutput) ToCertificateCertificateDescriptionX509DescriptionCaOptionOutputWithContext

func (o CertificateCertificateDescriptionX509DescriptionCaOptionOutput) ToCertificateCertificateDescriptionX509DescriptionCaOptionOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionCaOptionOutput

type CertificateCertificateDescriptionX509DescriptionInput

type CertificateCertificateDescriptionX509DescriptionInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionOutput() CertificateCertificateDescriptionX509DescriptionOutput
	ToCertificateCertificateDescriptionX509DescriptionOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionOutput
}

CertificateCertificateDescriptionX509DescriptionInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionArgs and CertificateCertificateDescriptionX509DescriptionOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionInput` via:

CertificateCertificateDescriptionX509DescriptionArgs{...}

type CertificateCertificateDescriptionX509DescriptionKeyUsage

type CertificateCertificateDescriptionX509DescriptionKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	BaseKeyUsages []CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsage `pulumi:"baseKeyUsages"`
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	ExtendedKeyUsages []CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsage `pulumi:"extendedKeyUsages"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// Structure is documented below.
	UnknownExtendedKeyUsages []CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsage `pulumi:"unknownExtendedKeyUsages"`
}

type CertificateCertificateDescriptionX509DescriptionKeyUsageArgs

type CertificateCertificateDescriptionX509DescriptionKeyUsageArgs struct {
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	BaseKeyUsages CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayInput `pulumi:"baseKeyUsages"`
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	ExtendedKeyUsages CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayInput `pulumi:"extendedKeyUsages"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// Structure is documented below.
	UnknownExtendedKeyUsages CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayInput `pulumi:"unknownExtendedKeyUsages"`
}

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageArray

type CertificateCertificateDescriptionX509DescriptionKeyUsageArray []CertificateCertificateDescriptionX509DescriptionKeyUsageInput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageArrayInput

type CertificateCertificateDescriptionX509DescriptionKeyUsageArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput() CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput
}

CertificateCertificateDescriptionX509DescriptionKeyUsageArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionKeyUsageArray and CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionKeyUsageArrayInput` via:

CertificateCertificateDescriptionX509DescriptionKeyUsageArray{ CertificateCertificateDescriptionX509DescriptionKeyUsageArgs{...} }

type CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput) Index

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutputWithContext

func (o CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageArrayOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsage

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	CertSign *bool `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment *bool `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign *bool `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment *bool `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly *bool `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature *bool `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly *bool `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement *bool `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment *bool `pulumi:"keyEncipherment"`
}

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs struct {
	// The key may be used to sign certificates.
	CertSign pulumi.BoolPtrInput `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment pulumi.BoolPtrInput `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign pulumi.BoolPtrInput `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment pulumi.BoolPtrInput `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly pulumi.BoolPtrInput `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature pulumi.BoolPtrInput `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly pulumi.BoolPtrInput `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement pulumi.BoolPtrInput `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment pulumi.BoolPtrInput `pulumi:"keyEncipherment"`
}

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArray

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArray []CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageInput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayInput

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput() CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput
}

CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArray and CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayInput` via:

CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArray{ CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs{...} }

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArrayOutputWithContext

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageInput

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput() CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput
	ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput
}

CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs and CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageInput` via:

CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs{...}

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) CertSign

The key may be used to sign certificates.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) CrlSign

The key may be used sign certificate revocation lists.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) DataEncipherment

The key may be used to encipher data.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) DecipherOnly

The key may be used to decipher only.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) DigitalSignature

The key may be used for digital signatures.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) EncipherOnly

The key may be used to encipher only.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) KeyEncipherment

The key may be used to encipher other keys.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageOutputWithContext

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsage

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth *bool `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning *bool `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection *bool `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning *bool `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth *bool `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping *bool `pulumi:"timeStamping"`
}

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth pulumi.BoolPtrInput `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning pulumi.BoolPtrInput `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection pulumi.BoolPtrInput `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning pulumi.BoolPtrInput `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth pulumi.BoolPtrInput `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping pulumi.BoolPtrInput `pulumi:"timeStamping"`
}

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutputWithContext

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArray

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArray []CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageInput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayInput

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput() CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput
}

CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArray and CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayInput` via:

CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArray{ CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs{...} }

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArrayOutputWithContext

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageInput

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput() CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput
	ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput
}

CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs and CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageInput` via:

CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs{...}

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageOutputWithContext

type CertificateCertificateDescriptionX509DescriptionKeyUsageInput

type CertificateCertificateDescriptionX509DescriptionKeyUsageInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionKeyUsageOutput() CertificateCertificateDescriptionX509DescriptionKeyUsageOutput
	ToCertificateCertificateDescriptionX509DescriptionKeyUsageOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageOutput
}

CertificateCertificateDescriptionX509DescriptionKeyUsageInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionKeyUsageArgs and CertificateCertificateDescriptionX509DescriptionKeyUsageOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionKeyUsageInput` via:

CertificateCertificateDescriptionX509DescriptionKeyUsageArgs{...}

type CertificateCertificateDescriptionX509DescriptionKeyUsageOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionKeyUsageOutput) BaseKeyUsages

Describes high-level ways in which a key may be used. Structure is documented below.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageOutput) ExtendedKeyUsages

Describes high-level ways in which a key may be used. Structure is documented below.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageOutputWithContext

func (o CertificateCertificateDescriptionX509DescriptionKeyUsageOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageOutput) UnknownExtendedKeyUsages

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages. Structure is documented below.

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsage

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsage struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs) ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutputWithContext

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArray

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArray []CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageInput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArray) ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayInput

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput() CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput
}

CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArray and CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayInput` via:

CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArray{ CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs{...} }

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageInput

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput() CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput
	ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput
}

CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs and CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageInput` via:

CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs{...}

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput

type CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput

func (CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutput) ToCertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageOutputWithContext

type CertificateCertificateDescriptionX509DescriptionNameConstraint

type CertificateCertificateDescriptionX509DescriptionNameConstraint struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical *bool `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	ExcludedDnsNames []string `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses []string `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges []string `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	ExcludedUris []string `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	PermittedDnsNames []string `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses []string `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges []string `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	PermittedUris []string `pulumi:"permittedUris"`
}

type CertificateCertificateDescriptionX509DescriptionNameConstraintArgs

type CertificateCertificateDescriptionX509DescriptionNameConstraintArgs struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical pulumi.BoolPtrInput `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	ExcludedDnsNames pulumi.StringArrayInput `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses pulumi.StringArrayInput `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges pulumi.StringArrayInput `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	ExcludedUris pulumi.StringArrayInput `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	PermittedDnsNames pulumi.StringArrayInput `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses pulumi.StringArrayInput `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges pulumi.StringArrayInput `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	PermittedUris pulumi.StringArrayInput `pulumi:"permittedUris"`
}

func (CertificateCertificateDescriptionX509DescriptionNameConstraintArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionNameConstraintArgs) ToCertificateCertificateDescriptionX509DescriptionNameConstraintOutput

func (CertificateCertificateDescriptionX509DescriptionNameConstraintArgs) ToCertificateCertificateDescriptionX509DescriptionNameConstraintOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionNameConstraintArgs) ToCertificateCertificateDescriptionX509DescriptionNameConstraintOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionNameConstraintOutput

type CertificateCertificateDescriptionX509DescriptionNameConstraintArray

type CertificateCertificateDescriptionX509DescriptionNameConstraintArray []CertificateCertificateDescriptionX509DescriptionNameConstraintInput

func (CertificateCertificateDescriptionX509DescriptionNameConstraintArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionNameConstraintArray) ToCertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput

func (CertificateCertificateDescriptionX509DescriptionNameConstraintArray) ToCertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionNameConstraintArray) ToCertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput

type CertificateCertificateDescriptionX509DescriptionNameConstraintArrayInput

type CertificateCertificateDescriptionX509DescriptionNameConstraintArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput() CertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput
}

CertificateCertificateDescriptionX509DescriptionNameConstraintArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionNameConstraintArray and CertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionNameConstraintArrayInput` via:

CertificateCertificateDescriptionX509DescriptionNameConstraintArray{ CertificateCertificateDescriptionX509DescriptionNameConstraintArgs{...} }

type CertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput

type CertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput) ToCertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput

func (CertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutput) ToCertificateCertificateDescriptionX509DescriptionNameConstraintArrayOutputWithContext

type CertificateCertificateDescriptionX509DescriptionNameConstraintInput

type CertificateCertificateDescriptionX509DescriptionNameConstraintInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionNameConstraintOutput() CertificateCertificateDescriptionX509DescriptionNameConstraintOutput
	ToCertificateCertificateDescriptionX509DescriptionNameConstraintOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionNameConstraintOutput
}

CertificateCertificateDescriptionX509DescriptionNameConstraintInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionNameConstraintArgs and CertificateCertificateDescriptionX509DescriptionNameConstraintOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionNameConstraintInput` via:

CertificateCertificateDescriptionX509DescriptionNameConstraintArgs{...}

type CertificateCertificateDescriptionX509DescriptionNameConstraintOutput

type CertificateCertificateDescriptionX509DescriptionNameConstraintOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) Critical

Indicates whether or not the name constraints are marked critical.

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) ExcludedDnsNames

Contains excluded DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) ExcludedEmailAddresses

Contains the excluded email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) ExcludedIpRanges

Contains the excluded IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) ExcludedUris

Contains the excluded URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) PermittedDnsNames

Contains permitted DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) PermittedEmailAddresses

Contains the permitted email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) PermittedIpRanges

Contains the permitted IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) PermittedUris

Contains the permitted URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) ToCertificateCertificateDescriptionX509DescriptionNameConstraintOutput

func (CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) ToCertificateCertificateDescriptionX509DescriptionNameConstraintOutputWithContext

func (o CertificateCertificateDescriptionX509DescriptionNameConstraintOutput) ToCertificateCertificateDescriptionX509DescriptionNameConstraintOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionNameConstraintOutput

type CertificateCertificateDescriptionX509DescriptionOutput

type CertificateCertificateDescriptionX509DescriptionOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionOutput) AdditionalExtensions

(Output) Describes custom X.509 extensions. Structure is documented below.

func (CertificateCertificateDescriptionX509DescriptionOutput) AiaOcspServers

(Output) Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (CertificateCertificateDescriptionX509DescriptionOutput) CaOptions

(Output) Describes values that are relevant in a CA certificate. Structure is documented below.

func (CertificateCertificateDescriptionX509DescriptionOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionOutput) KeyUsages

(Output) Indicates the intended use for keys that correspond to a certificate. Structure is documented below.

func (CertificateCertificateDescriptionX509DescriptionOutput) NameConstraints

(Output) Describes the X.509 name constraints extension. Structure is documented below.

func (CertificateCertificateDescriptionX509DescriptionOutput) PolicyIds

(Output) Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4. Structure is documented below.

func (CertificateCertificateDescriptionX509DescriptionOutput) ToCertificateCertificateDescriptionX509DescriptionOutput

func (CertificateCertificateDescriptionX509DescriptionOutput) ToCertificateCertificateDescriptionX509DescriptionOutputWithContext

func (o CertificateCertificateDescriptionX509DescriptionOutput) ToCertificateCertificateDescriptionX509DescriptionOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionOutput

type CertificateCertificateDescriptionX509DescriptionPolicyId

type CertificateCertificateDescriptionX509DescriptionPolicyId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateCertificateDescriptionX509DescriptionPolicyIdArgs

type CertificateCertificateDescriptionX509DescriptionPolicyIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArgs) ElementType

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArgs) ToCertificateCertificateDescriptionX509DescriptionPolicyIdOutput

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArgs) ToCertificateCertificateDescriptionX509DescriptionPolicyIdOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionPolicyIdArgs) ToCertificateCertificateDescriptionX509DescriptionPolicyIdOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionPolicyIdOutput

type CertificateCertificateDescriptionX509DescriptionPolicyIdArray

type CertificateCertificateDescriptionX509DescriptionPolicyIdArray []CertificateCertificateDescriptionX509DescriptionPolicyIdInput

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArray) ElementType

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArray) ToCertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArray) ToCertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutputWithContext

func (i CertificateCertificateDescriptionX509DescriptionPolicyIdArray) ToCertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput

type CertificateCertificateDescriptionX509DescriptionPolicyIdArrayInput

type CertificateCertificateDescriptionX509DescriptionPolicyIdArrayInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput() CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput
	ToCertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput
}

CertificateCertificateDescriptionX509DescriptionPolicyIdArrayInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionPolicyIdArray and CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionPolicyIdArrayInput` via:

CertificateCertificateDescriptionX509DescriptionPolicyIdArray{ CertificateCertificateDescriptionX509DescriptionPolicyIdArgs{...} }

type CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput

type CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput) Index

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput) ToCertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput

func (CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput) ToCertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutputWithContext

func (o CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput) ToCertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionPolicyIdArrayOutput

type CertificateCertificateDescriptionX509DescriptionPolicyIdInput

type CertificateCertificateDescriptionX509DescriptionPolicyIdInput interface {
	pulumi.Input

	ToCertificateCertificateDescriptionX509DescriptionPolicyIdOutput() CertificateCertificateDescriptionX509DescriptionPolicyIdOutput
	ToCertificateCertificateDescriptionX509DescriptionPolicyIdOutputWithContext(context.Context) CertificateCertificateDescriptionX509DescriptionPolicyIdOutput
}

CertificateCertificateDescriptionX509DescriptionPolicyIdInput is an input type that accepts CertificateCertificateDescriptionX509DescriptionPolicyIdArgs and CertificateCertificateDescriptionX509DescriptionPolicyIdOutput values. You can construct a concrete instance of `CertificateCertificateDescriptionX509DescriptionPolicyIdInput` via:

CertificateCertificateDescriptionX509DescriptionPolicyIdArgs{...}

type CertificateCertificateDescriptionX509DescriptionPolicyIdOutput

type CertificateCertificateDescriptionX509DescriptionPolicyIdOutput struct{ *pulumi.OutputState }

func (CertificateCertificateDescriptionX509DescriptionPolicyIdOutput) ElementType

func (CertificateCertificateDescriptionX509DescriptionPolicyIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CertificateCertificateDescriptionX509DescriptionPolicyIdOutput) ToCertificateCertificateDescriptionX509DescriptionPolicyIdOutput

func (CertificateCertificateDescriptionX509DescriptionPolicyIdOutput) ToCertificateCertificateDescriptionX509DescriptionPolicyIdOutputWithContext

func (o CertificateCertificateDescriptionX509DescriptionPolicyIdOutput) ToCertificateCertificateDescriptionX509DescriptionPolicyIdOutputWithContext(ctx context.Context) CertificateCertificateDescriptionX509DescriptionPolicyIdOutput

type CertificateConfig

type CertificateConfig struct {
	// A PublicKey describes a public key.
	// Structure is documented below.
	//
	// <a name="nestedX509Config"></a>The `x509Config` block supports:
	PublicKey CertificateConfigPublicKey `pulumi:"publicKey"`
	// Specifies some of the values in a certificate that are related to the subject.
	// Structure is documented below.
	SubjectConfig CertificateConfigSubjectConfig `pulumi:"subjectConfig"`
	// Describes how some of the technical X.509 fields in a certificate should be populated.
	// Structure is documented below.
	X509Config CertificateConfigX509Config `pulumi:"x509Config"`
}

type CertificateConfigArgs

type CertificateConfigArgs struct {
	// A PublicKey describes a public key.
	// Structure is documented below.
	//
	// <a name="nestedX509Config"></a>The `x509Config` block supports:
	PublicKey CertificateConfigPublicKeyInput `pulumi:"publicKey"`
	// Specifies some of the values in a certificate that are related to the subject.
	// Structure is documented below.
	SubjectConfig CertificateConfigSubjectConfigInput `pulumi:"subjectConfig"`
	// Describes how some of the technical X.509 fields in a certificate should be populated.
	// Structure is documented below.
	X509Config CertificateConfigX509ConfigInput `pulumi:"x509Config"`
}

func (CertificateConfigArgs) ElementType

func (CertificateConfigArgs) ElementType() reflect.Type

func (CertificateConfigArgs) ToCertificateConfigOutput

func (i CertificateConfigArgs) ToCertificateConfigOutput() CertificateConfigOutput

func (CertificateConfigArgs) ToCertificateConfigOutputWithContext

func (i CertificateConfigArgs) ToCertificateConfigOutputWithContext(ctx context.Context) CertificateConfigOutput

func (CertificateConfigArgs) ToCertificateConfigPtrOutput

func (i CertificateConfigArgs) ToCertificateConfigPtrOutput() CertificateConfigPtrOutput

func (CertificateConfigArgs) ToCertificateConfigPtrOutputWithContext

func (i CertificateConfigArgs) ToCertificateConfigPtrOutputWithContext(ctx context.Context) CertificateConfigPtrOutput

type CertificateConfigInput

type CertificateConfigInput interface {
	pulumi.Input

	ToCertificateConfigOutput() CertificateConfigOutput
	ToCertificateConfigOutputWithContext(context.Context) CertificateConfigOutput
}

CertificateConfigInput is an input type that accepts CertificateConfigArgs and CertificateConfigOutput values. You can construct a concrete instance of `CertificateConfigInput` via:

CertificateConfigArgs{...}

type CertificateConfigOutput

type CertificateConfigOutput struct{ *pulumi.OutputState }

func (CertificateConfigOutput) ElementType

func (CertificateConfigOutput) ElementType() reflect.Type

func (CertificateConfigOutput) PublicKey

A PublicKey describes a public key. Structure is documented below.

<a name="nestedX509Config"></a>The `x509Config` block supports:

func (CertificateConfigOutput) SubjectConfig

Specifies some of the values in a certificate that are related to the subject. Structure is documented below.

func (CertificateConfigOutput) ToCertificateConfigOutput

func (o CertificateConfigOutput) ToCertificateConfigOutput() CertificateConfigOutput

func (CertificateConfigOutput) ToCertificateConfigOutputWithContext

func (o CertificateConfigOutput) ToCertificateConfigOutputWithContext(ctx context.Context) CertificateConfigOutput

func (CertificateConfigOutput) ToCertificateConfigPtrOutput

func (o CertificateConfigOutput) ToCertificateConfigPtrOutput() CertificateConfigPtrOutput

func (CertificateConfigOutput) ToCertificateConfigPtrOutputWithContext

func (o CertificateConfigOutput) ToCertificateConfigPtrOutputWithContext(ctx context.Context) CertificateConfigPtrOutput

func (CertificateConfigOutput) X509Config

Describes how some of the technical X.509 fields in a certificate should be populated. Structure is documented below.

type CertificateConfigPtrInput

type CertificateConfigPtrInput interface {
	pulumi.Input

	ToCertificateConfigPtrOutput() CertificateConfigPtrOutput
	ToCertificateConfigPtrOutputWithContext(context.Context) CertificateConfigPtrOutput
}

CertificateConfigPtrInput is an input type that accepts CertificateConfigArgs, CertificateConfigPtr and CertificateConfigPtrOutput values. You can construct a concrete instance of `CertificateConfigPtrInput` via:

        CertificateConfigArgs{...}

or:

        nil

type CertificateConfigPtrOutput

type CertificateConfigPtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigPtrOutput) Elem

func (CertificateConfigPtrOutput) ElementType

func (CertificateConfigPtrOutput) ElementType() reflect.Type

func (CertificateConfigPtrOutput) PublicKey

A PublicKey describes a public key. Structure is documented below.

<a name="nestedX509Config"></a>The `x509Config` block supports:

func (CertificateConfigPtrOutput) SubjectConfig

Specifies some of the values in a certificate that are related to the subject. Structure is documented below.

func (CertificateConfigPtrOutput) ToCertificateConfigPtrOutput

func (o CertificateConfigPtrOutput) ToCertificateConfigPtrOutput() CertificateConfigPtrOutput

func (CertificateConfigPtrOutput) ToCertificateConfigPtrOutputWithContext

func (o CertificateConfigPtrOutput) ToCertificateConfigPtrOutputWithContext(ctx context.Context) CertificateConfigPtrOutput

func (CertificateConfigPtrOutput) X509Config

Describes how some of the technical X.509 fields in a certificate should be populated. Structure is documented below.

type CertificateConfigPublicKey

type CertificateConfigPublicKey struct {
	// The format of the public key. Currently, only PEM format is supported.
	// Possible values are: `KEY_TYPE_UNSPECIFIED`, `PEM`.
	Format string `pulumi:"format"`
	// Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.
	Key *string `pulumi:"key"`
}

type CertificateConfigPublicKeyArgs

type CertificateConfigPublicKeyArgs struct {
	// The format of the public key. Currently, only PEM format is supported.
	// Possible values are: `KEY_TYPE_UNSPECIFIED`, `PEM`.
	Format pulumi.StringInput `pulumi:"format"`
	// Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.
	Key pulumi.StringPtrInput `pulumi:"key"`
}

func (CertificateConfigPublicKeyArgs) ElementType

func (CertificateConfigPublicKeyArgs) ToCertificateConfigPublicKeyOutput

func (i CertificateConfigPublicKeyArgs) ToCertificateConfigPublicKeyOutput() CertificateConfigPublicKeyOutput

func (CertificateConfigPublicKeyArgs) ToCertificateConfigPublicKeyOutputWithContext

func (i CertificateConfigPublicKeyArgs) ToCertificateConfigPublicKeyOutputWithContext(ctx context.Context) CertificateConfigPublicKeyOutput

func (CertificateConfigPublicKeyArgs) ToCertificateConfigPublicKeyPtrOutput

func (i CertificateConfigPublicKeyArgs) ToCertificateConfigPublicKeyPtrOutput() CertificateConfigPublicKeyPtrOutput

func (CertificateConfigPublicKeyArgs) ToCertificateConfigPublicKeyPtrOutputWithContext

func (i CertificateConfigPublicKeyArgs) ToCertificateConfigPublicKeyPtrOutputWithContext(ctx context.Context) CertificateConfigPublicKeyPtrOutput

type CertificateConfigPublicKeyInput

type CertificateConfigPublicKeyInput interface {
	pulumi.Input

	ToCertificateConfigPublicKeyOutput() CertificateConfigPublicKeyOutput
	ToCertificateConfigPublicKeyOutputWithContext(context.Context) CertificateConfigPublicKeyOutput
}

CertificateConfigPublicKeyInput is an input type that accepts CertificateConfigPublicKeyArgs and CertificateConfigPublicKeyOutput values. You can construct a concrete instance of `CertificateConfigPublicKeyInput` via:

CertificateConfigPublicKeyArgs{...}

type CertificateConfigPublicKeyOutput

type CertificateConfigPublicKeyOutput struct{ *pulumi.OutputState }

func (CertificateConfigPublicKeyOutput) ElementType

func (CertificateConfigPublicKeyOutput) Format

The format of the public key. Currently, only PEM format is supported. Possible values are: `KEY_TYPE_UNSPECIFIED`, `PEM`.

func (CertificateConfigPublicKeyOutput) Key

Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.

func (CertificateConfigPublicKeyOutput) ToCertificateConfigPublicKeyOutput

func (o CertificateConfigPublicKeyOutput) ToCertificateConfigPublicKeyOutput() CertificateConfigPublicKeyOutput

func (CertificateConfigPublicKeyOutput) ToCertificateConfigPublicKeyOutputWithContext

func (o CertificateConfigPublicKeyOutput) ToCertificateConfigPublicKeyOutputWithContext(ctx context.Context) CertificateConfigPublicKeyOutput

func (CertificateConfigPublicKeyOutput) ToCertificateConfigPublicKeyPtrOutput

func (o CertificateConfigPublicKeyOutput) ToCertificateConfigPublicKeyPtrOutput() CertificateConfigPublicKeyPtrOutput

func (CertificateConfigPublicKeyOutput) ToCertificateConfigPublicKeyPtrOutputWithContext

func (o CertificateConfigPublicKeyOutput) ToCertificateConfigPublicKeyPtrOutputWithContext(ctx context.Context) CertificateConfigPublicKeyPtrOutput

type CertificateConfigPublicKeyPtrInput

type CertificateConfigPublicKeyPtrInput interface {
	pulumi.Input

	ToCertificateConfigPublicKeyPtrOutput() CertificateConfigPublicKeyPtrOutput
	ToCertificateConfigPublicKeyPtrOutputWithContext(context.Context) CertificateConfigPublicKeyPtrOutput
}

CertificateConfigPublicKeyPtrInput is an input type that accepts CertificateConfigPublicKeyArgs, CertificateConfigPublicKeyPtr and CertificateConfigPublicKeyPtrOutput values. You can construct a concrete instance of `CertificateConfigPublicKeyPtrInput` via:

        CertificateConfigPublicKeyArgs{...}

or:

        nil

type CertificateConfigPublicKeyPtrOutput

type CertificateConfigPublicKeyPtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigPublicKeyPtrOutput) Elem

func (CertificateConfigPublicKeyPtrOutput) ElementType

func (CertificateConfigPublicKeyPtrOutput) Format

The format of the public key. Currently, only PEM format is supported. Possible values are: `KEY_TYPE_UNSPECIFIED`, `PEM`.

func (CertificateConfigPublicKeyPtrOutput) Key

Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.

func (CertificateConfigPublicKeyPtrOutput) ToCertificateConfigPublicKeyPtrOutput

func (o CertificateConfigPublicKeyPtrOutput) ToCertificateConfigPublicKeyPtrOutput() CertificateConfigPublicKeyPtrOutput

func (CertificateConfigPublicKeyPtrOutput) ToCertificateConfigPublicKeyPtrOutputWithContext

func (o CertificateConfigPublicKeyPtrOutput) ToCertificateConfigPublicKeyPtrOutputWithContext(ctx context.Context) CertificateConfigPublicKeyPtrOutput

type CertificateConfigSubjectConfig

type CertificateConfigSubjectConfig struct {
	// Contains distinguished name fields such as the location and organization.
	// Structure is documented below.
	Subject CertificateConfigSubjectConfigSubject `pulumi:"subject"`
	// The subject alternative name fields.
	// Structure is documented below.
	SubjectAltName *CertificateConfigSubjectConfigSubjectAltName `pulumi:"subjectAltName"`
}

type CertificateConfigSubjectConfigArgs

type CertificateConfigSubjectConfigArgs struct {
	// Contains distinguished name fields such as the location and organization.
	// Structure is documented below.
	Subject CertificateConfigSubjectConfigSubjectInput `pulumi:"subject"`
	// The subject alternative name fields.
	// Structure is documented below.
	SubjectAltName CertificateConfigSubjectConfigSubjectAltNamePtrInput `pulumi:"subjectAltName"`
}

func (CertificateConfigSubjectConfigArgs) ElementType

func (CertificateConfigSubjectConfigArgs) ToCertificateConfigSubjectConfigOutput

func (i CertificateConfigSubjectConfigArgs) ToCertificateConfigSubjectConfigOutput() CertificateConfigSubjectConfigOutput

func (CertificateConfigSubjectConfigArgs) ToCertificateConfigSubjectConfigOutputWithContext

func (i CertificateConfigSubjectConfigArgs) ToCertificateConfigSubjectConfigOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigOutput

func (CertificateConfigSubjectConfigArgs) ToCertificateConfigSubjectConfigPtrOutput

func (i CertificateConfigSubjectConfigArgs) ToCertificateConfigSubjectConfigPtrOutput() CertificateConfigSubjectConfigPtrOutput

func (CertificateConfigSubjectConfigArgs) ToCertificateConfigSubjectConfigPtrOutputWithContext

func (i CertificateConfigSubjectConfigArgs) ToCertificateConfigSubjectConfigPtrOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigPtrOutput

type CertificateConfigSubjectConfigInput

type CertificateConfigSubjectConfigInput interface {
	pulumi.Input

	ToCertificateConfigSubjectConfigOutput() CertificateConfigSubjectConfigOutput
	ToCertificateConfigSubjectConfigOutputWithContext(context.Context) CertificateConfigSubjectConfigOutput
}

CertificateConfigSubjectConfigInput is an input type that accepts CertificateConfigSubjectConfigArgs and CertificateConfigSubjectConfigOutput values. You can construct a concrete instance of `CertificateConfigSubjectConfigInput` via:

CertificateConfigSubjectConfigArgs{...}

type CertificateConfigSubjectConfigOutput

type CertificateConfigSubjectConfigOutput struct{ *pulumi.OutputState }

func (CertificateConfigSubjectConfigOutput) ElementType

func (CertificateConfigSubjectConfigOutput) Subject

Contains distinguished name fields such as the location and organization. Structure is documented below.

func (CertificateConfigSubjectConfigOutput) SubjectAltName

The subject alternative name fields. Structure is documented below.

func (CertificateConfigSubjectConfigOutput) ToCertificateConfigSubjectConfigOutput

func (o CertificateConfigSubjectConfigOutput) ToCertificateConfigSubjectConfigOutput() CertificateConfigSubjectConfigOutput

func (CertificateConfigSubjectConfigOutput) ToCertificateConfigSubjectConfigOutputWithContext

func (o CertificateConfigSubjectConfigOutput) ToCertificateConfigSubjectConfigOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigOutput

func (CertificateConfigSubjectConfigOutput) ToCertificateConfigSubjectConfigPtrOutput

func (o CertificateConfigSubjectConfigOutput) ToCertificateConfigSubjectConfigPtrOutput() CertificateConfigSubjectConfigPtrOutput

func (CertificateConfigSubjectConfigOutput) ToCertificateConfigSubjectConfigPtrOutputWithContext

func (o CertificateConfigSubjectConfigOutput) ToCertificateConfigSubjectConfigPtrOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigPtrOutput

type CertificateConfigSubjectConfigPtrInput

type CertificateConfigSubjectConfigPtrInput interface {
	pulumi.Input

	ToCertificateConfigSubjectConfigPtrOutput() CertificateConfigSubjectConfigPtrOutput
	ToCertificateConfigSubjectConfigPtrOutputWithContext(context.Context) CertificateConfigSubjectConfigPtrOutput
}

CertificateConfigSubjectConfigPtrInput is an input type that accepts CertificateConfigSubjectConfigArgs, CertificateConfigSubjectConfigPtr and CertificateConfigSubjectConfigPtrOutput values. You can construct a concrete instance of `CertificateConfigSubjectConfigPtrInput` via:

        CertificateConfigSubjectConfigArgs{...}

or:

        nil

type CertificateConfigSubjectConfigPtrOutput

type CertificateConfigSubjectConfigPtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigSubjectConfigPtrOutput) Elem

func (CertificateConfigSubjectConfigPtrOutput) ElementType

func (CertificateConfigSubjectConfigPtrOutput) Subject

Contains distinguished name fields such as the location and organization. Structure is documented below.

func (CertificateConfigSubjectConfigPtrOutput) SubjectAltName

The subject alternative name fields. Structure is documented below.

func (CertificateConfigSubjectConfigPtrOutput) ToCertificateConfigSubjectConfigPtrOutput

func (o CertificateConfigSubjectConfigPtrOutput) ToCertificateConfigSubjectConfigPtrOutput() CertificateConfigSubjectConfigPtrOutput

func (CertificateConfigSubjectConfigPtrOutput) ToCertificateConfigSubjectConfigPtrOutputWithContext

func (o CertificateConfigSubjectConfigPtrOutput) ToCertificateConfigSubjectConfigPtrOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigPtrOutput

type CertificateConfigSubjectConfigSubject

type CertificateConfigSubjectConfigSubject struct {
	// The common name of the distinguished name.
	CommonName string `pulumi:"commonName"`
	// The country code of the subject.
	CountryCode *string `pulumi:"countryCode"`
	// The locality or city of the subject.
	Locality *string `pulumi:"locality"`
	// The organization of the subject.
	Organization string `pulumi:"organization"`
	// The organizational unit of the subject.
	OrganizationalUnit *string `pulumi:"organizationalUnit"`
	// The postal code of the subject.
	PostalCode *string `pulumi:"postalCode"`
	// The province, territory, or regional state of the subject.
	Province *string `pulumi:"province"`
	// The street address of the subject.
	StreetAddress *string `pulumi:"streetAddress"`
}

type CertificateConfigSubjectConfigSubjectAltName

type CertificateConfigSubjectConfigSubjectAltName struct {
	// Contains only valid, fully-qualified host names.
	DnsNames []string `pulumi:"dnsNames"`
	// Contains only valid RFC 2822 E-mail addresses.
	EmailAddresses []string `pulumi:"emailAddresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	IpAddresses []string `pulumi:"ipAddresses"`
	// Contains only valid RFC 3986 URIs.
	Uris []string `pulumi:"uris"`
}

type CertificateConfigSubjectConfigSubjectAltNameArgs

type CertificateConfigSubjectConfigSubjectAltNameArgs struct {
	// Contains only valid, fully-qualified host names.
	DnsNames pulumi.StringArrayInput `pulumi:"dnsNames"`
	// Contains only valid RFC 2822 E-mail addresses.
	EmailAddresses pulumi.StringArrayInput `pulumi:"emailAddresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	IpAddresses pulumi.StringArrayInput `pulumi:"ipAddresses"`
	// Contains only valid RFC 3986 URIs.
	Uris pulumi.StringArrayInput `pulumi:"uris"`
}

func (CertificateConfigSubjectConfigSubjectAltNameArgs) ElementType

func (CertificateConfigSubjectConfigSubjectAltNameArgs) ToCertificateConfigSubjectConfigSubjectAltNameOutput

func (i CertificateConfigSubjectConfigSubjectAltNameArgs) ToCertificateConfigSubjectConfigSubjectAltNameOutput() CertificateConfigSubjectConfigSubjectAltNameOutput

func (CertificateConfigSubjectConfigSubjectAltNameArgs) ToCertificateConfigSubjectConfigSubjectAltNameOutputWithContext

func (i CertificateConfigSubjectConfigSubjectAltNameArgs) ToCertificateConfigSubjectConfigSubjectAltNameOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectAltNameOutput

func (CertificateConfigSubjectConfigSubjectAltNameArgs) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutput

func (i CertificateConfigSubjectConfigSubjectAltNameArgs) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutput() CertificateConfigSubjectConfigSubjectAltNamePtrOutput

func (CertificateConfigSubjectConfigSubjectAltNameArgs) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutputWithContext

func (i CertificateConfigSubjectConfigSubjectAltNameArgs) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectAltNamePtrOutput

type CertificateConfigSubjectConfigSubjectAltNameInput

type CertificateConfigSubjectConfigSubjectAltNameInput interface {
	pulumi.Input

	ToCertificateConfigSubjectConfigSubjectAltNameOutput() CertificateConfigSubjectConfigSubjectAltNameOutput
	ToCertificateConfigSubjectConfigSubjectAltNameOutputWithContext(context.Context) CertificateConfigSubjectConfigSubjectAltNameOutput
}

CertificateConfigSubjectConfigSubjectAltNameInput is an input type that accepts CertificateConfigSubjectConfigSubjectAltNameArgs and CertificateConfigSubjectConfigSubjectAltNameOutput values. You can construct a concrete instance of `CertificateConfigSubjectConfigSubjectAltNameInput` via:

CertificateConfigSubjectConfigSubjectAltNameArgs{...}

type CertificateConfigSubjectConfigSubjectAltNameOutput

type CertificateConfigSubjectConfigSubjectAltNameOutput struct{ *pulumi.OutputState }

func (CertificateConfigSubjectConfigSubjectAltNameOutput) DnsNames

Contains only valid, fully-qualified host names.

func (CertificateConfigSubjectConfigSubjectAltNameOutput) ElementType

func (CertificateConfigSubjectConfigSubjectAltNameOutput) EmailAddresses

Contains only valid RFC 2822 E-mail addresses.

func (CertificateConfigSubjectConfigSubjectAltNameOutput) IpAddresses

Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.

func (CertificateConfigSubjectConfigSubjectAltNameOutput) ToCertificateConfigSubjectConfigSubjectAltNameOutput

func (o CertificateConfigSubjectConfigSubjectAltNameOutput) ToCertificateConfigSubjectConfigSubjectAltNameOutput() CertificateConfigSubjectConfigSubjectAltNameOutput

func (CertificateConfigSubjectConfigSubjectAltNameOutput) ToCertificateConfigSubjectConfigSubjectAltNameOutputWithContext

func (o CertificateConfigSubjectConfigSubjectAltNameOutput) ToCertificateConfigSubjectConfigSubjectAltNameOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectAltNameOutput

func (CertificateConfigSubjectConfigSubjectAltNameOutput) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutput

func (o CertificateConfigSubjectConfigSubjectAltNameOutput) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutput() CertificateConfigSubjectConfigSubjectAltNamePtrOutput

func (CertificateConfigSubjectConfigSubjectAltNameOutput) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutputWithContext

func (o CertificateConfigSubjectConfigSubjectAltNameOutput) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectAltNamePtrOutput

func (CertificateConfigSubjectConfigSubjectAltNameOutput) Uris

Contains only valid RFC 3986 URIs.

type CertificateConfigSubjectConfigSubjectAltNamePtrInput

type CertificateConfigSubjectConfigSubjectAltNamePtrInput interface {
	pulumi.Input

	ToCertificateConfigSubjectConfigSubjectAltNamePtrOutput() CertificateConfigSubjectConfigSubjectAltNamePtrOutput
	ToCertificateConfigSubjectConfigSubjectAltNamePtrOutputWithContext(context.Context) CertificateConfigSubjectConfigSubjectAltNamePtrOutput
}

CertificateConfigSubjectConfigSubjectAltNamePtrInput is an input type that accepts CertificateConfigSubjectConfigSubjectAltNameArgs, CertificateConfigSubjectConfigSubjectAltNamePtr and CertificateConfigSubjectConfigSubjectAltNamePtrOutput values. You can construct a concrete instance of `CertificateConfigSubjectConfigSubjectAltNamePtrInput` via:

        CertificateConfigSubjectConfigSubjectAltNameArgs{...}

or:

        nil

type CertificateConfigSubjectConfigSubjectAltNamePtrOutput

type CertificateConfigSubjectConfigSubjectAltNamePtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigSubjectConfigSubjectAltNamePtrOutput) DnsNames

Contains only valid, fully-qualified host names.

func (CertificateConfigSubjectConfigSubjectAltNamePtrOutput) Elem

func (CertificateConfigSubjectConfigSubjectAltNamePtrOutput) ElementType

func (CertificateConfigSubjectConfigSubjectAltNamePtrOutput) EmailAddresses

Contains only valid RFC 2822 E-mail addresses.

func (CertificateConfigSubjectConfigSubjectAltNamePtrOutput) IpAddresses

Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.

func (CertificateConfigSubjectConfigSubjectAltNamePtrOutput) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutput

func (CertificateConfigSubjectConfigSubjectAltNamePtrOutput) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutputWithContext

func (o CertificateConfigSubjectConfigSubjectAltNamePtrOutput) ToCertificateConfigSubjectConfigSubjectAltNamePtrOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectAltNamePtrOutput

func (CertificateConfigSubjectConfigSubjectAltNamePtrOutput) Uris

Contains only valid RFC 3986 URIs.

type CertificateConfigSubjectConfigSubjectArgs

type CertificateConfigSubjectConfigSubjectArgs struct {
	// The common name of the distinguished name.
	CommonName pulumi.StringInput `pulumi:"commonName"`
	// The country code of the subject.
	CountryCode pulumi.StringPtrInput `pulumi:"countryCode"`
	// The locality or city of the subject.
	Locality pulumi.StringPtrInput `pulumi:"locality"`
	// The organization of the subject.
	Organization pulumi.StringInput `pulumi:"organization"`
	// The organizational unit of the subject.
	OrganizationalUnit pulumi.StringPtrInput `pulumi:"organizationalUnit"`
	// The postal code of the subject.
	PostalCode pulumi.StringPtrInput `pulumi:"postalCode"`
	// The province, territory, or regional state of the subject.
	Province pulumi.StringPtrInput `pulumi:"province"`
	// The street address of the subject.
	StreetAddress pulumi.StringPtrInput `pulumi:"streetAddress"`
}

func (CertificateConfigSubjectConfigSubjectArgs) ElementType

func (CertificateConfigSubjectConfigSubjectArgs) ToCertificateConfigSubjectConfigSubjectOutput

func (i CertificateConfigSubjectConfigSubjectArgs) ToCertificateConfigSubjectConfigSubjectOutput() CertificateConfigSubjectConfigSubjectOutput

func (CertificateConfigSubjectConfigSubjectArgs) ToCertificateConfigSubjectConfigSubjectOutputWithContext

func (i CertificateConfigSubjectConfigSubjectArgs) ToCertificateConfigSubjectConfigSubjectOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectOutput

func (CertificateConfigSubjectConfigSubjectArgs) ToCertificateConfigSubjectConfigSubjectPtrOutput

func (i CertificateConfigSubjectConfigSubjectArgs) ToCertificateConfigSubjectConfigSubjectPtrOutput() CertificateConfigSubjectConfigSubjectPtrOutput

func (CertificateConfigSubjectConfigSubjectArgs) ToCertificateConfigSubjectConfigSubjectPtrOutputWithContext

func (i CertificateConfigSubjectConfigSubjectArgs) ToCertificateConfigSubjectConfigSubjectPtrOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectPtrOutput

type CertificateConfigSubjectConfigSubjectInput

type CertificateConfigSubjectConfigSubjectInput interface {
	pulumi.Input

	ToCertificateConfigSubjectConfigSubjectOutput() CertificateConfigSubjectConfigSubjectOutput
	ToCertificateConfigSubjectConfigSubjectOutputWithContext(context.Context) CertificateConfigSubjectConfigSubjectOutput
}

CertificateConfigSubjectConfigSubjectInput is an input type that accepts CertificateConfigSubjectConfigSubjectArgs and CertificateConfigSubjectConfigSubjectOutput values. You can construct a concrete instance of `CertificateConfigSubjectConfigSubjectInput` via:

CertificateConfigSubjectConfigSubjectArgs{...}

type CertificateConfigSubjectConfigSubjectOutput

type CertificateConfigSubjectConfigSubjectOutput struct{ *pulumi.OutputState }

func (CertificateConfigSubjectConfigSubjectOutput) CommonName

The common name of the distinguished name.

func (CertificateConfigSubjectConfigSubjectOutput) CountryCode

The country code of the subject.

func (CertificateConfigSubjectConfigSubjectOutput) ElementType

func (CertificateConfigSubjectConfigSubjectOutput) Locality

The locality or city of the subject.

func (CertificateConfigSubjectConfigSubjectOutput) Organization

The organization of the subject.

func (CertificateConfigSubjectConfigSubjectOutput) OrganizationalUnit

The organizational unit of the subject.

func (CertificateConfigSubjectConfigSubjectOutput) PostalCode

The postal code of the subject.

func (CertificateConfigSubjectConfigSubjectOutput) Province

The province, territory, or regional state of the subject.

func (CertificateConfigSubjectConfigSubjectOutput) StreetAddress

The street address of the subject.

func (CertificateConfigSubjectConfigSubjectOutput) ToCertificateConfigSubjectConfigSubjectOutput

func (o CertificateConfigSubjectConfigSubjectOutput) ToCertificateConfigSubjectConfigSubjectOutput() CertificateConfigSubjectConfigSubjectOutput

func (CertificateConfigSubjectConfigSubjectOutput) ToCertificateConfigSubjectConfigSubjectOutputWithContext

func (o CertificateConfigSubjectConfigSubjectOutput) ToCertificateConfigSubjectConfigSubjectOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectOutput

func (CertificateConfigSubjectConfigSubjectOutput) ToCertificateConfigSubjectConfigSubjectPtrOutput

func (o CertificateConfigSubjectConfigSubjectOutput) ToCertificateConfigSubjectConfigSubjectPtrOutput() CertificateConfigSubjectConfigSubjectPtrOutput

func (CertificateConfigSubjectConfigSubjectOutput) ToCertificateConfigSubjectConfigSubjectPtrOutputWithContext

func (o CertificateConfigSubjectConfigSubjectOutput) ToCertificateConfigSubjectConfigSubjectPtrOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectPtrOutput

type CertificateConfigSubjectConfigSubjectPtrInput

type CertificateConfigSubjectConfigSubjectPtrInput interface {
	pulumi.Input

	ToCertificateConfigSubjectConfigSubjectPtrOutput() CertificateConfigSubjectConfigSubjectPtrOutput
	ToCertificateConfigSubjectConfigSubjectPtrOutputWithContext(context.Context) CertificateConfigSubjectConfigSubjectPtrOutput
}

CertificateConfigSubjectConfigSubjectPtrInput is an input type that accepts CertificateConfigSubjectConfigSubjectArgs, CertificateConfigSubjectConfigSubjectPtr and CertificateConfigSubjectConfigSubjectPtrOutput values. You can construct a concrete instance of `CertificateConfigSubjectConfigSubjectPtrInput` via:

        CertificateConfigSubjectConfigSubjectArgs{...}

or:

        nil

type CertificateConfigSubjectConfigSubjectPtrOutput

type CertificateConfigSubjectConfigSubjectPtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigSubjectConfigSubjectPtrOutput) CommonName

The common name of the distinguished name.

func (CertificateConfigSubjectConfigSubjectPtrOutput) CountryCode

The country code of the subject.

func (CertificateConfigSubjectConfigSubjectPtrOutput) Elem

func (CertificateConfigSubjectConfigSubjectPtrOutput) ElementType

func (CertificateConfigSubjectConfigSubjectPtrOutput) Locality

The locality or city of the subject.

func (CertificateConfigSubjectConfigSubjectPtrOutput) Organization

The organization of the subject.

func (CertificateConfigSubjectConfigSubjectPtrOutput) OrganizationalUnit

The organizational unit of the subject.

func (CertificateConfigSubjectConfigSubjectPtrOutput) PostalCode

The postal code of the subject.

func (CertificateConfigSubjectConfigSubjectPtrOutput) Province

The province, territory, or regional state of the subject.

func (CertificateConfigSubjectConfigSubjectPtrOutput) StreetAddress

The street address of the subject.

func (CertificateConfigSubjectConfigSubjectPtrOutput) ToCertificateConfigSubjectConfigSubjectPtrOutput

func (o CertificateConfigSubjectConfigSubjectPtrOutput) ToCertificateConfigSubjectConfigSubjectPtrOutput() CertificateConfigSubjectConfigSubjectPtrOutput

func (CertificateConfigSubjectConfigSubjectPtrOutput) ToCertificateConfigSubjectConfigSubjectPtrOutputWithContext

func (o CertificateConfigSubjectConfigSubjectPtrOutput) ToCertificateConfigSubjectConfigSubjectPtrOutputWithContext(ctx context.Context) CertificateConfigSubjectConfigSubjectPtrOutput

type CertificateConfigX509Config

type CertificateConfigX509Config struct {
	// (Output)
	// Describes custom X.509 extensions.
	// Structure is documented below.
	AdditionalExtensions []CertificateConfigX509ConfigAdditionalExtension `pulumi:"additionalExtensions"`
	// (Output)
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers []string `pulumi:"aiaOcspServers"`
	// (Output)
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	CaOptions *CertificateConfigX509ConfigCaOptions `pulumi:"caOptions"`
	// (Output)
	// Indicates the intended use for keys that correspond to a certificate.
	// Structure is documented below.
	KeyUsage CertificateConfigX509ConfigKeyUsage `pulumi:"keyUsage"`
	// (Output)
	// Describes the X.509 name constraints extension.
	// Structure is documented below.
	NameConstraints *CertificateConfigX509ConfigNameConstraints `pulumi:"nameConstraints"`
	// (Output)
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// Structure is documented below.
	PolicyIds []CertificateConfigX509ConfigPolicyId `pulumi:"policyIds"`
}

type CertificateConfigX509ConfigAdditionalExtension

type CertificateConfigX509ConfigAdditionalExtension struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical bool `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	ObjectId CertificateConfigX509ConfigAdditionalExtensionObjectId `pulumi:"objectId"`
	// The value of this X.509 extension. A base64-encoded string.
	Value string `pulumi:"value"`
}

type CertificateConfigX509ConfigAdditionalExtensionArgs

type CertificateConfigX509ConfigAdditionalExtensionArgs struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical pulumi.BoolInput `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	ObjectId CertificateConfigX509ConfigAdditionalExtensionObjectIdInput `pulumi:"objectId"`
	// The value of this X.509 extension. A base64-encoded string.
	Value pulumi.StringInput `pulumi:"value"`
}

func (CertificateConfigX509ConfigAdditionalExtensionArgs) ElementType

func (CertificateConfigX509ConfigAdditionalExtensionArgs) ToCertificateConfigX509ConfigAdditionalExtensionOutput

func (i CertificateConfigX509ConfigAdditionalExtensionArgs) ToCertificateConfigX509ConfigAdditionalExtensionOutput() CertificateConfigX509ConfigAdditionalExtensionOutput

func (CertificateConfigX509ConfigAdditionalExtensionArgs) ToCertificateConfigX509ConfigAdditionalExtensionOutputWithContext

func (i CertificateConfigX509ConfigAdditionalExtensionArgs) ToCertificateConfigX509ConfigAdditionalExtensionOutputWithContext(ctx context.Context) CertificateConfigX509ConfigAdditionalExtensionOutput

type CertificateConfigX509ConfigAdditionalExtensionArray

type CertificateConfigX509ConfigAdditionalExtensionArray []CertificateConfigX509ConfigAdditionalExtensionInput

func (CertificateConfigX509ConfigAdditionalExtensionArray) ElementType

func (CertificateConfigX509ConfigAdditionalExtensionArray) ToCertificateConfigX509ConfigAdditionalExtensionArrayOutput

func (i CertificateConfigX509ConfigAdditionalExtensionArray) ToCertificateConfigX509ConfigAdditionalExtensionArrayOutput() CertificateConfigX509ConfigAdditionalExtensionArrayOutput

func (CertificateConfigX509ConfigAdditionalExtensionArray) ToCertificateConfigX509ConfigAdditionalExtensionArrayOutputWithContext

func (i CertificateConfigX509ConfigAdditionalExtensionArray) ToCertificateConfigX509ConfigAdditionalExtensionArrayOutputWithContext(ctx context.Context) CertificateConfigX509ConfigAdditionalExtensionArrayOutput

type CertificateConfigX509ConfigAdditionalExtensionArrayInput

type CertificateConfigX509ConfigAdditionalExtensionArrayInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigAdditionalExtensionArrayOutput() CertificateConfigX509ConfigAdditionalExtensionArrayOutput
	ToCertificateConfigX509ConfigAdditionalExtensionArrayOutputWithContext(context.Context) CertificateConfigX509ConfigAdditionalExtensionArrayOutput
}

CertificateConfigX509ConfigAdditionalExtensionArrayInput is an input type that accepts CertificateConfigX509ConfigAdditionalExtensionArray and CertificateConfigX509ConfigAdditionalExtensionArrayOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigAdditionalExtensionArrayInput` via:

CertificateConfigX509ConfigAdditionalExtensionArray{ CertificateConfigX509ConfigAdditionalExtensionArgs{...} }

type CertificateConfigX509ConfigAdditionalExtensionArrayOutput

type CertificateConfigX509ConfigAdditionalExtensionArrayOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigAdditionalExtensionArrayOutput) ElementType

func (CertificateConfigX509ConfigAdditionalExtensionArrayOutput) Index

func (CertificateConfigX509ConfigAdditionalExtensionArrayOutput) ToCertificateConfigX509ConfigAdditionalExtensionArrayOutput

func (CertificateConfigX509ConfigAdditionalExtensionArrayOutput) ToCertificateConfigX509ConfigAdditionalExtensionArrayOutputWithContext

func (o CertificateConfigX509ConfigAdditionalExtensionArrayOutput) ToCertificateConfigX509ConfigAdditionalExtensionArrayOutputWithContext(ctx context.Context) CertificateConfigX509ConfigAdditionalExtensionArrayOutput

type CertificateConfigX509ConfigAdditionalExtensionInput

type CertificateConfigX509ConfigAdditionalExtensionInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigAdditionalExtensionOutput() CertificateConfigX509ConfigAdditionalExtensionOutput
	ToCertificateConfigX509ConfigAdditionalExtensionOutputWithContext(context.Context) CertificateConfigX509ConfigAdditionalExtensionOutput
}

CertificateConfigX509ConfigAdditionalExtensionInput is an input type that accepts CertificateConfigX509ConfigAdditionalExtensionArgs and CertificateConfigX509ConfigAdditionalExtensionOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigAdditionalExtensionInput` via:

CertificateConfigX509ConfigAdditionalExtensionArgs{...}

type CertificateConfigX509ConfigAdditionalExtensionObjectId

type CertificateConfigX509ConfigAdditionalExtensionObjectId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs

type CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs) ElementType

func (CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs) ToCertificateConfigX509ConfigAdditionalExtensionObjectIdOutput

func (CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs) ToCertificateConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext

func (i CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs) ToCertificateConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput

type CertificateConfigX509ConfigAdditionalExtensionObjectIdInput

type CertificateConfigX509ConfigAdditionalExtensionObjectIdInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigAdditionalExtensionObjectIdOutput() CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput
	ToCertificateConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext(context.Context) CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput
}

CertificateConfigX509ConfigAdditionalExtensionObjectIdInput is an input type that accepts CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs and CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigAdditionalExtensionObjectIdInput` via:

CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs{...}

type CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput

type CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput) ElementType

func (CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput) ToCertificateConfigX509ConfigAdditionalExtensionObjectIdOutput

func (CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput) ToCertificateConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext

func (o CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput) ToCertificateConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) CertificateConfigX509ConfigAdditionalExtensionObjectIdOutput

type CertificateConfigX509ConfigAdditionalExtensionOutput

type CertificateConfigX509ConfigAdditionalExtensionOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigAdditionalExtensionOutput) Critical

Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).

func (CertificateConfigX509ConfigAdditionalExtensionOutput) ElementType

func (CertificateConfigX509ConfigAdditionalExtensionOutput) ObjectId

Describes values that are relevant in a CA certificate. Structure is documented below.

func (CertificateConfigX509ConfigAdditionalExtensionOutput) ToCertificateConfigX509ConfigAdditionalExtensionOutput

func (CertificateConfigX509ConfigAdditionalExtensionOutput) ToCertificateConfigX509ConfigAdditionalExtensionOutputWithContext

func (o CertificateConfigX509ConfigAdditionalExtensionOutput) ToCertificateConfigX509ConfigAdditionalExtensionOutputWithContext(ctx context.Context) CertificateConfigX509ConfigAdditionalExtensionOutput

func (CertificateConfigX509ConfigAdditionalExtensionOutput) Value

The value of this X.509 extension. A base64-encoded string.

type CertificateConfigX509ConfigArgs

type CertificateConfigX509ConfigArgs struct {
	// (Output)
	// Describes custom X.509 extensions.
	// Structure is documented below.
	AdditionalExtensions CertificateConfigX509ConfigAdditionalExtensionArrayInput `pulumi:"additionalExtensions"`
	// (Output)
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers pulumi.StringArrayInput `pulumi:"aiaOcspServers"`
	// (Output)
	// Describes values that are relevant in a CA certificate.
	// Structure is documented below.
	CaOptions CertificateConfigX509ConfigCaOptionsPtrInput `pulumi:"caOptions"`
	// (Output)
	// Indicates the intended use for keys that correspond to a certificate.
	// Structure is documented below.
	KeyUsage CertificateConfigX509ConfigKeyUsageInput `pulumi:"keyUsage"`
	// (Output)
	// Describes the X.509 name constraints extension.
	// Structure is documented below.
	NameConstraints CertificateConfigX509ConfigNameConstraintsPtrInput `pulumi:"nameConstraints"`
	// (Output)
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// Structure is documented below.
	PolicyIds CertificateConfigX509ConfigPolicyIdArrayInput `pulumi:"policyIds"`
}

func (CertificateConfigX509ConfigArgs) ElementType

func (CertificateConfigX509ConfigArgs) ToCertificateConfigX509ConfigOutput

func (i CertificateConfigX509ConfigArgs) ToCertificateConfigX509ConfigOutput() CertificateConfigX509ConfigOutput

func (CertificateConfigX509ConfigArgs) ToCertificateConfigX509ConfigOutputWithContext

func (i CertificateConfigX509ConfigArgs) ToCertificateConfigX509ConfigOutputWithContext(ctx context.Context) CertificateConfigX509ConfigOutput

func (CertificateConfigX509ConfigArgs) ToCertificateConfigX509ConfigPtrOutput

func (i CertificateConfigX509ConfigArgs) ToCertificateConfigX509ConfigPtrOutput() CertificateConfigX509ConfigPtrOutput

func (CertificateConfigX509ConfigArgs) ToCertificateConfigX509ConfigPtrOutputWithContext

func (i CertificateConfigX509ConfigArgs) ToCertificateConfigX509ConfigPtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigPtrOutput

type CertificateConfigX509ConfigCaOptions

type CertificateConfigX509ConfigCaOptions struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa *bool `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
	MaxIssuerPathLength *int `pulumi:"maxIssuerPathLength"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.
	NonCa *bool `pulumi:"nonCa"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// if both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset,
	// the max path length will be omitted from the CA certificate.
	ZeroMaxIssuerPathLength *bool `pulumi:"zeroMaxIssuerPathLength"`
}

type CertificateConfigX509ConfigCaOptionsArgs

type CertificateConfigX509ConfigCaOptionsArgs struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa pulumi.BoolPtrInput `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
	MaxIssuerPathLength pulumi.IntPtrInput `pulumi:"maxIssuerPathLength"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.
	NonCa pulumi.BoolPtrInput `pulumi:"nonCa"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// if both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset,
	// the max path length will be omitted from the CA certificate.
	ZeroMaxIssuerPathLength pulumi.BoolPtrInput `pulumi:"zeroMaxIssuerPathLength"`
}

func (CertificateConfigX509ConfigCaOptionsArgs) ElementType

func (CertificateConfigX509ConfigCaOptionsArgs) ToCertificateConfigX509ConfigCaOptionsOutput

func (i CertificateConfigX509ConfigCaOptionsArgs) ToCertificateConfigX509ConfigCaOptionsOutput() CertificateConfigX509ConfigCaOptionsOutput

func (CertificateConfigX509ConfigCaOptionsArgs) ToCertificateConfigX509ConfigCaOptionsOutputWithContext

func (i CertificateConfigX509ConfigCaOptionsArgs) ToCertificateConfigX509ConfigCaOptionsOutputWithContext(ctx context.Context) CertificateConfigX509ConfigCaOptionsOutput

func (CertificateConfigX509ConfigCaOptionsArgs) ToCertificateConfigX509ConfigCaOptionsPtrOutput

func (i CertificateConfigX509ConfigCaOptionsArgs) ToCertificateConfigX509ConfigCaOptionsPtrOutput() CertificateConfigX509ConfigCaOptionsPtrOutput

func (CertificateConfigX509ConfigCaOptionsArgs) ToCertificateConfigX509ConfigCaOptionsPtrOutputWithContext

func (i CertificateConfigX509ConfigCaOptionsArgs) ToCertificateConfigX509ConfigCaOptionsPtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigCaOptionsPtrOutput

type CertificateConfigX509ConfigCaOptionsInput

type CertificateConfigX509ConfigCaOptionsInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigCaOptionsOutput() CertificateConfigX509ConfigCaOptionsOutput
	ToCertificateConfigX509ConfigCaOptionsOutputWithContext(context.Context) CertificateConfigX509ConfigCaOptionsOutput
}

CertificateConfigX509ConfigCaOptionsInput is an input type that accepts CertificateConfigX509ConfigCaOptionsArgs and CertificateConfigX509ConfigCaOptionsOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigCaOptionsInput` via:

CertificateConfigX509ConfigCaOptionsArgs{...}

type CertificateConfigX509ConfigCaOptionsOutput

type CertificateConfigX509ConfigCaOptionsOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigCaOptionsOutput) ElementType

func (CertificateConfigX509ConfigCaOptionsOutput) IsCa

When true, the "CA" in Basic Constraints extension will be set to true.

func (CertificateConfigX509ConfigCaOptionsOutput) MaxIssuerPathLength

Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.

func (CertificateConfigX509ConfigCaOptionsOutput) NonCa

When true, the "CA" in Basic Constraints extension will be set to false. If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.

func (CertificateConfigX509ConfigCaOptionsOutput) ToCertificateConfigX509ConfigCaOptionsOutput

func (o CertificateConfigX509ConfigCaOptionsOutput) ToCertificateConfigX509ConfigCaOptionsOutput() CertificateConfigX509ConfigCaOptionsOutput

func (CertificateConfigX509ConfigCaOptionsOutput) ToCertificateConfigX509ConfigCaOptionsOutputWithContext

func (o CertificateConfigX509ConfigCaOptionsOutput) ToCertificateConfigX509ConfigCaOptionsOutputWithContext(ctx context.Context) CertificateConfigX509ConfigCaOptionsOutput

func (CertificateConfigX509ConfigCaOptionsOutput) ToCertificateConfigX509ConfigCaOptionsPtrOutput

func (o CertificateConfigX509ConfigCaOptionsOutput) ToCertificateConfigX509ConfigCaOptionsPtrOutput() CertificateConfigX509ConfigCaOptionsPtrOutput

func (CertificateConfigX509ConfigCaOptionsOutput) ToCertificateConfigX509ConfigCaOptionsPtrOutputWithContext

func (o CertificateConfigX509ConfigCaOptionsOutput) ToCertificateConfigX509ConfigCaOptionsPtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigCaOptionsPtrOutput

func (CertificateConfigX509ConfigCaOptionsOutput) ZeroMaxIssuerPathLength

When true, the "path length constraint" in Basic Constraints extension will be set to 0. if both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset, the max path length will be omitted from the CA certificate.

type CertificateConfigX509ConfigCaOptionsPtrInput

type CertificateConfigX509ConfigCaOptionsPtrInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigCaOptionsPtrOutput() CertificateConfigX509ConfigCaOptionsPtrOutput
	ToCertificateConfigX509ConfigCaOptionsPtrOutputWithContext(context.Context) CertificateConfigX509ConfigCaOptionsPtrOutput
}

CertificateConfigX509ConfigCaOptionsPtrInput is an input type that accepts CertificateConfigX509ConfigCaOptionsArgs, CertificateConfigX509ConfigCaOptionsPtr and CertificateConfigX509ConfigCaOptionsPtrOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigCaOptionsPtrInput` via:

        CertificateConfigX509ConfigCaOptionsArgs{...}

or:

        nil

type CertificateConfigX509ConfigCaOptionsPtrOutput

type CertificateConfigX509ConfigCaOptionsPtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigCaOptionsPtrOutput) Elem

func (CertificateConfigX509ConfigCaOptionsPtrOutput) ElementType

func (CertificateConfigX509ConfigCaOptionsPtrOutput) IsCa

When true, the "CA" in Basic Constraints extension will be set to true.

func (CertificateConfigX509ConfigCaOptionsPtrOutput) MaxIssuerPathLength

Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.

func (CertificateConfigX509ConfigCaOptionsPtrOutput) NonCa

When true, the "CA" in Basic Constraints extension will be set to false. If both `isCa` and `nonCa` are unset, the extension will be omitted from the CA certificate.

func (CertificateConfigX509ConfigCaOptionsPtrOutput) ToCertificateConfigX509ConfigCaOptionsPtrOutput

func (o CertificateConfigX509ConfigCaOptionsPtrOutput) ToCertificateConfigX509ConfigCaOptionsPtrOutput() CertificateConfigX509ConfigCaOptionsPtrOutput

func (CertificateConfigX509ConfigCaOptionsPtrOutput) ToCertificateConfigX509ConfigCaOptionsPtrOutputWithContext

func (o CertificateConfigX509ConfigCaOptionsPtrOutput) ToCertificateConfigX509ConfigCaOptionsPtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigCaOptionsPtrOutput

func (CertificateConfigX509ConfigCaOptionsPtrOutput) ZeroMaxIssuerPathLength

When true, the "path length constraint" in Basic Constraints extension will be set to 0. if both `maxIssuerPathLength` and `zeroMaxIssuerPathLength` are unset, the max path length will be omitted from the CA certificate.

type CertificateConfigX509ConfigInput

type CertificateConfigX509ConfigInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigOutput() CertificateConfigX509ConfigOutput
	ToCertificateConfigX509ConfigOutputWithContext(context.Context) CertificateConfigX509ConfigOutput
}

CertificateConfigX509ConfigInput is an input type that accepts CertificateConfigX509ConfigArgs and CertificateConfigX509ConfigOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigInput` via:

CertificateConfigX509ConfigArgs{...}

type CertificateConfigX509ConfigKeyUsage

type CertificateConfigX509ConfigKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	BaseKeyUsage CertificateConfigX509ConfigKeyUsageBaseKeyUsage `pulumi:"baseKeyUsage"`
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	ExtendedKeyUsage CertificateConfigX509ConfigKeyUsageExtendedKeyUsage `pulumi:"extendedKeyUsage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// Structure is documented below.
	UnknownExtendedKeyUsages []CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsage `pulumi:"unknownExtendedKeyUsages"`
}

type CertificateConfigX509ConfigKeyUsageArgs

type CertificateConfigX509ConfigKeyUsageArgs struct {
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	BaseKeyUsage CertificateConfigX509ConfigKeyUsageBaseKeyUsageInput `pulumi:"baseKeyUsage"`
	// Describes high-level ways in which a key may be used.
	// Structure is documented below.
	ExtendedKeyUsage CertificateConfigX509ConfigKeyUsageExtendedKeyUsageInput `pulumi:"extendedKeyUsage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// Structure is documented below.
	UnknownExtendedKeyUsages CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput `pulumi:"unknownExtendedKeyUsages"`
}

func (CertificateConfigX509ConfigKeyUsageArgs) ElementType

func (CertificateConfigX509ConfigKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageOutput

func (i CertificateConfigX509ConfigKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageOutput() CertificateConfigX509ConfigKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageOutputWithContext

func (i CertificateConfigX509ConfigKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsagePtrOutput

func (i CertificateConfigX509ConfigKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsagePtrOutput() CertificateConfigX509ConfigKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsagePtrOutputWithContext

func (i CertificateConfigX509ConfigKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsagePtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsageBaseKeyUsage

type CertificateConfigX509ConfigKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	CertSign *bool `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment *bool `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign *bool `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment *bool `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly *bool `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature *bool `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly *bool `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement *bool `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment *bool `pulumi:"keyEncipherment"`
}

type CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs

type CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs struct {
	// The key may be used to sign certificates.
	CertSign pulumi.BoolPtrInput `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment pulumi.BoolPtrInput `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign pulumi.BoolPtrInput `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment pulumi.BoolPtrInput `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly pulumi.BoolPtrInput `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature pulumi.BoolPtrInput `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly pulumi.BoolPtrInput `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement pulumi.BoolPtrInput `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment pulumi.BoolPtrInput `pulumi:"keyEncipherment"`
}

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs) ElementType

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (i CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput() CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext

func (i CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (i CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput() CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext

func (i CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsageBaseKeyUsageInput

type CertificateConfigX509ConfigKeyUsageBaseKeyUsageInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput() CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput
	ToCertificateConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext(context.Context) CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput
}

CertificateConfigX509ConfigKeyUsageBaseKeyUsageInput is an input type that accepts CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs and CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigKeyUsageBaseKeyUsageInput` via:

CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs{...}

type CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput

type CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) CertSign

The key may be used to sign certificates.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) CrlSign

The key may be used sign certificate revocation lists.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) DataEncipherment

The key may be used to encipher data.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) DecipherOnly

The key may be used to decipher only.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) DigitalSignature

The key may be used for digital signatures.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) ElementType

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) EncipherOnly

The key may be used to encipher only.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) KeyEncipherment

The key may be used to encipher other keys.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (o CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput() CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrInput

type CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput() CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput
	ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext(context.Context) CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput
}

CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrInput is an input type that accepts CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs, CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtr and CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrInput` via:

        CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs{...}

or:

        nil

type CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) CertSign

The key may be used to sign certificates.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) CrlSign

The key may be used sign certificate revocation lists.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) DataEncipherment

The key may be used to encipher data.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) DecipherOnly

The key may be used to decipher only.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) DigitalSignature

The key may be used for digital signatures.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) Elem

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ElementType

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) EncipherOnly

The key may be used to encipher only.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) KeyEncipherment

The key may be used to encipher other keys.

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageBaseKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsage

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth *bool `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning *bool `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection *bool `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning *bool `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth *bool `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping *bool `pulumi:"timeStamping"`
}

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth pulumi.BoolPtrInput `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning pulumi.BoolPtrInput `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection pulumi.BoolPtrInput `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning pulumi.BoolPtrInput `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth pulumi.BoolPtrInput `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping pulumi.BoolPtrInput `pulumi:"timeStamping"`
}

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ElementType

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext

func (i CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

func (i CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput() CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext

func (i CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsageInput

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsageInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput() CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput
	ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext(context.Context) CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput
}

CertificateConfigX509ConfigKeyUsageExtendedKeyUsageInput is an input type that accepts CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs and CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigKeyUsageExtendedKeyUsageInput` via:

CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs{...}

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ElementType

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrInput

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput() CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput
	ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext(context.Context) CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput
}

CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrInput is an input type that accepts CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs, CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtr and CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrInput` via:

        CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs{...}

or:

        nil

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) Elem

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ElementType

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageExtendedKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsageInput

type CertificateConfigX509ConfigKeyUsageInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigKeyUsageOutput() CertificateConfigX509ConfigKeyUsageOutput
	ToCertificateConfigX509ConfigKeyUsageOutputWithContext(context.Context) CertificateConfigX509ConfigKeyUsageOutput
}

CertificateConfigX509ConfigKeyUsageInput is an input type that accepts CertificateConfigX509ConfigKeyUsageArgs and CertificateConfigX509ConfigKeyUsageOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigKeyUsageInput` via:

CertificateConfigX509ConfigKeyUsageArgs{...}

type CertificateConfigX509ConfigKeyUsageOutput

type CertificateConfigX509ConfigKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigKeyUsageOutput) BaseKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (CertificateConfigX509ConfigKeyUsageOutput) ElementType

func (CertificateConfigX509ConfigKeyUsageOutput) ExtendedKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (CertificateConfigX509ConfigKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageOutput

func (o CertificateConfigX509ConfigKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageOutput() CertificateConfigX509ConfigKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsagePtrOutput

func (o CertificateConfigX509ConfigKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsagePtrOutput() CertificateConfigX509ConfigKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsagePtrOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsagePtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsageOutput) UnknownExtendedKeyUsages

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages. Structure is documented below.

type CertificateConfigX509ConfigKeyUsagePtrInput

type CertificateConfigX509ConfigKeyUsagePtrInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigKeyUsagePtrOutput() CertificateConfigX509ConfigKeyUsagePtrOutput
	ToCertificateConfigX509ConfigKeyUsagePtrOutputWithContext(context.Context) CertificateConfigX509ConfigKeyUsagePtrOutput
}

CertificateConfigX509ConfigKeyUsagePtrInput is an input type that accepts CertificateConfigX509ConfigKeyUsageArgs, CertificateConfigX509ConfigKeyUsagePtr and CertificateConfigX509ConfigKeyUsagePtrOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigKeyUsagePtrInput` via:

        CertificateConfigX509ConfigKeyUsageArgs{...}

or:

        nil

type CertificateConfigX509ConfigKeyUsagePtrOutput

type CertificateConfigX509ConfigKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigKeyUsagePtrOutput) BaseKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (CertificateConfigX509ConfigKeyUsagePtrOutput) Elem

func (CertificateConfigX509ConfigKeyUsagePtrOutput) ElementType

func (CertificateConfigX509ConfigKeyUsagePtrOutput) ExtendedKeyUsage

Describes high-level ways in which a key may be used. Structure is documented below.

func (CertificateConfigX509ConfigKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsagePtrOutput

func (o CertificateConfigX509ConfigKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsagePtrOutput() CertificateConfigX509ConfigKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsagePtrOutputWithContext

func (o CertificateConfigX509ConfigKeyUsagePtrOutput) ToCertificateConfigX509ConfigKeyUsagePtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsagePtrOutput

func (CertificateConfigX509ConfigKeyUsagePtrOutput) UnknownExtendedKeyUsages

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages. Structure is documented below.

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsage

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsage struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ElementType

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext

func (i CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray []CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ElementType

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

func (i CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput() CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput
	ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(context.Context) CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput
}

CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput is an input type that accepts CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray and CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput` via:

CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray{ CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs{...} }

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ElementType

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput() CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput
	ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext(context.Context) CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput
}

CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput is an input type that accepts CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs and CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput` via:

CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs{...}

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

type CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ElementType

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

func (CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext

func (o CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ToCertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext(ctx context.Context) CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

type CertificateConfigX509ConfigNameConstraints

type CertificateConfigX509ConfigNameConstraints struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical bool `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	ExcludedDnsNames []string `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses []string `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges []string `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	ExcludedUris []string `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	PermittedDnsNames []string `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses []string `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges []string `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	PermittedUris []string `pulumi:"permittedUris"`
}

type CertificateConfigX509ConfigNameConstraintsArgs

type CertificateConfigX509ConfigNameConstraintsArgs struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical pulumi.BoolInput `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	ExcludedDnsNames pulumi.StringArrayInput `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses pulumi.StringArrayInput `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges pulumi.StringArrayInput `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	ExcludedUris pulumi.StringArrayInput `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, `example.com`, `www.example.com`, `www.sub.example.com`
	// would satisfy `example.com` while `example1.com` does not.
	PermittedDnsNames pulumi.StringArrayInput `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. `.example.com`) to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses pulumi.StringArrayInput `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges pulumi.StringArrayInput `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like `.example.com`)
	PermittedUris pulumi.StringArrayInput `pulumi:"permittedUris"`
}

func (CertificateConfigX509ConfigNameConstraintsArgs) ElementType

func (CertificateConfigX509ConfigNameConstraintsArgs) ToCertificateConfigX509ConfigNameConstraintsOutput

func (i CertificateConfigX509ConfigNameConstraintsArgs) ToCertificateConfigX509ConfigNameConstraintsOutput() CertificateConfigX509ConfigNameConstraintsOutput

func (CertificateConfigX509ConfigNameConstraintsArgs) ToCertificateConfigX509ConfigNameConstraintsOutputWithContext

func (i CertificateConfigX509ConfigNameConstraintsArgs) ToCertificateConfigX509ConfigNameConstraintsOutputWithContext(ctx context.Context) CertificateConfigX509ConfigNameConstraintsOutput

func (CertificateConfigX509ConfigNameConstraintsArgs) ToCertificateConfigX509ConfigNameConstraintsPtrOutput

func (i CertificateConfigX509ConfigNameConstraintsArgs) ToCertificateConfigX509ConfigNameConstraintsPtrOutput() CertificateConfigX509ConfigNameConstraintsPtrOutput

func (CertificateConfigX509ConfigNameConstraintsArgs) ToCertificateConfigX509ConfigNameConstraintsPtrOutputWithContext

func (i CertificateConfigX509ConfigNameConstraintsArgs) ToCertificateConfigX509ConfigNameConstraintsPtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigNameConstraintsPtrOutput

type CertificateConfigX509ConfigNameConstraintsInput

type CertificateConfigX509ConfigNameConstraintsInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigNameConstraintsOutput() CertificateConfigX509ConfigNameConstraintsOutput
	ToCertificateConfigX509ConfigNameConstraintsOutputWithContext(context.Context) CertificateConfigX509ConfigNameConstraintsOutput
}

CertificateConfigX509ConfigNameConstraintsInput is an input type that accepts CertificateConfigX509ConfigNameConstraintsArgs and CertificateConfigX509ConfigNameConstraintsOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigNameConstraintsInput` via:

CertificateConfigX509ConfigNameConstraintsArgs{...}

type CertificateConfigX509ConfigNameConstraintsOutput

type CertificateConfigX509ConfigNameConstraintsOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigNameConstraintsOutput) Critical

Indicates whether or not the name constraints are marked critical.

func (CertificateConfigX509ConfigNameConstraintsOutput) ElementType

func (CertificateConfigX509ConfigNameConstraintsOutput) ExcludedDnsNames

Contains excluded DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CertificateConfigX509ConfigNameConstraintsOutput) ExcludedEmailAddresses

Contains the excluded email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CertificateConfigX509ConfigNameConstraintsOutput) ExcludedIpRanges

Contains the excluded IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CertificateConfigX509ConfigNameConstraintsOutput) ExcludedUris

Contains the excluded URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CertificateConfigX509ConfigNameConstraintsOutput) PermittedDnsNames

Contains permitted DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CertificateConfigX509ConfigNameConstraintsOutput) PermittedEmailAddresses

Contains the permitted email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CertificateConfigX509ConfigNameConstraintsOutput) PermittedIpRanges

Contains the permitted IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CertificateConfigX509ConfigNameConstraintsOutput) PermittedUris

Contains the permitted URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CertificateConfigX509ConfigNameConstraintsOutput) ToCertificateConfigX509ConfigNameConstraintsOutput

func (o CertificateConfigX509ConfigNameConstraintsOutput) ToCertificateConfigX509ConfigNameConstraintsOutput() CertificateConfigX509ConfigNameConstraintsOutput

func (CertificateConfigX509ConfigNameConstraintsOutput) ToCertificateConfigX509ConfigNameConstraintsOutputWithContext

func (o CertificateConfigX509ConfigNameConstraintsOutput) ToCertificateConfigX509ConfigNameConstraintsOutputWithContext(ctx context.Context) CertificateConfigX509ConfigNameConstraintsOutput

func (CertificateConfigX509ConfigNameConstraintsOutput) ToCertificateConfigX509ConfigNameConstraintsPtrOutput

func (o CertificateConfigX509ConfigNameConstraintsOutput) ToCertificateConfigX509ConfigNameConstraintsPtrOutput() CertificateConfigX509ConfigNameConstraintsPtrOutput

func (CertificateConfigX509ConfigNameConstraintsOutput) ToCertificateConfigX509ConfigNameConstraintsPtrOutputWithContext

func (o CertificateConfigX509ConfigNameConstraintsOutput) ToCertificateConfigX509ConfigNameConstraintsPtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigNameConstraintsPtrOutput

type CertificateConfigX509ConfigNameConstraintsPtrInput

type CertificateConfigX509ConfigNameConstraintsPtrInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigNameConstraintsPtrOutput() CertificateConfigX509ConfigNameConstraintsPtrOutput
	ToCertificateConfigX509ConfigNameConstraintsPtrOutputWithContext(context.Context) CertificateConfigX509ConfigNameConstraintsPtrOutput
}

CertificateConfigX509ConfigNameConstraintsPtrInput is an input type that accepts CertificateConfigX509ConfigNameConstraintsArgs, CertificateConfigX509ConfigNameConstraintsPtr and CertificateConfigX509ConfigNameConstraintsPtrOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigNameConstraintsPtrInput` via:

        CertificateConfigX509ConfigNameConstraintsArgs{...}

or:

        nil

type CertificateConfigX509ConfigNameConstraintsPtrOutput

type CertificateConfigX509ConfigNameConstraintsPtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) Critical

Indicates whether or not the name constraints are marked critical.

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) Elem

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) ElementType

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) ExcludedDnsNames

Contains excluded DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) ExcludedEmailAddresses

Contains the excluded email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) ExcludedIpRanges

Contains the excluded IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) ExcludedUris

Contains the excluded URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) PermittedDnsNames

Contains permitted DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, `example.com`, `www.example.com`, `www.sub.example.com` would satisfy `example.com` while `example1.com` does not.

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) PermittedEmailAddresses

Contains the permitted email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. `.example.com`) to indicate all email addresses in that domain.

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) PermittedIpRanges

Contains the permitted IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) PermittedUris

Contains the permitted URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like `.example.com`)

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) ToCertificateConfigX509ConfigNameConstraintsPtrOutput

func (o CertificateConfigX509ConfigNameConstraintsPtrOutput) ToCertificateConfigX509ConfigNameConstraintsPtrOutput() CertificateConfigX509ConfigNameConstraintsPtrOutput

func (CertificateConfigX509ConfigNameConstraintsPtrOutput) ToCertificateConfigX509ConfigNameConstraintsPtrOutputWithContext

func (o CertificateConfigX509ConfigNameConstraintsPtrOutput) ToCertificateConfigX509ConfigNameConstraintsPtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigNameConstraintsPtrOutput

type CertificateConfigX509ConfigOutput

type CertificateConfigX509ConfigOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigOutput) AdditionalExtensions

(Output) Describes custom X.509 extensions. Structure is documented below.

func (CertificateConfigX509ConfigOutput) AiaOcspServers

(Output) Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (CertificateConfigX509ConfigOutput) CaOptions

(Output) Describes values that are relevant in a CA certificate. Structure is documented below.

func (CertificateConfigX509ConfigOutput) ElementType

func (CertificateConfigX509ConfigOutput) KeyUsage

(Output) Indicates the intended use for keys that correspond to a certificate. Structure is documented below.

func (CertificateConfigX509ConfigOutput) NameConstraints

(Output) Describes the X.509 name constraints extension. Structure is documented below.

func (CertificateConfigX509ConfigOutput) PolicyIds

(Output) Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4. Structure is documented below.

func (CertificateConfigX509ConfigOutput) ToCertificateConfigX509ConfigOutput

func (o CertificateConfigX509ConfigOutput) ToCertificateConfigX509ConfigOutput() CertificateConfigX509ConfigOutput

func (CertificateConfigX509ConfigOutput) ToCertificateConfigX509ConfigOutputWithContext

func (o CertificateConfigX509ConfigOutput) ToCertificateConfigX509ConfigOutputWithContext(ctx context.Context) CertificateConfigX509ConfigOutput

func (CertificateConfigX509ConfigOutput) ToCertificateConfigX509ConfigPtrOutput

func (o CertificateConfigX509ConfigOutput) ToCertificateConfigX509ConfigPtrOutput() CertificateConfigX509ConfigPtrOutput

func (CertificateConfigX509ConfigOutput) ToCertificateConfigX509ConfigPtrOutputWithContext

func (o CertificateConfigX509ConfigOutput) ToCertificateConfigX509ConfigPtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigPtrOutput

type CertificateConfigX509ConfigPolicyId

type CertificateConfigX509ConfigPolicyId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateConfigX509ConfigPolicyIdArgs

type CertificateConfigX509ConfigPolicyIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateConfigX509ConfigPolicyIdArgs) ElementType

func (CertificateConfigX509ConfigPolicyIdArgs) ToCertificateConfigX509ConfigPolicyIdOutput

func (i CertificateConfigX509ConfigPolicyIdArgs) ToCertificateConfigX509ConfigPolicyIdOutput() CertificateConfigX509ConfigPolicyIdOutput

func (CertificateConfigX509ConfigPolicyIdArgs) ToCertificateConfigX509ConfigPolicyIdOutputWithContext

func (i CertificateConfigX509ConfigPolicyIdArgs) ToCertificateConfigX509ConfigPolicyIdOutputWithContext(ctx context.Context) CertificateConfigX509ConfigPolicyIdOutput

type CertificateConfigX509ConfigPolicyIdArray

type CertificateConfigX509ConfigPolicyIdArray []CertificateConfigX509ConfigPolicyIdInput

func (CertificateConfigX509ConfigPolicyIdArray) ElementType

func (CertificateConfigX509ConfigPolicyIdArray) ToCertificateConfigX509ConfigPolicyIdArrayOutput

func (i CertificateConfigX509ConfigPolicyIdArray) ToCertificateConfigX509ConfigPolicyIdArrayOutput() CertificateConfigX509ConfigPolicyIdArrayOutput

func (CertificateConfigX509ConfigPolicyIdArray) ToCertificateConfigX509ConfigPolicyIdArrayOutputWithContext

func (i CertificateConfigX509ConfigPolicyIdArray) ToCertificateConfigX509ConfigPolicyIdArrayOutputWithContext(ctx context.Context) CertificateConfigX509ConfigPolicyIdArrayOutput

type CertificateConfigX509ConfigPolicyIdArrayInput

type CertificateConfigX509ConfigPolicyIdArrayInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigPolicyIdArrayOutput() CertificateConfigX509ConfigPolicyIdArrayOutput
	ToCertificateConfigX509ConfigPolicyIdArrayOutputWithContext(context.Context) CertificateConfigX509ConfigPolicyIdArrayOutput
}

CertificateConfigX509ConfigPolicyIdArrayInput is an input type that accepts CertificateConfigX509ConfigPolicyIdArray and CertificateConfigX509ConfigPolicyIdArrayOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigPolicyIdArrayInput` via:

CertificateConfigX509ConfigPolicyIdArray{ CertificateConfigX509ConfigPolicyIdArgs{...} }

type CertificateConfigX509ConfigPolicyIdArrayOutput

type CertificateConfigX509ConfigPolicyIdArrayOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigPolicyIdArrayOutput) ElementType

func (CertificateConfigX509ConfigPolicyIdArrayOutput) Index

func (CertificateConfigX509ConfigPolicyIdArrayOutput) ToCertificateConfigX509ConfigPolicyIdArrayOutput

func (o CertificateConfigX509ConfigPolicyIdArrayOutput) ToCertificateConfigX509ConfigPolicyIdArrayOutput() CertificateConfigX509ConfigPolicyIdArrayOutput

func (CertificateConfigX509ConfigPolicyIdArrayOutput) ToCertificateConfigX509ConfigPolicyIdArrayOutputWithContext

func (o CertificateConfigX509ConfigPolicyIdArrayOutput) ToCertificateConfigX509ConfigPolicyIdArrayOutputWithContext(ctx context.Context) CertificateConfigX509ConfigPolicyIdArrayOutput

type CertificateConfigX509ConfigPolicyIdInput

type CertificateConfigX509ConfigPolicyIdInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigPolicyIdOutput() CertificateConfigX509ConfigPolicyIdOutput
	ToCertificateConfigX509ConfigPolicyIdOutputWithContext(context.Context) CertificateConfigX509ConfigPolicyIdOutput
}

CertificateConfigX509ConfigPolicyIdInput is an input type that accepts CertificateConfigX509ConfigPolicyIdArgs and CertificateConfigX509ConfigPolicyIdOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigPolicyIdInput` via:

CertificateConfigX509ConfigPolicyIdArgs{...}

type CertificateConfigX509ConfigPolicyIdOutput

type CertificateConfigX509ConfigPolicyIdOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigPolicyIdOutput) ElementType

func (CertificateConfigX509ConfigPolicyIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (CertificateConfigX509ConfigPolicyIdOutput) ToCertificateConfigX509ConfigPolicyIdOutput

func (o CertificateConfigX509ConfigPolicyIdOutput) ToCertificateConfigX509ConfigPolicyIdOutput() CertificateConfigX509ConfigPolicyIdOutput

func (CertificateConfigX509ConfigPolicyIdOutput) ToCertificateConfigX509ConfigPolicyIdOutputWithContext

func (o CertificateConfigX509ConfigPolicyIdOutput) ToCertificateConfigX509ConfigPolicyIdOutputWithContext(ctx context.Context) CertificateConfigX509ConfigPolicyIdOutput

type CertificateConfigX509ConfigPtrInput

type CertificateConfigX509ConfigPtrInput interface {
	pulumi.Input

	ToCertificateConfigX509ConfigPtrOutput() CertificateConfigX509ConfigPtrOutput
	ToCertificateConfigX509ConfigPtrOutputWithContext(context.Context) CertificateConfigX509ConfigPtrOutput
}

CertificateConfigX509ConfigPtrInput is an input type that accepts CertificateConfigX509ConfigArgs, CertificateConfigX509ConfigPtr and CertificateConfigX509ConfigPtrOutput values. You can construct a concrete instance of `CertificateConfigX509ConfigPtrInput` via:

        CertificateConfigX509ConfigArgs{...}

or:

        nil

type CertificateConfigX509ConfigPtrOutput

type CertificateConfigX509ConfigPtrOutput struct{ *pulumi.OutputState }

func (CertificateConfigX509ConfigPtrOutput) AdditionalExtensions

(Output) Describes custom X.509 extensions. Structure is documented below.

func (CertificateConfigX509ConfigPtrOutput) AiaOcspServers

(Output) Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (CertificateConfigX509ConfigPtrOutput) CaOptions

(Output) Describes values that are relevant in a CA certificate. Structure is documented below.

func (CertificateConfigX509ConfigPtrOutput) Elem

func (CertificateConfigX509ConfigPtrOutput) ElementType

func (CertificateConfigX509ConfigPtrOutput) KeyUsage

(Output) Indicates the intended use for keys that correspond to a certificate. Structure is documented below.

func (CertificateConfigX509ConfigPtrOutput) NameConstraints

(Output) Describes the X.509 name constraints extension. Structure is documented below.

func (CertificateConfigX509ConfigPtrOutput) PolicyIds

(Output) Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4. Structure is documented below.

func (CertificateConfigX509ConfigPtrOutput) ToCertificateConfigX509ConfigPtrOutput

func (o CertificateConfigX509ConfigPtrOutput) ToCertificateConfigX509ConfigPtrOutput() CertificateConfigX509ConfigPtrOutput

func (CertificateConfigX509ConfigPtrOutput) ToCertificateConfigX509ConfigPtrOutputWithContext

func (o CertificateConfigX509ConfigPtrOutput) ToCertificateConfigX509ConfigPtrOutputWithContext(ctx context.Context) CertificateConfigX509ConfigPtrOutput

type CertificateInput

type CertificateInput interface {
	pulumi.Input

	ToCertificateOutput() CertificateOutput
	ToCertificateOutputWithContext(ctx context.Context) CertificateOutput
}

type CertificateMap

type CertificateMap map[string]CertificateInput

func (CertificateMap) ElementType

func (CertificateMap) ElementType() reflect.Type

func (CertificateMap) ToCertificateMapOutput

func (i CertificateMap) ToCertificateMapOutput() CertificateMapOutput

func (CertificateMap) ToCertificateMapOutputWithContext

func (i CertificateMap) ToCertificateMapOutputWithContext(ctx context.Context) CertificateMapOutput

type CertificateMapInput

type CertificateMapInput interface {
	pulumi.Input

	ToCertificateMapOutput() CertificateMapOutput
	ToCertificateMapOutputWithContext(context.Context) CertificateMapOutput
}

CertificateMapInput is an input type that accepts CertificateMap and CertificateMapOutput values. You can construct a concrete instance of `CertificateMapInput` via:

CertificateMap{ "key": CertificateArgs{...} }

type CertificateMapOutput

type CertificateMapOutput struct{ *pulumi.OutputState }

func (CertificateMapOutput) ElementType

func (CertificateMapOutput) ElementType() reflect.Type

func (CertificateMapOutput) MapIndex

func (CertificateMapOutput) ToCertificateMapOutput

func (o CertificateMapOutput) ToCertificateMapOutput() CertificateMapOutput

func (CertificateMapOutput) ToCertificateMapOutputWithContext

func (o CertificateMapOutput) ToCertificateMapOutputWithContext(ctx context.Context) CertificateMapOutput

type CertificateOutput

type CertificateOutput struct{ *pulumi.OutputState }

func (CertificateOutput) CertificateAuthority

func (o CertificateOutput) CertificateAuthority() pulumi.StringPtrOutput

The Certificate Authority ID that should issue the certificate. For example, to issue a Certificate from a Certificate Authority with resource name `projects/my-project/locations/us-central1/caPools/my-pool/certificateAuthorities/my-ca`, argument `pool` should be set to `projects/my-project/locations/us-central1/caPools/my-pool`, argument `certificateAuthority` should be set to `my-ca`.

func (CertificateOutput) CertificateDescriptions

Output only. Details regarding the revocation of this Certificate. This Certificate is considered revoked if and only if this field is present. Structure is documented below.

func (CertificateOutput) CertificateTemplate

func (o CertificateOutput) CertificateTemplate() pulumi.StringPtrOutput

The resource name for a CertificateTemplate used to issue this certificate, in the format `projects/*/locations/*/certificateTemplates/*`. If this is specified, the caller must have the necessary permission to use this template. If this is omitted, no template will be used. This template must be in the same location as the Certificate.

func (CertificateOutput) Config

The config used to create a self-signed X.509 certificate or CSR. Structure is documented below.

func (CertificateOutput) CreateTime

func (o CertificateOutput) CreateTime() pulumi.StringOutput

The time that this resource was created on the server. This is in RFC3339 text format.

func (CertificateOutput) EffectiveLabels

func (o CertificateOutput) EffectiveLabels() pulumi.StringMapOutput

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

func (CertificateOutput) ElementType

func (CertificateOutput) ElementType() reflect.Type

func (CertificateOutput) IssuerCertificateAuthority

func (o CertificateOutput) IssuerCertificateAuthority() pulumi.StringOutput

The resource name of the issuing CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.

func (CertificateOutput) Labels

Labels with user-defined metadata to apply to this resource.

**Note**: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field `effectiveLabels` for all of the labels present on the resource.

func (CertificateOutput) Lifetime

The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".

func (CertificateOutput) Location

func (o CertificateOutput) Location() pulumi.StringOutput

Location of the Certificate. A full list of valid locations can be found by running `gcloud privateca locations list`.

***

func (CertificateOutput) Name

The name for this Certificate.

func (CertificateOutput) PemCertificate

func (o CertificateOutput) PemCertificate() pulumi.StringOutput

Output only. The pem-encoded, signed X.509 certificate.

func (CertificateOutput) PemCertificateChains

func (o CertificateOutput) PemCertificateChains() pulumi.StringArrayOutput

The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.

func (CertificateOutput) PemCsr

Immutable. A pem-encoded X.509 certificate signing request (CSR).

func (CertificateOutput) Pool

The name of the CaPool this Certificate belongs to.

func (CertificateOutput) Project

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

func (CertificateOutput) PulumiLabels

func (o CertificateOutput) PulumiLabels() pulumi.StringMapOutput

The combination of labels configured directly on the resource and default labels configured on the provider.

func (CertificateOutput) RevocationDetails

Output only. Details regarding the revocation of this Certificate. This Certificate is considered revoked if and only if this field is present. Structure is documented below.

func (CertificateOutput) ToCertificateOutput

func (o CertificateOutput) ToCertificateOutput() CertificateOutput

func (CertificateOutput) ToCertificateOutputWithContext

func (o CertificateOutput) ToCertificateOutputWithContext(ctx context.Context) CertificateOutput

func (CertificateOutput) UpdateTime

func (o CertificateOutput) UpdateTime() pulumi.StringOutput

Output only. The time at which this CertificateAuthority was updated. This is in RFC3339 text format.

type CertificateRevocationDetail

type CertificateRevocationDetail struct {
	// (Output)
	// Indicates why a Certificate was revoked.
	RevocationState *string `pulumi:"revocationState"`
	// (Output)
	// The time at which this Certificate was revoked.
	RevocationTime *string `pulumi:"revocationTime"`
}

type CertificateRevocationDetailArgs

type CertificateRevocationDetailArgs struct {
	// (Output)
	// Indicates why a Certificate was revoked.
	RevocationState pulumi.StringPtrInput `pulumi:"revocationState"`
	// (Output)
	// The time at which this Certificate was revoked.
	RevocationTime pulumi.StringPtrInput `pulumi:"revocationTime"`
}

func (CertificateRevocationDetailArgs) ElementType

func (CertificateRevocationDetailArgs) ToCertificateRevocationDetailOutput

func (i CertificateRevocationDetailArgs) ToCertificateRevocationDetailOutput() CertificateRevocationDetailOutput

func (CertificateRevocationDetailArgs) ToCertificateRevocationDetailOutputWithContext

func (i CertificateRevocationDetailArgs) ToCertificateRevocationDetailOutputWithContext(ctx context.Context) CertificateRevocationDetailOutput

type CertificateRevocationDetailArray

type CertificateRevocationDetailArray []CertificateRevocationDetailInput

func (CertificateRevocationDetailArray) ElementType

func (CertificateRevocationDetailArray) ToCertificateRevocationDetailArrayOutput

func (i CertificateRevocationDetailArray) ToCertificateRevocationDetailArrayOutput() CertificateRevocationDetailArrayOutput

func (CertificateRevocationDetailArray) ToCertificateRevocationDetailArrayOutputWithContext

func (i CertificateRevocationDetailArray) ToCertificateRevocationDetailArrayOutputWithContext(ctx context.Context) CertificateRevocationDetailArrayOutput

type CertificateRevocationDetailArrayInput

type CertificateRevocationDetailArrayInput interface {
	pulumi.Input

	ToCertificateRevocationDetailArrayOutput() CertificateRevocationDetailArrayOutput
	ToCertificateRevocationDetailArrayOutputWithContext(context.Context) CertificateRevocationDetailArrayOutput
}

CertificateRevocationDetailArrayInput is an input type that accepts CertificateRevocationDetailArray and CertificateRevocationDetailArrayOutput values. You can construct a concrete instance of `CertificateRevocationDetailArrayInput` via:

CertificateRevocationDetailArray{ CertificateRevocationDetailArgs{...} }

type CertificateRevocationDetailArrayOutput

type CertificateRevocationDetailArrayOutput struct{ *pulumi.OutputState }

func (CertificateRevocationDetailArrayOutput) ElementType

func (CertificateRevocationDetailArrayOutput) Index

func (CertificateRevocationDetailArrayOutput) ToCertificateRevocationDetailArrayOutput

func (o CertificateRevocationDetailArrayOutput) ToCertificateRevocationDetailArrayOutput() CertificateRevocationDetailArrayOutput

func (CertificateRevocationDetailArrayOutput) ToCertificateRevocationDetailArrayOutputWithContext

func (o CertificateRevocationDetailArrayOutput) ToCertificateRevocationDetailArrayOutputWithContext(ctx context.Context) CertificateRevocationDetailArrayOutput

type CertificateRevocationDetailInput

type CertificateRevocationDetailInput interface {
	pulumi.Input

	ToCertificateRevocationDetailOutput() CertificateRevocationDetailOutput
	ToCertificateRevocationDetailOutputWithContext(context.Context) CertificateRevocationDetailOutput
}

CertificateRevocationDetailInput is an input type that accepts CertificateRevocationDetailArgs and CertificateRevocationDetailOutput values. You can construct a concrete instance of `CertificateRevocationDetailInput` via:

CertificateRevocationDetailArgs{...}

type CertificateRevocationDetailOutput

type CertificateRevocationDetailOutput struct{ *pulumi.OutputState }

func (CertificateRevocationDetailOutput) ElementType

func (CertificateRevocationDetailOutput) RevocationState

(Output) Indicates why a Certificate was revoked.

func (CertificateRevocationDetailOutput) RevocationTime

(Output) The time at which this Certificate was revoked.

func (CertificateRevocationDetailOutput) ToCertificateRevocationDetailOutput

func (o CertificateRevocationDetailOutput) ToCertificateRevocationDetailOutput() CertificateRevocationDetailOutput

func (CertificateRevocationDetailOutput) ToCertificateRevocationDetailOutputWithContext

func (o CertificateRevocationDetailOutput) ToCertificateRevocationDetailOutputWithContext(ctx context.Context) CertificateRevocationDetailOutput

type CertificateState

type CertificateState struct {
	// The Certificate Authority ID that should issue the certificate. For example, to issue a Certificate from
	// a Certificate Authority with resource name `projects/my-project/locations/us-central1/caPools/my-pool/certificateAuthorities/my-ca`,
	// argument `pool` should be set to `projects/my-project/locations/us-central1/caPools/my-pool`, argument `certificateAuthority`
	// should be set to `my-ca`.
	CertificateAuthority pulumi.StringPtrInput
	// Output only. Details regarding the revocation of this Certificate. This Certificate is considered revoked if and only if this field is present.
	// Structure is documented below.
	CertificateDescriptions CertificateCertificateDescriptionArrayInput
	// The resource name for a CertificateTemplate used to issue this certificate,
	// in the format `projects/*/locations/*/certificateTemplates/*`. If this is specified,
	// the caller must have the necessary permission to use this template. If this is
	// omitted, no template will be used. This template must be in the same location
	// as the Certificate.
	CertificateTemplate pulumi.StringPtrInput
	// The config used to create a self-signed X.509 certificate or CSR.
	// Structure is documented below.
	Config CertificateConfigPtrInput
	// The time that this resource was created on the server.
	// This is in RFC3339 text format.
	CreateTime pulumi.StringPtrInput
	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.StringMapInput
	// The resource name of the issuing CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
	IssuerCertificateAuthority pulumi.StringPtrInput
	// Labels with user-defined metadata to apply to this resource.
	//
	// **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
	// Please refer to the field `effectiveLabels` for all of the labels present on the resource.
	Labels pulumi.StringMapInput
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
	// "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
	// fractional digits, terminated by 's'. Example: "3.5s".
	Lifetime pulumi.StringPtrInput
	// Location of the Certificate. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	//
	// ***
	Location pulumi.StringPtrInput
	// The name for this Certificate.
	Name pulumi.StringPtrInput
	// Output only. The pem-encoded, signed X.509 certificate.
	PemCertificate pulumi.StringPtrInput
	// The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
	PemCertificateChains pulumi.StringArrayInput
	// Immutable. A pem-encoded X.509 certificate signing request (CSR).
	PemCsr pulumi.StringPtrInput
	// The name of the CaPool this Certificate belongs to.
	Pool pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// The combination of labels configured directly on the resource
	// and default labels configured on the provider.
	PulumiLabels pulumi.StringMapInput
	// Output only. Details regarding the revocation of this Certificate. This Certificate is
	// considered revoked if and only if this field is present.
	// Structure is documented below.
	RevocationDetails CertificateRevocationDetailArrayInput
	// Output only. The time at which this CertificateAuthority was updated.
	// This is in RFC3339 text format.
	UpdateTime pulumi.StringPtrInput
}

func (CertificateState) ElementType

func (CertificateState) ElementType() reflect.Type

type CertificateTemplate

type CertificateTemplate struct {
	pulumi.CustomResourceState

	// Output only. The time at which this CertificateTemplate was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Optional. A human-readable description of scenarios this template is intended for.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.MapOutput `pulumi:"effectiveLabels"`
	// Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
	// omitted, then this template will not add restrictions on a certificate's identity.
	IdentityConstraints CertificateTemplateIdentityConstraintsPtrOutput `pulumi:"identityConstraints"`
	// Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
	// present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
	// resource.
	Labels pulumi.StringMapOutput `pulumi:"labels"`
	// The location for the resource
	Location pulumi.StringOutput `pulumi:"location"`
	// The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
	Name pulumi.StringOutput `pulumi:"name"`
	// Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
	// If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
	// dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
	// request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
	// These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
	PassthroughExtensions CertificateTemplatePassthroughExtensionsPtrOutput `pulumi:"passthroughExtensions"`
	// Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
	// certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
	// here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
	// certificate issuance request will fail.
	PredefinedValues CertificateTemplatePredefinedValuesPtrOutput `pulumi:"predefinedValues"`
	// The project for the resource
	Project pulumi.StringOutput `pulumi:"project"`
	// The combination of labels configured directly on the resource and default labels configured on the provider.
	PulumiLabels pulumi.MapOutput `pulumi:"pulumiLabels"`
	// Output only. The time at which this CertificateTemplate was updated.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Certificate Authority Service provides reusable and parameterized templates that you can use for common certificate issuance scenarios. A certificate template represents a relatively static and well-defined certificate issuance schema within an organization. A certificate template can essentially become a full-fledged vertical certificate issuance framework.

For more information, see: * [Understanding Certificate Templates](https://cloud.google.com/certificate-authority-service/docs/certificate-template) * [Common configurations and Certificate Profiles](https://cloud.google.com/certificate-authority-service/docs/certificate-profile) ## Example Usage

### Basic_certificate_template An example of a basic privateca certificate template ```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplate(ctx, "primary", &certificateauthority.CertificateTemplateArgs{
			Location:    pulumi.String("us-west1"),
			Name:        pulumi.String("template"),
			Description: pulumi.String("An updated sample certificate template"),
			IdentityConstraints: &certificateauthority.CertificateTemplateIdentityConstraintsArgs{
				AllowSubjectAltNamesPassthrough: pulumi.Bool(true),
				AllowSubjectPassthrough:         pulumi.Bool(true),
				CelExpression: &certificateauthority.CertificateTemplateIdentityConstraintsCelExpressionArgs{
					Description: pulumi.String("Always true"),
					Expression:  pulumi.String("true"),
					Location:    pulumi.String("any.file.anywhere"),
					Title:       pulumi.String("Sample expression"),
				},
			},
			PassthroughExtensions: &certificateauthority.CertificateTemplatePassthroughExtensionsArgs{
				AdditionalExtensions: certificateauthority.CertificateTemplatePassthroughExtensionsAdditionalExtensionArray{
					&certificateauthority.CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs{
						ObjectIdPaths: pulumi.IntArray{
							pulumi.Int(1),
							pulumi.Int(6),
						},
					},
				},
				KnownExtensions: pulumi.StringArray{
					pulumi.String("EXTENDED_KEY_USAGE"),
				},
			},
			PredefinedValues: &certificateauthority.CertificateTemplatePredefinedValuesArgs{
				AdditionalExtensions: certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionArray{
					&certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionArgs{
						ObjectId: &certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs{
							ObjectIdPaths: pulumi.IntArray{
								pulumi.Int(1),
								pulumi.Int(6),
							},
						},
						Value:    pulumi.String("c3RyaW5nCg=="),
						Critical: pulumi.Bool(true),
					},
				},
				AiaOcspServers: pulumi.StringArray{
					pulumi.String("string"),
				},
				CaOptions: &certificateauthority.CertificateTemplatePredefinedValuesCaOptionsArgs{
					IsCa:                pulumi.Bool(false),
					MaxIssuerPathLength: pulumi.Int(6),
				},
				KeyUsage: &certificateauthority.CertificateTemplatePredefinedValuesKeyUsageArgs{
					BaseKeyUsage: &certificateauthority.CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs{
						CertSign:          pulumi.Bool(false),
						ContentCommitment: pulumi.Bool(true),
						CrlSign:           pulumi.Bool(false),
						DataEncipherment:  pulumi.Bool(true),
						DecipherOnly:      pulumi.Bool(true),
						DigitalSignature:  pulumi.Bool(true),
						EncipherOnly:      pulumi.Bool(true),
						KeyAgreement:      pulumi.Bool(true),
						KeyEncipherment:   pulumi.Bool(true),
					},
					ExtendedKeyUsage: &certificateauthority.CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs{
						ClientAuth:      pulumi.Bool(true),
						CodeSigning:     pulumi.Bool(true),
						EmailProtection: pulumi.Bool(true),
						OcspSigning:     pulumi.Bool(true),
						ServerAuth:      pulumi.Bool(true),
						TimeStamping:    pulumi.Bool(true),
					},
					UnknownExtendedKeyUsages: certificateauthority.CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray{
						&certificateauthority.CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs{
							ObjectIdPaths: pulumi.IntArray{
								pulumi.Int(1),
								pulumi.Int(6),
							},
						},
					},
				},
				PolicyIds: certificateauthority.CertificateTemplatePredefinedValuesPolicyIdArray{
					&certificateauthority.CertificateTemplatePredefinedValuesPolicyIdArgs{
						ObjectIdPaths: pulumi.IntArray{
							pulumi.Int(1),
							pulumi.Int(6),
						},
					},
				},
			},
			Project: pulumi.String("my-project-name"),
			Labels: pulumi.StringMap{
				"label-two": pulumi.String("value-two"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

CertificateTemplate can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/certificateTemplates/{{name}}`

* `{{project}}/{{location}}/{{name}}`

* `{{location}}/{{name}}`

When using the `pulumi import` command, CertificateTemplate can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:certificateauthority/certificateTemplate:CertificateTemplate default projects/{{project}}/locations/{{location}}/certificateTemplates/{{name}} ```

```sh $ pulumi import gcp:certificateauthority/certificateTemplate:CertificateTemplate default {{project}}/{{location}}/{{name}} ```

```sh $ pulumi import gcp:certificateauthority/certificateTemplate:CertificateTemplate default {{location}}/{{name}} ```

func GetCertificateTemplate

func GetCertificateTemplate(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertificateTemplateState, opts ...pulumi.ResourceOption) (*CertificateTemplate, error)

GetCertificateTemplate gets an existing CertificateTemplate resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertificateTemplate

func NewCertificateTemplate(ctx *pulumi.Context,
	name string, args *CertificateTemplateArgs, opts ...pulumi.ResourceOption) (*CertificateTemplate, error)

NewCertificateTemplate registers a new resource with the given unique name, arguments, and options.

func (*CertificateTemplate) ElementType

func (*CertificateTemplate) ElementType() reflect.Type

func (*CertificateTemplate) ToCertificateTemplateOutput

func (i *CertificateTemplate) ToCertificateTemplateOutput() CertificateTemplateOutput

func (*CertificateTemplate) ToCertificateTemplateOutputWithContext

func (i *CertificateTemplate) ToCertificateTemplateOutputWithContext(ctx context.Context) CertificateTemplateOutput

type CertificateTemplateArgs

type CertificateTemplateArgs struct {
	// Optional. A human-readable description of scenarios this template is intended for.
	Description pulumi.StringPtrInput
	// Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
	// omitted, then this template will not add restrictions on a certificate's identity.
	IdentityConstraints CertificateTemplateIdentityConstraintsPtrInput
	// Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
	// present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
	// resource.
	Labels pulumi.StringMapInput
	// The location for the resource
	Location pulumi.StringInput
	// The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
	Name pulumi.StringPtrInput
	// Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
	// If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
	// dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
	// request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
	// These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
	PassthroughExtensions CertificateTemplatePassthroughExtensionsPtrInput
	// Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
	// certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
	// here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
	// certificate issuance request will fail.
	PredefinedValues CertificateTemplatePredefinedValuesPtrInput
	// The project for the resource
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a CertificateTemplate resource.

func (CertificateTemplateArgs) ElementType

func (CertificateTemplateArgs) ElementType() reflect.Type

type CertificateTemplateArray

type CertificateTemplateArray []CertificateTemplateInput

func (CertificateTemplateArray) ElementType

func (CertificateTemplateArray) ElementType() reflect.Type

func (CertificateTemplateArray) ToCertificateTemplateArrayOutput

func (i CertificateTemplateArray) ToCertificateTemplateArrayOutput() CertificateTemplateArrayOutput

func (CertificateTemplateArray) ToCertificateTemplateArrayOutputWithContext

func (i CertificateTemplateArray) ToCertificateTemplateArrayOutputWithContext(ctx context.Context) CertificateTemplateArrayOutput

type CertificateTemplateArrayInput

type CertificateTemplateArrayInput interface {
	pulumi.Input

	ToCertificateTemplateArrayOutput() CertificateTemplateArrayOutput
	ToCertificateTemplateArrayOutputWithContext(context.Context) CertificateTemplateArrayOutput
}

CertificateTemplateArrayInput is an input type that accepts CertificateTemplateArray and CertificateTemplateArrayOutput values. You can construct a concrete instance of `CertificateTemplateArrayInput` via:

CertificateTemplateArray{ CertificateTemplateArgs{...} }

type CertificateTemplateArrayOutput

type CertificateTemplateArrayOutput struct{ *pulumi.OutputState }

func (CertificateTemplateArrayOutput) ElementType

func (CertificateTemplateArrayOutput) Index

func (CertificateTemplateArrayOutput) ToCertificateTemplateArrayOutput

func (o CertificateTemplateArrayOutput) ToCertificateTemplateArrayOutput() CertificateTemplateArrayOutput

func (CertificateTemplateArrayOutput) ToCertificateTemplateArrayOutputWithContext

func (o CertificateTemplateArrayOutput) ToCertificateTemplateArrayOutputWithContext(ctx context.Context) CertificateTemplateArrayOutput

type CertificateTemplateIamBinding

type CertificateTemplateIamBinding struct {
	pulumi.CustomResourceState

	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringOutput `pulumi:"certificateTemplate"`
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CertificateTemplateIamBindingConditionPtrOutput `pulumi:"condition"`
	// (Computed) The etag of the IAM policy.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied. Only one
	// `certificateauthority.CertificateTemplateIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Three different resources help you manage your IAM policy for Certificate Authority Service CertificateTemplate. Each of these resources serves a different use case:

* `certificateauthority.CertificateTemplateIamPolicy`: Authoritative. Sets the IAM policy for the certificatetemplate and replaces any existing policy already attached. * `certificateauthority.CertificateTemplateIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the certificatetemplate are preserved. * `certificateauthority.CertificateTemplateIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the certificatetemplate are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `certificateauthority.CertificateTemplateIamPolicy`: Retrieves the IAM policy for the certificatetemplate

> **Note:** `certificateauthority.CertificateTemplateIamPolicy` **cannot** be used in conjunction with `certificateauthority.CertificateTemplateIamBinding` and `certificateauthority.CertificateTemplateIamMember` or they will fight over what your policy should be.

> **Note:** `certificateauthority.CertificateTemplateIamBinding` resources **can be** used in conjunction with `certificateauthority.CertificateTemplateIamMember` resources **only if** they do not grant privilege to the same role.

> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.

## google\_privateca\_certificate\_template\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CertificateTemplateIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CertificateTemplateIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## google\_privateca\_certificate\_template\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CertificateTemplateIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CertificateTemplateIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

For all import syntaxes, the "resource in question" can take any of the following forms:

* projects/{{project}}/locations/{{location}}/certificateTemplates/{{name}}

* {{project}}/{{location}}/{{name}}

* {{location}}/{{name}}

Any variables not passed in the import command will be taken from the provider configuration.

Certificate Authority Service certificatetemplate IAM resources can be imported using the resource identifiers, role, and member.

IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.

```sh $ pulumi import gcp:certificateauthority/certificateTemplateIamBinding:CertificateTemplateIamBinding editor "projects/{{project}}/locations/{{location}}/certificateTemplates/{{certificate_template}} roles/privateca.templateUser user:jane@example.com" ```

IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.

```sh $ pulumi import gcp:certificateauthority/certificateTemplateIamBinding:CertificateTemplateIamBinding editor "projects/{{project}}/locations/{{location}}/certificateTemplates/{{certificate_template}} roles/privateca.templateUser" ```

IAM policy imports use the identifier of the resource in question, e.g.

```sh $ pulumi import gcp:certificateauthority/certificateTemplateIamBinding:CertificateTemplateIamBinding editor projects/{{project}}/locations/{{location}}/certificateTemplates/{{certificate_template}} ```

-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.

func GetCertificateTemplateIamBinding

func GetCertificateTemplateIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertificateTemplateIamBindingState, opts ...pulumi.ResourceOption) (*CertificateTemplateIamBinding, error)

GetCertificateTemplateIamBinding gets an existing CertificateTemplateIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertificateTemplateIamBinding

func NewCertificateTemplateIamBinding(ctx *pulumi.Context,
	name string, args *CertificateTemplateIamBindingArgs, opts ...pulumi.ResourceOption) (*CertificateTemplateIamBinding, error)

NewCertificateTemplateIamBinding registers a new resource with the given unique name, arguments, and options.

func (*CertificateTemplateIamBinding) ElementType

func (*CertificateTemplateIamBinding) ToCertificateTemplateIamBindingOutput

func (i *CertificateTemplateIamBinding) ToCertificateTemplateIamBindingOutput() CertificateTemplateIamBindingOutput

func (*CertificateTemplateIamBinding) ToCertificateTemplateIamBindingOutputWithContext

func (i *CertificateTemplateIamBinding) ToCertificateTemplateIamBindingOutputWithContext(ctx context.Context) CertificateTemplateIamBindingOutput

type CertificateTemplateIamBindingArgs

type CertificateTemplateIamBindingArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringInput
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CertificateTemplateIamBindingConditionPtrInput
	Location  pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Members pulumi.StringArrayInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `certificateauthority.CertificateTemplateIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringInput
}

The set of arguments for constructing a CertificateTemplateIamBinding resource.

func (CertificateTemplateIamBindingArgs) ElementType

type CertificateTemplateIamBindingArray

type CertificateTemplateIamBindingArray []CertificateTemplateIamBindingInput

func (CertificateTemplateIamBindingArray) ElementType

func (CertificateTemplateIamBindingArray) ToCertificateTemplateIamBindingArrayOutput

func (i CertificateTemplateIamBindingArray) ToCertificateTemplateIamBindingArrayOutput() CertificateTemplateIamBindingArrayOutput

func (CertificateTemplateIamBindingArray) ToCertificateTemplateIamBindingArrayOutputWithContext

func (i CertificateTemplateIamBindingArray) ToCertificateTemplateIamBindingArrayOutputWithContext(ctx context.Context) CertificateTemplateIamBindingArrayOutput

type CertificateTemplateIamBindingArrayInput

type CertificateTemplateIamBindingArrayInput interface {
	pulumi.Input

	ToCertificateTemplateIamBindingArrayOutput() CertificateTemplateIamBindingArrayOutput
	ToCertificateTemplateIamBindingArrayOutputWithContext(context.Context) CertificateTemplateIamBindingArrayOutput
}

CertificateTemplateIamBindingArrayInput is an input type that accepts CertificateTemplateIamBindingArray and CertificateTemplateIamBindingArrayOutput values. You can construct a concrete instance of `CertificateTemplateIamBindingArrayInput` via:

CertificateTemplateIamBindingArray{ CertificateTemplateIamBindingArgs{...} }

type CertificateTemplateIamBindingArrayOutput

type CertificateTemplateIamBindingArrayOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamBindingArrayOutput) ElementType

func (CertificateTemplateIamBindingArrayOutput) Index

func (CertificateTemplateIamBindingArrayOutput) ToCertificateTemplateIamBindingArrayOutput

func (o CertificateTemplateIamBindingArrayOutput) ToCertificateTemplateIamBindingArrayOutput() CertificateTemplateIamBindingArrayOutput

func (CertificateTemplateIamBindingArrayOutput) ToCertificateTemplateIamBindingArrayOutputWithContext

func (o CertificateTemplateIamBindingArrayOutput) ToCertificateTemplateIamBindingArrayOutputWithContext(ctx context.Context) CertificateTemplateIamBindingArrayOutput

type CertificateTemplateIamBindingCondition

type CertificateTemplateIamBindingCondition struct {
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title string `pulumi:"title"`
}

type CertificateTemplateIamBindingConditionArgs

type CertificateTemplateIamBindingConditionArgs struct {
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringInput `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title pulumi.StringInput `pulumi:"title"`
}

func (CertificateTemplateIamBindingConditionArgs) ElementType

func (CertificateTemplateIamBindingConditionArgs) ToCertificateTemplateIamBindingConditionOutput

func (i CertificateTemplateIamBindingConditionArgs) ToCertificateTemplateIamBindingConditionOutput() CertificateTemplateIamBindingConditionOutput

func (CertificateTemplateIamBindingConditionArgs) ToCertificateTemplateIamBindingConditionOutputWithContext

func (i CertificateTemplateIamBindingConditionArgs) ToCertificateTemplateIamBindingConditionOutputWithContext(ctx context.Context) CertificateTemplateIamBindingConditionOutput

func (CertificateTemplateIamBindingConditionArgs) ToCertificateTemplateIamBindingConditionPtrOutput

func (i CertificateTemplateIamBindingConditionArgs) ToCertificateTemplateIamBindingConditionPtrOutput() CertificateTemplateIamBindingConditionPtrOutput

func (CertificateTemplateIamBindingConditionArgs) ToCertificateTemplateIamBindingConditionPtrOutputWithContext

func (i CertificateTemplateIamBindingConditionArgs) ToCertificateTemplateIamBindingConditionPtrOutputWithContext(ctx context.Context) CertificateTemplateIamBindingConditionPtrOutput

type CertificateTemplateIamBindingConditionInput

type CertificateTemplateIamBindingConditionInput interface {
	pulumi.Input

	ToCertificateTemplateIamBindingConditionOutput() CertificateTemplateIamBindingConditionOutput
	ToCertificateTemplateIamBindingConditionOutputWithContext(context.Context) CertificateTemplateIamBindingConditionOutput
}

CertificateTemplateIamBindingConditionInput is an input type that accepts CertificateTemplateIamBindingConditionArgs and CertificateTemplateIamBindingConditionOutput values. You can construct a concrete instance of `CertificateTemplateIamBindingConditionInput` via:

CertificateTemplateIamBindingConditionArgs{...}

type CertificateTemplateIamBindingConditionOutput

type CertificateTemplateIamBindingConditionOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamBindingConditionOutput) Description

func (CertificateTemplateIamBindingConditionOutput) ElementType

func (CertificateTemplateIamBindingConditionOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CertificateTemplateIamBindingConditionOutput) Title

A title for the expression, i.e. a short string describing its purpose.

func (CertificateTemplateIamBindingConditionOutput) ToCertificateTemplateIamBindingConditionOutput

func (o CertificateTemplateIamBindingConditionOutput) ToCertificateTemplateIamBindingConditionOutput() CertificateTemplateIamBindingConditionOutput

func (CertificateTemplateIamBindingConditionOutput) ToCertificateTemplateIamBindingConditionOutputWithContext

func (o CertificateTemplateIamBindingConditionOutput) ToCertificateTemplateIamBindingConditionOutputWithContext(ctx context.Context) CertificateTemplateIamBindingConditionOutput

func (CertificateTemplateIamBindingConditionOutput) ToCertificateTemplateIamBindingConditionPtrOutput

func (o CertificateTemplateIamBindingConditionOutput) ToCertificateTemplateIamBindingConditionPtrOutput() CertificateTemplateIamBindingConditionPtrOutput

func (CertificateTemplateIamBindingConditionOutput) ToCertificateTemplateIamBindingConditionPtrOutputWithContext

func (o CertificateTemplateIamBindingConditionOutput) ToCertificateTemplateIamBindingConditionPtrOutputWithContext(ctx context.Context) CertificateTemplateIamBindingConditionPtrOutput

type CertificateTemplateIamBindingConditionPtrInput

type CertificateTemplateIamBindingConditionPtrInput interface {
	pulumi.Input

	ToCertificateTemplateIamBindingConditionPtrOutput() CertificateTemplateIamBindingConditionPtrOutput
	ToCertificateTemplateIamBindingConditionPtrOutputWithContext(context.Context) CertificateTemplateIamBindingConditionPtrOutput
}

CertificateTemplateIamBindingConditionPtrInput is an input type that accepts CertificateTemplateIamBindingConditionArgs, CertificateTemplateIamBindingConditionPtr and CertificateTemplateIamBindingConditionPtrOutput values. You can construct a concrete instance of `CertificateTemplateIamBindingConditionPtrInput` via:

        CertificateTemplateIamBindingConditionArgs{...}

or:

        nil

type CertificateTemplateIamBindingConditionPtrOutput

type CertificateTemplateIamBindingConditionPtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamBindingConditionPtrOutput) Description

func (CertificateTemplateIamBindingConditionPtrOutput) Elem

func (CertificateTemplateIamBindingConditionPtrOutput) ElementType

func (CertificateTemplateIamBindingConditionPtrOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CertificateTemplateIamBindingConditionPtrOutput) Title

A title for the expression, i.e. a short string describing its purpose.

func (CertificateTemplateIamBindingConditionPtrOutput) ToCertificateTemplateIamBindingConditionPtrOutput

func (o CertificateTemplateIamBindingConditionPtrOutput) ToCertificateTemplateIamBindingConditionPtrOutput() CertificateTemplateIamBindingConditionPtrOutput

func (CertificateTemplateIamBindingConditionPtrOutput) ToCertificateTemplateIamBindingConditionPtrOutputWithContext

func (o CertificateTemplateIamBindingConditionPtrOutput) ToCertificateTemplateIamBindingConditionPtrOutputWithContext(ctx context.Context) CertificateTemplateIamBindingConditionPtrOutput

type CertificateTemplateIamBindingInput

type CertificateTemplateIamBindingInput interface {
	pulumi.Input

	ToCertificateTemplateIamBindingOutput() CertificateTemplateIamBindingOutput
	ToCertificateTemplateIamBindingOutputWithContext(ctx context.Context) CertificateTemplateIamBindingOutput
}

type CertificateTemplateIamBindingMap

type CertificateTemplateIamBindingMap map[string]CertificateTemplateIamBindingInput

func (CertificateTemplateIamBindingMap) ElementType

func (CertificateTemplateIamBindingMap) ToCertificateTemplateIamBindingMapOutput

func (i CertificateTemplateIamBindingMap) ToCertificateTemplateIamBindingMapOutput() CertificateTemplateIamBindingMapOutput

func (CertificateTemplateIamBindingMap) ToCertificateTemplateIamBindingMapOutputWithContext

func (i CertificateTemplateIamBindingMap) ToCertificateTemplateIamBindingMapOutputWithContext(ctx context.Context) CertificateTemplateIamBindingMapOutput

type CertificateTemplateIamBindingMapInput

type CertificateTemplateIamBindingMapInput interface {
	pulumi.Input

	ToCertificateTemplateIamBindingMapOutput() CertificateTemplateIamBindingMapOutput
	ToCertificateTemplateIamBindingMapOutputWithContext(context.Context) CertificateTemplateIamBindingMapOutput
}

CertificateTemplateIamBindingMapInput is an input type that accepts CertificateTemplateIamBindingMap and CertificateTemplateIamBindingMapOutput values. You can construct a concrete instance of `CertificateTemplateIamBindingMapInput` via:

CertificateTemplateIamBindingMap{ "key": CertificateTemplateIamBindingArgs{...} }

type CertificateTemplateIamBindingMapOutput

type CertificateTemplateIamBindingMapOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamBindingMapOutput) ElementType

func (CertificateTemplateIamBindingMapOutput) MapIndex

func (CertificateTemplateIamBindingMapOutput) ToCertificateTemplateIamBindingMapOutput

func (o CertificateTemplateIamBindingMapOutput) ToCertificateTemplateIamBindingMapOutput() CertificateTemplateIamBindingMapOutput

func (CertificateTemplateIamBindingMapOutput) ToCertificateTemplateIamBindingMapOutputWithContext

func (o CertificateTemplateIamBindingMapOutput) ToCertificateTemplateIamBindingMapOutputWithContext(ctx context.Context) CertificateTemplateIamBindingMapOutput

type CertificateTemplateIamBindingOutput

type CertificateTemplateIamBindingOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamBindingOutput) CertificateTemplate

Used to find the parent resource to bind the IAM policy to

func (CertificateTemplateIamBindingOutput) Condition

An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.

func (CertificateTemplateIamBindingOutput) ElementType

func (CertificateTemplateIamBindingOutput) Etag

(Computed) The etag of the IAM policy.

func (CertificateTemplateIamBindingOutput) Location

func (CertificateTemplateIamBindingOutput) Members

Identities that will be granted the privilege in `role`. Each entry can have one of the following values: * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com. * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project" * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project" * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"

func (CertificateTemplateIamBindingOutput) Project

The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.

func (CertificateTemplateIamBindingOutput) Role

The role that should be applied. Only one `certificateauthority.CertificateTemplateIamBinding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.

func (CertificateTemplateIamBindingOutput) ToCertificateTemplateIamBindingOutput

func (o CertificateTemplateIamBindingOutput) ToCertificateTemplateIamBindingOutput() CertificateTemplateIamBindingOutput

func (CertificateTemplateIamBindingOutput) ToCertificateTemplateIamBindingOutputWithContext

func (o CertificateTemplateIamBindingOutput) ToCertificateTemplateIamBindingOutputWithContext(ctx context.Context) CertificateTemplateIamBindingOutput

type CertificateTemplateIamBindingState

type CertificateTemplateIamBindingState struct {
	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringPtrInput
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CertificateTemplateIamBindingConditionPtrInput
	// (Computed) The etag of the IAM policy.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Members pulumi.StringArrayInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `certificateauthority.CertificateTemplateIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringPtrInput
}

func (CertificateTemplateIamBindingState) ElementType

type CertificateTemplateIamMember

type CertificateTemplateIamMember struct {
	pulumi.CustomResourceState

	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringOutput `pulumi:"certificateTemplate"`
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CertificateTemplateIamMemberConditionPtrOutput `pulumi:"condition"`
	// (Computed) The etag of the IAM policy.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Member pulumi.StringOutput `pulumi:"member"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied. Only one
	// `certificateauthority.CertificateTemplateIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Three different resources help you manage your IAM policy for Certificate Authority Service CertificateTemplate. Each of these resources serves a different use case:

* `certificateauthority.CertificateTemplateIamPolicy`: Authoritative. Sets the IAM policy for the certificatetemplate and replaces any existing policy already attached. * `certificateauthority.CertificateTemplateIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the certificatetemplate are preserved. * `certificateauthority.CertificateTemplateIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the certificatetemplate are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `certificateauthority.CertificateTemplateIamPolicy`: Retrieves the IAM policy for the certificatetemplate

> **Note:** `certificateauthority.CertificateTemplateIamPolicy` **cannot** be used in conjunction with `certificateauthority.CertificateTemplateIamBinding` and `certificateauthority.CertificateTemplateIamMember` or they will fight over what your policy should be.

> **Note:** `certificateauthority.CertificateTemplateIamBinding` resources **can be** used in conjunction with `certificateauthority.CertificateTemplateIamMember` resources **only if** they do not grant privilege to the same role.

> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.

## google\_privateca\_certificate\_template\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CertificateTemplateIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CertificateTemplateIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## google\_privateca\_certificate\_template\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CertificateTemplateIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CertificateTemplateIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

For all import syntaxes, the "resource in question" can take any of the following forms:

* projects/{{project}}/locations/{{location}}/certificateTemplates/{{name}}

* {{project}}/{{location}}/{{name}}

* {{location}}/{{name}}

Any variables not passed in the import command will be taken from the provider configuration.

Certificate Authority Service certificatetemplate IAM resources can be imported using the resource identifiers, role, and member.

IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.

```sh $ pulumi import gcp:certificateauthority/certificateTemplateIamMember:CertificateTemplateIamMember editor "projects/{{project}}/locations/{{location}}/certificateTemplates/{{certificate_template}} roles/privateca.templateUser user:jane@example.com" ```

IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.

```sh $ pulumi import gcp:certificateauthority/certificateTemplateIamMember:CertificateTemplateIamMember editor "projects/{{project}}/locations/{{location}}/certificateTemplates/{{certificate_template}} roles/privateca.templateUser" ```

IAM policy imports use the identifier of the resource in question, e.g.

```sh $ pulumi import gcp:certificateauthority/certificateTemplateIamMember:CertificateTemplateIamMember editor projects/{{project}}/locations/{{location}}/certificateTemplates/{{certificate_template}} ```

-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.

func GetCertificateTemplateIamMember

func GetCertificateTemplateIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertificateTemplateIamMemberState, opts ...pulumi.ResourceOption) (*CertificateTemplateIamMember, error)

GetCertificateTemplateIamMember gets an existing CertificateTemplateIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertificateTemplateIamMember

func NewCertificateTemplateIamMember(ctx *pulumi.Context,
	name string, args *CertificateTemplateIamMemberArgs, opts ...pulumi.ResourceOption) (*CertificateTemplateIamMember, error)

NewCertificateTemplateIamMember registers a new resource with the given unique name, arguments, and options.

func (*CertificateTemplateIamMember) ElementType

func (*CertificateTemplateIamMember) ElementType() reflect.Type

func (*CertificateTemplateIamMember) ToCertificateTemplateIamMemberOutput

func (i *CertificateTemplateIamMember) ToCertificateTemplateIamMemberOutput() CertificateTemplateIamMemberOutput

func (*CertificateTemplateIamMember) ToCertificateTemplateIamMemberOutputWithContext

func (i *CertificateTemplateIamMember) ToCertificateTemplateIamMemberOutputWithContext(ctx context.Context) CertificateTemplateIamMemberOutput

type CertificateTemplateIamMemberArgs

type CertificateTemplateIamMemberArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringInput
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CertificateTemplateIamMemberConditionPtrInput
	Location  pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Member pulumi.StringInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `certificateauthority.CertificateTemplateIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringInput
}

The set of arguments for constructing a CertificateTemplateIamMember resource.

func (CertificateTemplateIamMemberArgs) ElementType

type CertificateTemplateIamMemberArray

type CertificateTemplateIamMemberArray []CertificateTemplateIamMemberInput

func (CertificateTemplateIamMemberArray) ElementType

func (CertificateTemplateIamMemberArray) ToCertificateTemplateIamMemberArrayOutput

func (i CertificateTemplateIamMemberArray) ToCertificateTemplateIamMemberArrayOutput() CertificateTemplateIamMemberArrayOutput

func (CertificateTemplateIamMemberArray) ToCertificateTemplateIamMemberArrayOutputWithContext

func (i CertificateTemplateIamMemberArray) ToCertificateTemplateIamMemberArrayOutputWithContext(ctx context.Context) CertificateTemplateIamMemberArrayOutput

type CertificateTemplateIamMemberArrayInput

type CertificateTemplateIamMemberArrayInput interface {
	pulumi.Input

	ToCertificateTemplateIamMemberArrayOutput() CertificateTemplateIamMemberArrayOutput
	ToCertificateTemplateIamMemberArrayOutputWithContext(context.Context) CertificateTemplateIamMemberArrayOutput
}

CertificateTemplateIamMemberArrayInput is an input type that accepts CertificateTemplateIamMemberArray and CertificateTemplateIamMemberArrayOutput values. You can construct a concrete instance of `CertificateTemplateIamMemberArrayInput` via:

CertificateTemplateIamMemberArray{ CertificateTemplateIamMemberArgs{...} }

type CertificateTemplateIamMemberArrayOutput

type CertificateTemplateIamMemberArrayOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamMemberArrayOutput) ElementType

func (CertificateTemplateIamMemberArrayOutput) Index

func (CertificateTemplateIamMemberArrayOutput) ToCertificateTemplateIamMemberArrayOutput

func (o CertificateTemplateIamMemberArrayOutput) ToCertificateTemplateIamMemberArrayOutput() CertificateTemplateIamMemberArrayOutput

func (CertificateTemplateIamMemberArrayOutput) ToCertificateTemplateIamMemberArrayOutputWithContext

func (o CertificateTemplateIamMemberArrayOutput) ToCertificateTemplateIamMemberArrayOutputWithContext(ctx context.Context) CertificateTemplateIamMemberArrayOutput

type CertificateTemplateIamMemberCondition

type CertificateTemplateIamMemberCondition struct {
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title string `pulumi:"title"`
}

type CertificateTemplateIamMemberConditionArgs

type CertificateTemplateIamMemberConditionArgs struct {
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringInput `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title pulumi.StringInput `pulumi:"title"`
}

func (CertificateTemplateIamMemberConditionArgs) ElementType

func (CertificateTemplateIamMemberConditionArgs) ToCertificateTemplateIamMemberConditionOutput

func (i CertificateTemplateIamMemberConditionArgs) ToCertificateTemplateIamMemberConditionOutput() CertificateTemplateIamMemberConditionOutput

func (CertificateTemplateIamMemberConditionArgs) ToCertificateTemplateIamMemberConditionOutputWithContext

func (i CertificateTemplateIamMemberConditionArgs) ToCertificateTemplateIamMemberConditionOutputWithContext(ctx context.Context) CertificateTemplateIamMemberConditionOutput

func (CertificateTemplateIamMemberConditionArgs) ToCertificateTemplateIamMemberConditionPtrOutput

func (i CertificateTemplateIamMemberConditionArgs) ToCertificateTemplateIamMemberConditionPtrOutput() CertificateTemplateIamMemberConditionPtrOutput

func (CertificateTemplateIamMemberConditionArgs) ToCertificateTemplateIamMemberConditionPtrOutputWithContext

func (i CertificateTemplateIamMemberConditionArgs) ToCertificateTemplateIamMemberConditionPtrOutputWithContext(ctx context.Context) CertificateTemplateIamMemberConditionPtrOutput

type CertificateTemplateIamMemberConditionInput

type CertificateTemplateIamMemberConditionInput interface {
	pulumi.Input

	ToCertificateTemplateIamMemberConditionOutput() CertificateTemplateIamMemberConditionOutput
	ToCertificateTemplateIamMemberConditionOutputWithContext(context.Context) CertificateTemplateIamMemberConditionOutput
}

CertificateTemplateIamMemberConditionInput is an input type that accepts CertificateTemplateIamMemberConditionArgs and CertificateTemplateIamMemberConditionOutput values. You can construct a concrete instance of `CertificateTemplateIamMemberConditionInput` via:

CertificateTemplateIamMemberConditionArgs{...}

type CertificateTemplateIamMemberConditionOutput

type CertificateTemplateIamMemberConditionOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamMemberConditionOutput) Description

func (CertificateTemplateIamMemberConditionOutput) ElementType

func (CertificateTemplateIamMemberConditionOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CertificateTemplateIamMemberConditionOutput) Title

A title for the expression, i.e. a short string describing its purpose.

func (CertificateTemplateIamMemberConditionOutput) ToCertificateTemplateIamMemberConditionOutput

func (o CertificateTemplateIamMemberConditionOutput) ToCertificateTemplateIamMemberConditionOutput() CertificateTemplateIamMemberConditionOutput

func (CertificateTemplateIamMemberConditionOutput) ToCertificateTemplateIamMemberConditionOutputWithContext

func (o CertificateTemplateIamMemberConditionOutput) ToCertificateTemplateIamMemberConditionOutputWithContext(ctx context.Context) CertificateTemplateIamMemberConditionOutput

func (CertificateTemplateIamMemberConditionOutput) ToCertificateTemplateIamMemberConditionPtrOutput

func (o CertificateTemplateIamMemberConditionOutput) ToCertificateTemplateIamMemberConditionPtrOutput() CertificateTemplateIamMemberConditionPtrOutput

func (CertificateTemplateIamMemberConditionOutput) ToCertificateTemplateIamMemberConditionPtrOutputWithContext

func (o CertificateTemplateIamMemberConditionOutput) ToCertificateTemplateIamMemberConditionPtrOutputWithContext(ctx context.Context) CertificateTemplateIamMemberConditionPtrOutput

type CertificateTemplateIamMemberConditionPtrInput

type CertificateTemplateIamMemberConditionPtrInput interface {
	pulumi.Input

	ToCertificateTemplateIamMemberConditionPtrOutput() CertificateTemplateIamMemberConditionPtrOutput
	ToCertificateTemplateIamMemberConditionPtrOutputWithContext(context.Context) CertificateTemplateIamMemberConditionPtrOutput
}

CertificateTemplateIamMemberConditionPtrInput is an input type that accepts CertificateTemplateIamMemberConditionArgs, CertificateTemplateIamMemberConditionPtr and CertificateTemplateIamMemberConditionPtrOutput values. You can construct a concrete instance of `CertificateTemplateIamMemberConditionPtrInput` via:

        CertificateTemplateIamMemberConditionArgs{...}

or:

        nil

type CertificateTemplateIamMemberConditionPtrOutput

type CertificateTemplateIamMemberConditionPtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamMemberConditionPtrOutput) Description

func (CertificateTemplateIamMemberConditionPtrOutput) Elem

func (CertificateTemplateIamMemberConditionPtrOutput) ElementType

func (CertificateTemplateIamMemberConditionPtrOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CertificateTemplateIamMemberConditionPtrOutput) Title

A title for the expression, i.e. a short string describing its purpose.

func (CertificateTemplateIamMemberConditionPtrOutput) ToCertificateTemplateIamMemberConditionPtrOutput

func (o CertificateTemplateIamMemberConditionPtrOutput) ToCertificateTemplateIamMemberConditionPtrOutput() CertificateTemplateIamMemberConditionPtrOutput

func (CertificateTemplateIamMemberConditionPtrOutput) ToCertificateTemplateIamMemberConditionPtrOutputWithContext

func (o CertificateTemplateIamMemberConditionPtrOutput) ToCertificateTemplateIamMemberConditionPtrOutputWithContext(ctx context.Context) CertificateTemplateIamMemberConditionPtrOutput

type CertificateTemplateIamMemberInput

type CertificateTemplateIamMemberInput interface {
	pulumi.Input

	ToCertificateTemplateIamMemberOutput() CertificateTemplateIamMemberOutput
	ToCertificateTemplateIamMemberOutputWithContext(ctx context.Context) CertificateTemplateIamMemberOutput
}

type CertificateTemplateIamMemberMap

type CertificateTemplateIamMemberMap map[string]CertificateTemplateIamMemberInput

func (CertificateTemplateIamMemberMap) ElementType

func (CertificateTemplateIamMemberMap) ToCertificateTemplateIamMemberMapOutput

func (i CertificateTemplateIamMemberMap) ToCertificateTemplateIamMemberMapOutput() CertificateTemplateIamMemberMapOutput

func (CertificateTemplateIamMemberMap) ToCertificateTemplateIamMemberMapOutputWithContext

func (i CertificateTemplateIamMemberMap) ToCertificateTemplateIamMemberMapOutputWithContext(ctx context.Context) CertificateTemplateIamMemberMapOutput

type CertificateTemplateIamMemberMapInput

type CertificateTemplateIamMemberMapInput interface {
	pulumi.Input

	ToCertificateTemplateIamMemberMapOutput() CertificateTemplateIamMemberMapOutput
	ToCertificateTemplateIamMemberMapOutputWithContext(context.Context) CertificateTemplateIamMemberMapOutput
}

CertificateTemplateIamMemberMapInput is an input type that accepts CertificateTemplateIamMemberMap and CertificateTemplateIamMemberMapOutput values. You can construct a concrete instance of `CertificateTemplateIamMemberMapInput` via:

CertificateTemplateIamMemberMap{ "key": CertificateTemplateIamMemberArgs{...} }

type CertificateTemplateIamMemberMapOutput

type CertificateTemplateIamMemberMapOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamMemberMapOutput) ElementType

func (CertificateTemplateIamMemberMapOutput) MapIndex

func (CertificateTemplateIamMemberMapOutput) ToCertificateTemplateIamMemberMapOutput

func (o CertificateTemplateIamMemberMapOutput) ToCertificateTemplateIamMemberMapOutput() CertificateTemplateIamMemberMapOutput

func (CertificateTemplateIamMemberMapOutput) ToCertificateTemplateIamMemberMapOutputWithContext

func (o CertificateTemplateIamMemberMapOutput) ToCertificateTemplateIamMemberMapOutputWithContext(ctx context.Context) CertificateTemplateIamMemberMapOutput

type CertificateTemplateIamMemberOutput

type CertificateTemplateIamMemberOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamMemberOutput) CertificateTemplate

func (o CertificateTemplateIamMemberOutput) CertificateTemplate() pulumi.StringOutput

Used to find the parent resource to bind the IAM policy to

func (CertificateTemplateIamMemberOutput) Condition

An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.

func (CertificateTemplateIamMemberOutput) ElementType

func (CertificateTemplateIamMemberOutput) Etag

(Computed) The etag of the IAM policy.

func (CertificateTemplateIamMemberOutput) Location

func (CertificateTemplateIamMemberOutput) Member

Identities that will be granted the privilege in `role`. Each entry can have one of the following values: * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com. * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project" * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project" * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"

func (CertificateTemplateIamMemberOutput) Project

The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.

func (CertificateTemplateIamMemberOutput) Role

The role that should be applied. Only one `certificateauthority.CertificateTemplateIamBinding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.

func (CertificateTemplateIamMemberOutput) ToCertificateTemplateIamMemberOutput

func (o CertificateTemplateIamMemberOutput) ToCertificateTemplateIamMemberOutput() CertificateTemplateIamMemberOutput

func (CertificateTemplateIamMemberOutput) ToCertificateTemplateIamMemberOutputWithContext

func (o CertificateTemplateIamMemberOutput) ToCertificateTemplateIamMemberOutputWithContext(ctx context.Context) CertificateTemplateIamMemberOutput

type CertificateTemplateIamMemberState

type CertificateTemplateIamMemberState struct {
	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringPtrInput
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition CertificateTemplateIamMemberConditionPtrInput
	// (Computed) The etag of the IAM policy.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Member pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `certificateauthority.CertificateTemplateIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringPtrInput
}

func (CertificateTemplateIamMemberState) ElementType

type CertificateTemplateIamPolicy

type CertificateTemplateIamPolicy struct {
	pulumi.CustomResourceState

	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringOutput `pulumi:"certificateTemplate"`
	// (Computed) The etag of the IAM policy.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	// The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData pulumi.StringOutput `pulumi:"policyData"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
}

Three different resources help you manage your IAM policy for Certificate Authority Service CertificateTemplate. Each of these resources serves a different use case:

* `certificateauthority.CertificateTemplateIamPolicy`: Authoritative. Sets the IAM policy for the certificatetemplate and replaces any existing policy already attached. * `certificateauthority.CertificateTemplateIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the certificatetemplate are preserved. * `certificateauthority.CertificateTemplateIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the certificatetemplate are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `certificateauthority.CertificateTemplateIamPolicy`: Retrieves the IAM policy for the certificatetemplate

> **Note:** `certificateauthority.CertificateTemplateIamPolicy` **cannot** be used in conjunction with `certificateauthority.CertificateTemplateIamBinding` and `certificateauthority.CertificateTemplateIamMember` or they will fight over what your policy should be.

> **Note:** `certificateauthority.CertificateTemplateIamBinding` resources **can be** used in conjunction with `certificateauthority.CertificateTemplateIamMember` resources **only if** they do not grant privilege to the same role.

> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.

## google\_privateca\_certificate\_template\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CertificateTemplateIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CertificateTemplateIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## google\_privateca\_certificate\_template\_iam\_policy

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/privateca.templateUser",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = certificateauthority.NewCertificateTemplateIamPolicy(ctx, "policy", &certificateauthority.CertificateTemplateIamPolicyArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			PolicyData:          pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_binding

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamBinding(ctx, "binding", &certificateauthority.CertificateTemplateIamBindingArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &certificateauthority.CertificateTemplateIamBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ## google\_privateca\_certificate\_template\_iam\_member

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.NewCertificateTemplateIamMember(ctx, "member", &certificateauthority.CertificateTemplateIamMemberArgs{
			CertificateTemplate: pulumi.Any(_default.Id),
			Role:                pulumi.String("roles/privateca.templateUser"),
			Member:              pulumi.String("user:jane@example.com"),
			Condition: &certificateauthority.CertificateTemplateIamMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

For all import syntaxes, the "resource in question" can take any of the following forms:

* projects/{{project}}/locations/{{location}}/certificateTemplates/{{name}}

* {{project}}/{{location}}/{{name}}

* {{location}}/{{name}}

Any variables not passed in the import command will be taken from the provider configuration.

Certificate Authority Service certificatetemplate IAM resources can be imported using the resource identifiers, role, and member.

IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.

```sh $ pulumi import gcp:certificateauthority/certificateTemplateIamPolicy:CertificateTemplateIamPolicy editor "projects/{{project}}/locations/{{location}}/certificateTemplates/{{certificate_template}} roles/privateca.templateUser user:jane@example.com" ```

IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.

```sh $ pulumi import gcp:certificateauthority/certificateTemplateIamPolicy:CertificateTemplateIamPolicy editor "projects/{{project}}/locations/{{location}}/certificateTemplates/{{certificate_template}} roles/privateca.templateUser" ```

IAM policy imports use the identifier of the resource in question, e.g.

```sh $ pulumi import gcp:certificateauthority/certificateTemplateIamPolicy:CertificateTemplateIamPolicy editor projects/{{project}}/locations/{{location}}/certificateTemplates/{{certificate_template}} ```

-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.

func GetCertificateTemplateIamPolicy

func GetCertificateTemplateIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertificateTemplateIamPolicyState, opts ...pulumi.ResourceOption) (*CertificateTemplateIamPolicy, error)

GetCertificateTemplateIamPolicy gets an existing CertificateTemplateIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertificateTemplateIamPolicy

func NewCertificateTemplateIamPolicy(ctx *pulumi.Context,
	name string, args *CertificateTemplateIamPolicyArgs, opts ...pulumi.ResourceOption) (*CertificateTemplateIamPolicy, error)

NewCertificateTemplateIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*CertificateTemplateIamPolicy) ElementType

func (*CertificateTemplateIamPolicy) ElementType() reflect.Type

func (*CertificateTemplateIamPolicy) ToCertificateTemplateIamPolicyOutput

func (i *CertificateTemplateIamPolicy) ToCertificateTemplateIamPolicyOutput() CertificateTemplateIamPolicyOutput

func (*CertificateTemplateIamPolicy) ToCertificateTemplateIamPolicyOutputWithContext

func (i *CertificateTemplateIamPolicy) ToCertificateTemplateIamPolicyOutputWithContext(ctx context.Context) CertificateTemplateIamPolicyOutput

type CertificateTemplateIamPolicyArgs

type CertificateTemplateIamPolicyArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringInput
	Location            pulumi.StringPtrInput
	// The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData pulumi.StringInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a CertificateTemplateIamPolicy resource.

func (CertificateTemplateIamPolicyArgs) ElementType

type CertificateTemplateIamPolicyArray

type CertificateTemplateIamPolicyArray []CertificateTemplateIamPolicyInput

func (CertificateTemplateIamPolicyArray) ElementType

func (CertificateTemplateIamPolicyArray) ToCertificateTemplateIamPolicyArrayOutput

func (i CertificateTemplateIamPolicyArray) ToCertificateTemplateIamPolicyArrayOutput() CertificateTemplateIamPolicyArrayOutput

func (CertificateTemplateIamPolicyArray) ToCertificateTemplateIamPolicyArrayOutputWithContext

func (i CertificateTemplateIamPolicyArray) ToCertificateTemplateIamPolicyArrayOutputWithContext(ctx context.Context) CertificateTemplateIamPolicyArrayOutput

type CertificateTemplateIamPolicyArrayInput

type CertificateTemplateIamPolicyArrayInput interface {
	pulumi.Input

	ToCertificateTemplateIamPolicyArrayOutput() CertificateTemplateIamPolicyArrayOutput
	ToCertificateTemplateIamPolicyArrayOutputWithContext(context.Context) CertificateTemplateIamPolicyArrayOutput
}

CertificateTemplateIamPolicyArrayInput is an input type that accepts CertificateTemplateIamPolicyArray and CertificateTemplateIamPolicyArrayOutput values. You can construct a concrete instance of `CertificateTemplateIamPolicyArrayInput` via:

CertificateTemplateIamPolicyArray{ CertificateTemplateIamPolicyArgs{...} }

type CertificateTemplateIamPolicyArrayOutput

type CertificateTemplateIamPolicyArrayOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamPolicyArrayOutput) ElementType

func (CertificateTemplateIamPolicyArrayOutput) Index

func (CertificateTemplateIamPolicyArrayOutput) ToCertificateTemplateIamPolicyArrayOutput

func (o CertificateTemplateIamPolicyArrayOutput) ToCertificateTemplateIamPolicyArrayOutput() CertificateTemplateIamPolicyArrayOutput

func (CertificateTemplateIamPolicyArrayOutput) ToCertificateTemplateIamPolicyArrayOutputWithContext

func (o CertificateTemplateIamPolicyArrayOutput) ToCertificateTemplateIamPolicyArrayOutputWithContext(ctx context.Context) CertificateTemplateIamPolicyArrayOutput

type CertificateTemplateIamPolicyInput

type CertificateTemplateIamPolicyInput interface {
	pulumi.Input

	ToCertificateTemplateIamPolicyOutput() CertificateTemplateIamPolicyOutput
	ToCertificateTemplateIamPolicyOutputWithContext(ctx context.Context) CertificateTemplateIamPolicyOutput
}

type CertificateTemplateIamPolicyMap

type CertificateTemplateIamPolicyMap map[string]CertificateTemplateIamPolicyInput

func (CertificateTemplateIamPolicyMap) ElementType

func (CertificateTemplateIamPolicyMap) ToCertificateTemplateIamPolicyMapOutput

func (i CertificateTemplateIamPolicyMap) ToCertificateTemplateIamPolicyMapOutput() CertificateTemplateIamPolicyMapOutput

func (CertificateTemplateIamPolicyMap) ToCertificateTemplateIamPolicyMapOutputWithContext

func (i CertificateTemplateIamPolicyMap) ToCertificateTemplateIamPolicyMapOutputWithContext(ctx context.Context) CertificateTemplateIamPolicyMapOutput

type CertificateTemplateIamPolicyMapInput

type CertificateTemplateIamPolicyMapInput interface {
	pulumi.Input

	ToCertificateTemplateIamPolicyMapOutput() CertificateTemplateIamPolicyMapOutput
	ToCertificateTemplateIamPolicyMapOutputWithContext(context.Context) CertificateTemplateIamPolicyMapOutput
}

CertificateTemplateIamPolicyMapInput is an input type that accepts CertificateTemplateIamPolicyMap and CertificateTemplateIamPolicyMapOutput values. You can construct a concrete instance of `CertificateTemplateIamPolicyMapInput` via:

CertificateTemplateIamPolicyMap{ "key": CertificateTemplateIamPolicyArgs{...} }

type CertificateTemplateIamPolicyMapOutput

type CertificateTemplateIamPolicyMapOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamPolicyMapOutput) ElementType

func (CertificateTemplateIamPolicyMapOutput) MapIndex

func (CertificateTemplateIamPolicyMapOutput) ToCertificateTemplateIamPolicyMapOutput

func (o CertificateTemplateIamPolicyMapOutput) ToCertificateTemplateIamPolicyMapOutput() CertificateTemplateIamPolicyMapOutput

func (CertificateTemplateIamPolicyMapOutput) ToCertificateTemplateIamPolicyMapOutputWithContext

func (o CertificateTemplateIamPolicyMapOutput) ToCertificateTemplateIamPolicyMapOutputWithContext(ctx context.Context) CertificateTemplateIamPolicyMapOutput

type CertificateTemplateIamPolicyOutput

type CertificateTemplateIamPolicyOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIamPolicyOutput) CertificateTemplate

func (o CertificateTemplateIamPolicyOutput) CertificateTemplate() pulumi.StringOutput

Used to find the parent resource to bind the IAM policy to

func (CertificateTemplateIamPolicyOutput) ElementType

func (CertificateTemplateIamPolicyOutput) Etag

(Computed) The etag of the IAM policy.

func (CertificateTemplateIamPolicyOutput) Location

func (CertificateTemplateIamPolicyOutput) PolicyData

The policy data generated by a `organizations.getIAMPolicy` data source.

func (CertificateTemplateIamPolicyOutput) Project

The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.

func (CertificateTemplateIamPolicyOutput) ToCertificateTemplateIamPolicyOutput

func (o CertificateTemplateIamPolicyOutput) ToCertificateTemplateIamPolicyOutput() CertificateTemplateIamPolicyOutput

func (CertificateTemplateIamPolicyOutput) ToCertificateTemplateIamPolicyOutputWithContext

func (o CertificateTemplateIamPolicyOutput) ToCertificateTemplateIamPolicyOutputWithContext(ctx context.Context) CertificateTemplateIamPolicyOutput

type CertificateTemplateIamPolicyState

type CertificateTemplateIamPolicyState struct {
	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringPtrInput
	// (Computed) The etag of the IAM policy.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	// The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput
}

func (CertificateTemplateIamPolicyState) ElementType

type CertificateTemplateIdentityConstraints

type CertificateTemplateIdentityConstraints struct {
	// Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.
	AllowSubjectAltNamesPassthrough bool `pulumi:"allowSubjectAltNamesPassthrough"`
	// Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.
	AllowSubjectPassthrough bool `pulumi:"allowSubjectPassthrough"`
	// Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel
	CelExpression *CertificateTemplateIdentityConstraintsCelExpression `pulumi:"celExpression"`
}

type CertificateTemplateIdentityConstraintsArgs

type CertificateTemplateIdentityConstraintsArgs struct {
	// Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.
	AllowSubjectAltNamesPassthrough pulumi.BoolInput `pulumi:"allowSubjectAltNamesPassthrough"`
	// Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.
	AllowSubjectPassthrough pulumi.BoolInput `pulumi:"allowSubjectPassthrough"`
	// Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel
	CelExpression CertificateTemplateIdentityConstraintsCelExpressionPtrInput `pulumi:"celExpression"`
}

func (CertificateTemplateIdentityConstraintsArgs) ElementType

func (CertificateTemplateIdentityConstraintsArgs) ToCertificateTemplateIdentityConstraintsOutput

func (i CertificateTemplateIdentityConstraintsArgs) ToCertificateTemplateIdentityConstraintsOutput() CertificateTemplateIdentityConstraintsOutput

func (CertificateTemplateIdentityConstraintsArgs) ToCertificateTemplateIdentityConstraintsOutputWithContext

func (i CertificateTemplateIdentityConstraintsArgs) ToCertificateTemplateIdentityConstraintsOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsOutput

func (CertificateTemplateIdentityConstraintsArgs) ToCertificateTemplateIdentityConstraintsPtrOutput

func (i CertificateTemplateIdentityConstraintsArgs) ToCertificateTemplateIdentityConstraintsPtrOutput() CertificateTemplateIdentityConstraintsPtrOutput

func (CertificateTemplateIdentityConstraintsArgs) ToCertificateTemplateIdentityConstraintsPtrOutputWithContext

func (i CertificateTemplateIdentityConstraintsArgs) ToCertificateTemplateIdentityConstraintsPtrOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsPtrOutput

type CertificateTemplateIdentityConstraintsCelExpression

type CertificateTemplateIdentityConstraintsCelExpression struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression *string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location *string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title *string `pulumi:"title"`
}

type CertificateTemplateIdentityConstraintsCelExpressionArgs

type CertificateTemplateIdentityConstraintsCelExpressionArgs struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringPtrInput `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

func (CertificateTemplateIdentityConstraintsCelExpressionArgs) ElementType

func (CertificateTemplateIdentityConstraintsCelExpressionArgs) ToCertificateTemplateIdentityConstraintsCelExpressionOutput

func (CertificateTemplateIdentityConstraintsCelExpressionArgs) ToCertificateTemplateIdentityConstraintsCelExpressionOutputWithContext

func (i CertificateTemplateIdentityConstraintsCelExpressionArgs) ToCertificateTemplateIdentityConstraintsCelExpressionOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsCelExpressionOutput

func (CertificateTemplateIdentityConstraintsCelExpressionArgs) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutput

func (i CertificateTemplateIdentityConstraintsCelExpressionArgs) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutput() CertificateTemplateIdentityConstraintsCelExpressionPtrOutput

func (CertificateTemplateIdentityConstraintsCelExpressionArgs) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutputWithContext

func (i CertificateTemplateIdentityConstraintsCelExpressionArgs) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsCelExpressionPtrOutput

type CertificateTemplateIdentityConstraintsCelExpressionInput

type CertificateTemplateIdentityConstraintsCelExpressionInput interface {
	pulumi.Input

	ToCertificateTemplateIdentityConstraintsCelExpressionOutput() CertificateTemplateIdentityConstraintsCelExpressionOutput
	ToCertificateTemplateIdentityConstraintsCelExpressionOutputWithContext(context.Context) CertificateTemplateIdentityConstraintsCelExpressionOutput
}

CertificateTemplateIdentityConstraintsCelExpressionInput is an input type that accepts CertificateTemplateIdentityConstraintsCelExpressionArgs and CertificateTemplateIdentityConstraintsCelExpressionOutput values. You can construct a concrete instance of `CertificateTemplateIdentityConstraintsCelExpressionInput` via:

CertificateTemplateIdentityConstraintsCelExpressionArgs{...}

type CertificateTemplateIdentityConstraintsCelExpressionOutput

type CertificateTemplateIdentityConstraintsCelExpressionOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIdentityConstraintsCelExpressionOutput) Description

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (CertificateTemplateIdentityConstraintsCelExpressionOutput) ElementType

func (CertificateTemplateIdentityConstraintsCelExpressionOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CertificateTemplateIdentityConstraintsCelExpressionOutput) Location

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (CertificateTemplateIdentityConstraintsCelExpressionOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (CertificateTemplateIdentityConstraintsCelExpressionOutput) ToCertificateTemplateIdentityConstraintsCelExpressionOutput

func (CertificateTemplateIdentityConstraintsCelExpressionOutput) ToCertificateTemplateIdentityConstraintsCelExpressionOutputWithContext

func (o CertificateTemplateIdentityConstraintsCelExpressionOutput) ToCertificateTemplateIdentityConstraintsCelExpressionOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsCelExpressionOutput

func (CertificateTemplateIdentityConstraintsCelExpressionOutput) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutput

func (CertificateTemplateIdentityConstraintsCelExpressionOutput) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutputWithContext

func (o CertificateTemplateIdentityConstraintsCelExpressionOutput) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsCelExpressionPtrOutput

type CertificateTemplateIdentityConstraintsCelExpressionPtrInput

type CertificateTemplateIdentityConstraintsCelExpressionPtrInput interface {
	pulumi.Input

	ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutput() CertificateTemplateIdentityConstraintsCelExpressionPtrOutput
	ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutputWithContext(context.Context) CertificateTemplateIdentityConstraintsCelExpressionPtrOutput
}

CertificateTemplateIdentityConstraintsCelExpressionPtrInput is an input type that accepts CertificateTemplateIdentityConstraintsCelExpressionArgs, CertificateTemplateIdentityConstraintsCelExpressionPtr and CertificateTemplateIdentityConstraintsCelExpressionPtrOutput values. You can construct a concrete instance of `CertificateTemplateIdentityConstraintsCelExpressionPtrInput` via:

        CertificateTemplateIdentityConstraintsCelExpressionArgs{...}

or:

        nil

type CertificateTemplateIdentityConstraintsCelExpressionPtrOutput

type CertificateTemplateIdentityConstraintsCelExpressionPtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIdentityConstraintsCelExpressionPtrOutput) Description

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (CertificateTemplateIdentityConstraintsCelExpressionPtrOutput) Elem

func (CertificateTemplateIdentityConstraintsCelExpressionPtrOutput) ElementType

func (CertificateTemplateIdentityConstraintsCelExpressionPtrOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (CertificateTemplateIdentityConstraintsCelExpressionPtrOutput) Location

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (CertificateTemplateIdentityConstraintsCelExpressionPtrOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (CertificateTemplateIdentityConstraintsCelExpressionPtrOutput) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutput

func (CertificateTemplateIdentityConstraintsCelExpressionPtrOutput) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutputWithContext

func (o CertificateTemplateIdentityConstraintsCelExpressionPtrOutput) ToCertificateTemplateIdentityConstraintsCelExpressionPtrOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsCelExpressionPtrOutput

type CertificateTemplateIdentityConstraintsInput

type CertificateTemplateIdentityConstraintsInput interface {
	pulumi.Input

	ToCertificateTemplateIdentityConstraintsOutput() CertificateTemplateIdentityConstraintsOutput
	ToCertificateTemplateIdentityConstraintsOutputWithContext(context.Context) CertificateTemplateIdentityConstraintsOutput
}

CertificateTemplateIdentityConstraintsInput is an input type that accepts CertificateTemplateIdentityConstraintsArgs and CertificateTemplateIdentityConstraintsOutput values. You can construct a concrete instance of `CertificateTemplateIdentityConstraintsInput` via:

CertificateTemplateIdentityConstraintsArgs{...}

type CertificateTemplateIdentityConstraintsOutput

type CertificateTemplateIdentityConstraintsOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIdentityConstraintsOutput) AllowSubjectAltNamesPassthrough

func (o CertificateTemplateIdentityConstraintsOutput) AllowSubjectAltNamesPassthrough() pulumi.BoolOutput

Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.

func (CertificateTemplateIdentityConstraintsOutput) AllowSubjectPassthrough

Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.

func (CertificateTemplateIdentityConstraintsOutput) CelExpression

Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel

func (CertificateTemplateIdentityConstraintsOutput) ElementType

func (CertificateTemplateIdentityConstraintsOutput) ToCertificateTemplateIdentityConstraintsOutput

func (o CertificateTemplateIdentityConstraintsOutput) ToCertificateTemplateIdentityConstraintsOutput() CertificateTemplateIdentityConstraintsOutput

func (CertificateTemplateIdentityConstraintsOutput) ToCertificateTemplateIdentityConstraintsOutputWithContext

func (o CertificateTemplateIdentityConstraintsOutput) ToCertificateTemplateIdentityConstraintsOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsOutput

func (CertificateTemplateIdentityConstraintsOutput) ToCertificateTemplateIdentityConstraintsPtrOutput

func (o CertificateTemplateIdentityConstraintsOutput) ToCertificateTemplateIdentityConstraintsPtrOutput() CertificateTemplateIdentityConstraintsPtrOutput

func (CertificateTemplateIdentityConstraintsOutput) ToCertificateTemplateIdentityConstraintsPtrOutputWithContext

func (o CertificateTemplateIdentityConstraintsOutput) ToCertificateTemplateIdentityConstraintsPtrOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsPtrOutput

type CertificateTemplateIdentityConstraintsPtrInput

type CertificateTemplateIdentityConstraintsPtrInput interface {
	pulumi.Input

	ToCertificateTemplateIdentityConstraintsPtrOutput() CertificateTemplateIdentityConstraintsPtrOutput
	ToCertificateTemplateIdentityConstraintsPtrOutputWithContext(context.Context) CertificateTemplateIdentityConstraintsPtrOutput
}

CertificateTemplateIdentityConstraintsPtrInput is an input type that accepts CertificateTemplateIdentityConstraintsArgs, CertificateTemplateIdentityConstraintsPtr and CertificateTemplateIdentityConstraintsPtrOutput values. You can construct a concrete instance of `CertificateTemplateIdentityConstraintsPtrInput` via:

        CertificateTemplateIdentityConstraintsArgs{...}

or:

        nil

type CertificateTemplateIdentityConstraintsPtrOutput

type CertificateTemplateIdentityConstraintsPtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplateIdentityConstraintsPtrOutput) AllowSubjectAltNamesPassthrough

func (o CertificateTemplateIdentityConstraintsPtrOutput) AllowSubjectAltNamesPassthrough() pulumi.BoolPtrOutput

Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.

func (CertificateTemplateIdentityConstraintsPtrOutput) AllowSubjectPassthrough

Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.

func (CertificateTemplateIdentityConstraintsPtrOutput) CelExpression

Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel

func (CertificateTemplateIdentityConstraintsPtrOutput) Elem

func (CertificateTemplateIdentityConstraintsPtrOutput) ElementType

func (CertificateTemplateIdentityConstraintsPtrOutput) ToCertificateTemplateIdentityConstraintsPtrOutput

func (o CertificateTemplateIdentityConstraintsPtrOutput) ToCertificateTemplateIdentityConstraintsPtrOutput() CertificateTemplateIdentityConstraintsPtrOutput

func (CertificateTemplateIdentityConstraintsPtrOutput) ToCertificateTemplateIdentityConstraintsPtrOutputWithContext

func (o CertificateTemplateIdentityConstraintsPtrOutput) ToCertificateTemplateIdentityConstraintsPtrOutputWithContext(ctx context.Context) CertificateTemplateIdentityConstraintsPtrOutput

type CertificateTemplateInput

type CertificateTemplateInput interface {
	pulumi.Input

	ToCertificateTemplateOutput() CertificateTemplateOutput
	ToCertificateTemplateOutputWithContext(ctx context.Context) CertificateTemplateOutput
}

type CertificateTemplateMap

type CertificateTemplateMap map[string]CertificateTemplateInput

func (CertificateTemplateMap) ElementType

func (CertificateTemplateMap) ElementType() reflect.Type

func (CertificateTemplateMap) ToCertificateTemplateMapOutput

func (i CertificateTemplateMap) ToCertificateTemplateMapOutput() CertificateTemplateMapOutput

func (CertificateTemplateMap) ToCertificateTemplateMapOutputWithContext

func (i CertificateTemplateMap) ToCertificateTemplateMapOutputWithContext(ctx context.Context) CertificateTemplateMapOutput

type CertificateTemplateMapInput

type CertificateTemplateMapInput interface {
	pulumi.Input

	ToCertificateTemplateMapOutput() CertificateTemplateMapOutput
	ToCertificateTemplateMapOutputWithContext(context.Context) CertificateTemplateMapOutput
}

CertificateTemplateMapInput is an input type that accepts CertificateTemplateMap and CertificateTemplateMapOutput values. You can construct a concrete instance of `CertificateTemplateMapInput` via:

CertificateTemplateMap{ "key": CertificateTemplateArgs{...} }

type CertificateTemplateMapOutput

type CertificateTemplateMapOutput struct{ *pulumi.OutputState }

func (CertificateTemplateMapOutput) ElementType

func (CertificateTemplateMapOutput) MapIndex

func (CertificateTemplateMapOutput) ToCertificateTemplateMapOutput

func (o CertificateTemplateMapOutput) ToCertificateTemplateMapOutput() CertificateTemplateMapOutput

func (CertificateTemplateMapOutput) ToCertificateTemplateMapOutputWithContext

func (o CertificateTemplateMapOutput) ToCertificateTemplateMapOutputWithContext(ctx context.Context) CertificateTemplateMapOutput

type CertificateTemplateOutput

type CertificateTemplateOutput struct{ *pulumi.OutputState }

func (CertificateTemplateOutput) CreateTime

Output only. The time at which this CertificateTemplate was created.

func (CertificateTemplateOutput) Description

Optional. A human-readable description of scenarios this template is intended for.

func (CertificateTemplateOutput) EffectiveLabels

func (o CertificateTemplateOutput) EffectiveLabels() pulumi.MapOutput

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

func (CertificateTemplateOutput) ElementType

func (CertificateTemplateOutput) ElementType() reflect.Type

func (CertificateTemplateOutput) IdentityConstraints

Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is omitted, then this template will not add restrictions on a certificate's identity.

func (CertificateTemplateOutput) Labels

Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the resource.

func (CertificateTemplateOutput) Location

The location for the resource

func (CertificateTemplateOutput) Name

The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.

func (CertificateTemplateOutput) PassthroughExtensions

Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate. If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.

func (CertificateTemplateOutput) PredefinedValues

Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the certificate request includes conflicting values for the same properties, they will be overwritten by the values defined here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the certificate issuance request will fail.

func (CertificateTemplateOutput) Project

The project for the resource

func (CertificateTemplateOutput) PulumiLabels

func (o CertificateTemplateOutput) PulumiLabels() pulumi.MapOutput

The combination of labels configured directly on the resource and default labels configured on the provider.

func (CertificateTemplateOutput) ToCertificateTemplateOutput

func (o CertificateTemplateOutput) ToCertificateTemplateOutput() CertificateTemplateOutput

func (CertificateTemplateOutput) ToCertificateTemplateOutputWithContext

func (o CertificateTemplateOutput) ToCertificateTemplateOutputWithContext(ctx context.Context) CertificateTemplateOutput

func (CertificateTemplateOutput) UpdateTime

Output only. The time at which this CertificateTemplate was updated.

type CertificateTemplatePassthroughExtensions

type CertificateTemplatePassthroughExtensions struct {
	// Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with knownExtensions to determine the full set of X.509 extensions.
	AdditionalExtensions []CertificateTemplatePassthroughExtensionsAdditionalExtension `pulumi:"additionalExtensions"`
	// Optional. A set of named X.509 extensions. Will be combined with additionalExtensions to determine the full set of X.509 extensions.
	KnownExtensions []string `pulumi:"knownExtensions"`
}

type CertificateTemplatePassthroughExtensionsAdditionalExtension

type CertificateTemplatePassthroughExtensionsAdditionalExtension struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs

type CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs) ElementType

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionOutput

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionOutputWithContext

func (i CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionOutputWithContext(ctx context.Context) CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput

type CertificateTemplatePassthroughExtensionsAdditionalExtensionArray

type CertificateTemplatePassthroughExtensionsAdditionalExtensionArray []CertificateTemplatePassthroughExtensionsAdditionalExtensionInput

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionArray) ElementType

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionArray) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionArray) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutputWithContext

func (i CertificateTemplatePassthroughExtensionsAdditionalExtensionArray) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutputWithContext(ctx context.Context) CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput

type CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayInput

type CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayInput interface {
	pulumi.Input

	ToCertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput() CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput
	ToCertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutputWithContext(context.Context) CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput
}

CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayInput is an input type that accepts CertificateTemplatePassthroughExtensionsAdditionalExtensionArray and CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput values. You can construct a concrete instance of `CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayInput` via:

CertificateTemplatePassthroughExtensionsAdditionalExtensionArray{ CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs{...} }

type CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput

type CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput) ElementType

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutputWithContext

func (o CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutputWithContext(ctx context.Context) CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayOutput

type CertificateTemplatePassthroughExtensionsAdditionalExtensionInput

type CertificateTemplatePassthroughExtensionsAdditionalExtensionInput interface {
	pulumi.Input

	ToCertificateTemplatePassthroughExtensionsAdditionalExtensionOutput() CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput
	ToCertificateTemplatePassthroughExtensionsAdditionalExtensionOutputWithContext(context.Context) CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput
}

CertificateTemplatePassthroughExtensionsAdditionalExtensionInput is an input type that accepts CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs and CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput values. You can construct a concrete instance of `CertificateTemplatePassthroughExtensionsAdditionalExtensionInput` via:

CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs{...}

type CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput

type CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput) ElementType

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput) ObjectIdPaths

Required. The parts of an OID path. The most significant parts of the path come first.

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionOutput

func (CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionOutputWithContext

func (o CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput) ToCertificateTemplatePassthroughExtensionsAdditionalExtensionOutputWithContext(ctx context.Context) CertificateTemplatePassthroughExtensionsAdditionalExtensionOutput

type CertificateTemplatePassthroughExtensionsArgs

type CertificateTemplatePassthroughExtensionsArgs struct {
	// Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with knownExtensions to determine the full set of X.509 extensions.
	AdditionalExtensions CertificateTemplatePassthroughExtensionsAdditionalExtensionArrayInput `pulumi:"additionalExtensions"`
	// Optional. A set of named X.509 extensions. Will be combined with additionalExtensions to determine the full set of X.509 extensions.
	KnownExtensions pulumi.StringArrayInput `pulumi:"knownExtensions"`
}

func (CertificateTemplatePassthroughExtensionsArgs) ElementType

func (CertificateTemplatePassthroughExtensionsArgs) ToCertificateTemplatePassthroughExtensionsOutput

func (i CertificateTemplatePassthroughExtensionsArgs) ToCertificateTemplatePassthroughExtensionsOutput() CertificateTemplatePassthroughExtensionsOutput

func (CertificateTemplatePassthroughExtensionsArgs) ToCertificateTemplatePassthroughExtensionsOutputWithContext

func (i CertificateTemplatePassthroughExtensionsArgs) ToCertificateTemplatePassthroughExtensionsOutputWithContext(ctx context.Context) CertificateTemplatePassthroughExtensionsOutput

func (CertificateTemplatePassthroughExtensionsArgs) ToCertificateTemplatePassthroughExtensionsPtrOutput

func (i CertificateTemplatePassthroughExtensionsArgs) ToCertificateTemplatePassthroughExtensionsPtrOutput() CertificateTemplatePassthroughExtensionsPtrOutput

func (CertificateTemplatePassthroughExtensionsArgs) ToCertificateTemplatePassthroughExtensionsPtrOutputWithContext

func (i CertificateTemplatePassthroughExtensionsArgs) ToCertificateTemplatePassthroughExtensionsPtrOutputWithContext(ctx context.Context) CertificateTemplatePassthroughExtensionsPtrOutput

type CertificateTemplatePassthroughExtensionsInput

type CertificateTemplatePassthroughExtensionsInput interface {
	pulumi.Input

	ToCertificateTemplatePassthroughExtensionsOutput() CertificateTemplatePassthroughExtensionsOutput
	ToCertificateTemplatePassthroughExtensionsOutputWithContext(context.Context) CertificateTemplatePassthroughExtensionsOutput
}

CertificateTemplatePassthroughExtensionsInput is an input type that accepts CertificateTemplatePassthroughExtensionsArgs and CertificateTemplatePassthroughExtensionsOutput values. You can construct a concrete instance of `CertificateTemplatePassthroughExtensionsInput` via:

CertificateTemplatePassthroughExtensionsArgs{...}

type CertificateTemplatePassthroughExtensionsOutput

type CertificateTemplatePassthroughExtensionsOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePassthroughExtensionsOutput) AdditionalExtensions

Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with knownExtensions to determine the full set of X.509 extensions.

func (CertificateTemplatePassthroughExtensionsOutput) ElementType

func (CertificateTemplatePassthroughExtensionsOutput) KnownExtensions

Optional. A set of named X.509 extensions. Will be combined with additionalExtensions to determine the full set of X.509 extensions.

func (CertificateTemplatePassthroughExtensionsOutput) ToCertificateTemplatePassthroughExtensionsOutput

func (o CertificateTemplatePassthroughExtensionsOutput) ToCertificateTemplatePassthroughExtensionsOutput() CertificateTemplatePassthroughExtensionsOutput

func (CertificateTemplatePassthroughExtensionsOutput) ToCertificateTemplatePassthroughExtensionsOutputWithContext

func (o CertificateTemplatePassthroughExtensionsOutput) ToCertificateTemplatePassthroughExtensionsOutputWithContext(ctx context.Context) CertificateTemplatePassthroughExtensionsOutput

func (CertificateTemplatePassthroughExtensionsOutput) ToCertificateTemplatePassthroughExtensionsPtrOutput

func (o CertificateTemplatePassthroughExtensionsOutput) ToCertificateTemplatePassthroughExtensionsPtrOutput() CertificateTemplatePassthroughExtensionsPtrOutput

func (CertificateTemplatePassthroughExtensionsOutput) ToCertificateTemplatePassthroughExtensionsPtrOutputWithContext

func (o CertificateTemplatePassthroughExtensionsOutput) ToCertificateTemplatePassthroughExtensionsPtrOutputWithContext(ctx context.Context) CertificateTemplatePassthroughExtensionsPtrOutput

type CertificateTemplatePassthroughExtensionsPtrInput

type CertificateTemplatePassthroughExtensionsPtrInput interface {
	pulumi.Input

	ToCertificateTemplatePassthroughExtensionsPtrOutput() CertificateTemplatePassthroughExtensionsPtrOutput
	ToCertificateTemplatePassthroughExtensionsPtrOutputWithContext(context.Context) CertificateTemplatePassthroughExtensionsPtrOutput
}

CertificateTemplatePassthroughExtensionsPtrInput is an input type that accepts CertificateTemplatePassthroughExtensionsArgs, CertificateTemplatePassthroughExtensionsPtr and CertificateTemplatePassthroughExtensionsPtrOutput values. You can construct a concrete instance of `CertificateTemplatePassthroughExtensionsPtrInput` via:

        CertificateTemplatePassthroughExtensionsArgs{...}

or:

        nil

type CertificateTemplatePassthroughExtensionsPtrOutput

type CertificateTemplatePassthroughExtensionsPtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePassthroughExtensionsPtrOutput) AdditionalExtensions

Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with knownExtensions to determine the full set of X.509 extensions.

func (CertificateTemplatePassthroughExtensionsPtrOutput) Elem

func (CertificateTemplatePassthroughExtensionsPtrOutput) ElementType

func (CertificateTemplatePassthroughExtensionsPtrOutput) KnownExtensions

Optional. A set of named X.509 extensions. Will be combined with additionalExtensions to determine the full set of X.509 extensions.

func (CertificateTemplatePassthroughExtensionsPtrOutput) ToCertificateTemplatePassthroughExtensionsPtrOutput

func (o CertificateTemplatePassthroughExtensionsPtrOutput) ToCertificateTemplatePassthroughExtensionsPtrOutput() CertificateTemplatePassthroughExtensionsPtrOutput

func (CertificateTemplatePassthroughExtensionsPtrOutput) ToCertificateTemplatePassthroughExtensionsPtrOutputWithContext

func (o CertificateTemplatePassthroughExtensionsPtrOutput) ToCertificateTemplatePassthroughExtensionsPtrOutputWithContext(ctx context.Context) CertificateTemplatePassthroughExtensionsPtrOutput

type CertificateTemplatePredefinedValues

type CertificateTemplatePredefinedValues struct {
	// Optional. Describes custom X.509 extensions.
	AdditionalExtensions []CertificateTemplatePredefinedValuesAdditionalExtension `pulumi:"additionalExtensions"`
	// Optional. Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.
	AiaOcspServers []string `pulumi:"aiaOcspServers"`
	// Optional. Describes options in this X509Parameters that are relevant in a CA certificate.
	CaOptions *CertificateTemplatePredefinedValuesCaOptions `pulumi:"caOptions"`
	// Optional. Indicates the intended use for keys that correspond to a certificate.
	KeyUsage *CertificateTemplatePredefinedValuesKeyUsage `pulumi:"keyUsage"`
	// Optional. Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	PolicyIds []CertificateTemplatePredefinedValuesPolicyId `pulumi:"policyIds"`
}

type CertificateTemplatePredefinedValuesAdditionalExtension

type CertificateTemplatePredefinedValuesAdditionalExtension struct {
	// Optional. Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).
	Critical *bool `pulumi:"critical"`
	// Required. The OID for this X.509 extension.
	ObjectId CertificateTemplatePredefinedValuesAdditionalExtensionObjectId `pulumi:"objectId"`
	// Required. The value of this X.509 extension.
	Value string `pulumi:"value"`
}

type CertificateTemplatePredefinedValuesAdditionalExtensionArgs

type CertificateTemplatePredefinedValuesAdditionalExtensionArgs struct {
	// Optional. Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).
	Critical pulumi.BoolPtrInput `pulumi:"critical"`
	// Required. The OID for this X.509 extension.
	ObjectId CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdInput `pulumi:"objectId"`
	// Required. The value of this X.509 extension.
	Value pulumi.StringInput `pulumi:"value"`
}

func (CertificateTemplatePredefinedValuesAdditionalExtensionArgs) ElementType

func (CertificateTemplatePredefinedValuesAdditionalExtensionArgs) ToCertificateTemplatePredefinedValuesAdditionalExtensionOutput

func (CertificateTemplatePredefinedValuesAdditionalExtensionArgs) ToCertificateTemplatePredefinedValuesAdditionalExtensionOutputWithContext

func (i CertificateTemplatePredefinedValuesAdditionalExtensionArgs) ToCertificateTemplatePredefinedValuesAdditionalExtensionOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesAdditionalExtensionOutput

type CertificateTemplatePredefinedValuesAdditionalExtensionArray

type CertificateTemplatePredefinedValuesAdditionalExtensionArray []CertificateTemplatePredefinedValuesAdditionalExtensionInput

func (CertificateTemplatePredefinedValuesAdditionalExtensionArray) ElementType

func (CertificateTemplatePredefinedValuesAdditionalExtensionArray) ToCertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput

func (CertificateTemplatePredefinedValuesAdditionalExtensionArray) ToCertificateTemplatePredefinedValuesAdditionalExtensionArrayOutputWithContext

func (i CertificateTemplatePredefinedValuesAdditionalExtensionArray) ToCertificateTemplatePredefinedValuesAdditionalExtensionArrayOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput

type CertificateTemplatePredefinedValuesAdditionalExtensionArrayInput

type CertificateTemplatePredefinedValuesAdditionalExtensionArrayInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput() CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput
	ToCertificateTemplatePredefinedValuesAdditionalExtensionArrayOutputWithContext(context.Context) CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput
}

CertificateTemplatePredefinedValuesAdditionalExtensionArrayInput is an input type that accepts CertificateTemplatePredefinedValuesAdditionalExtensionArray and CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesAdditionalExtensionArrayInput` via:

CertificateTemplatePredefinedValuesAdditionalExtensionArray{ CertificateTemplatePredefinedValuesAdditionalExtensionArgs{...} }

type CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput

type CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput) ElementType

func (CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput) Index

func (CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput) ToCertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput

func (CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput) ToCertificateTemplatePredefinedValuesAdditionalExtensionArrayOutputWithContext

func (o CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput) ToCertificateTemplatePredefinedValuesAdditionalExtensionArrayOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesAdditionalExtensionArrayOutput

type CertificateTemplatePredefinedValuesAdditionalExtensionInput

type CertificateTemplatePredefinedValuesAdditionalExtensionInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesAdditionalExtensionOutput() CertificateTemplatePredefinedValuesAdditionalExtensionOutput
	ToCertificateTemplatePredefinedValuesAdditionalExtensionOutputWithContext(context.Context) CertificateTemplatePredefinedValuesAdditionalExtensionOutput
}

CertificateTemplatePredefinedValuesAdditionalExtensionInput is an input type that accepts CertificateTemplatePredefinedValuesAdditionalExtensionArgs and CertificateTemplatePredefinedValuesAdditionalExtensionOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesAdditionalExtensionInput` via:

CertificateTemplatePredefinedValuesAdditionalExtensionArgs{...}

type CertificateTemplatePredefinedValuesAdditionalExtensionObjectId

type CertificateTemplatePredefinedValuesAdditionalExtensionObjectId struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	//
	// ***
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs

type CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	//
	// ***
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs) ElementType

func (CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs) ToCertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput

func (CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs) ToCertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutputWithContext

func (i CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs) ToCertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput

type CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdInput

type CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput() CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput
	ToCertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutputWithContext(context.Context) CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput
}

CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdInput is an input type that accepts CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs and CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdInput` via:

CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs{...}

type CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput

type CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput) ElementType

func (CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput) ObjectIdPaths

Required. The parts of an OID path. The most significant parts of the path come first.

***

func (CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput) ToCertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput

func (CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput) ToCertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutputWithContext

func (o CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput) ToCertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdOutput

type CertificateTemplatePredefinedValuesAdditionalExtensionOutput

type CertificateTemplatePredefinedValuesAdditionalExtensionOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesAdditionalExtensionOutput) Critical

Optional. Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).

func (CertificateTemplatePredefinedValuesAdditionalExtensionOutput) ElementType

func (CertificateTemplatePredefinedValuesAdditionalExtensionOutput) ObjectId

Required. The OID for this X.509 extension.

func (CertificateTemplatePredefinedValuesAdditionalExtensionOutput) ToCertificateTemplatePredefinedValuesAdditionalExtensionOutput

func (CertificateTemplatePredefinedValuesAdditionalExtensionOutput) ToCertificateTemplatePredefinedValuesAdditionalExtensionOutputWithContext

func (o CertificateTemplatePredefinedValuesAdditionalExtensionOutput) ToCertificateTemplatePredefinedValuesAdditionalExtensionOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesAdditionalExtensionOutput

func (CertificateTemplatePredefinedValuesAdditionalExtensionOutput) Value

Required. The value of this X.509 extension.

type CertificateTemplatePredefinedValuesArgs

type CertificateTemplatePredefinedValuesArgs struct {
	// Optional. Describes custom X.509 extensions.
	AdditionalExtensions CertificateTemplatePredefinedValuesAdditionalExtensionArrayInput `pulumi:"additionalExtensions"`
	// Optional. Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.
	AiaOcspServers pulumi.StringArrayInput `pulumi:"aiaOcspServers"`
	// Optional. Describes options in this X509Parameters that are relevant in a CA certificate.
	CaOptions CertificateTemplatePredefinedValuesCaOptionsPtrInput `pulumi:"caOptions"`
	// Optional. Indicates the intended use for keys that correspond to a certificate.
	KeyUsage CertificateTemplatePredefinedValuesKeyUsagePtrInput `pulumi:"keyUsage"`
	// Optional. Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	PolicyIds CertificateTemplatePredefinedValuesPolicyIdArrayInput `pulumi:"policyIds"`
}

func (CertificateTemplatePredefinedValuesArgs) ElementType

func (CertificateTemplatePredefinedValuesArgs) ToCertificateTemplatePredefinedValuesOutput

func (i CertificateTemplatePredefinedValuesArgs) ToCertificateTemplatePredefinedValuesOutput() CertificateTemplatePredefinedValuesOutput

func (CertificateTemplatePredefinedValuesArgs) ToCertificateTemplatePredefinedValuesOutputWithContext

func (i CertificateTemplatePredefinedValuesArgs) ToCertificateTemplatePredefinedValuesOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesOutput

func (CertificateTemplatePredefinedValuesArgs) ToCertificateTemplatePredefinedValuesPtrOutput

func (i CertificateTemplatePredefinedValuesArgs) ToCertificateTemplatePredefinedValuesPtrOutput() CertificateTemplatePredefinedValuesPtrOutput

func (CertificateTemplatePredefinedValuesArgs) ToCertificateTemplatePredefinedValuesPtrOutputWithContext

func (i CertificateTemplatePredefinedValuesArgs) ToCertificateTemplatePredefinedValuesPtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesPtrOutput

type CertificateTemplatePredefinedValuesCaOptions

type CertificateTemplatePredefinedValuesCaOptions struct {
	// Optional. Refers to the "CA" X.509 extension, which is a boolean value. When this value is missing, the extension will be omitted from the CA certificate.
	IsCa *bool `pulumi:"isCa"`
	// Optional. Refers to the path length restriction X.509 extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. If this value is missing, the max path length will be omitted from the CA certificate.
	MaxIssuerPathLength *int `pulumi:"maxIssuerPathLength"`
}

type CertificateTemplatePredefinedValuesCaOptionsArgs

type CertificateTemplatePredefinedValuesCaOptionsArgs struct {
	// Optional. Refers to the "CA" X.509 extension, which is a boolean value. When this value is missing, the extension will be omitted from the CA certificate.
	IsCa pulumi.BoolPtrInput `pulumi:"isCa"`
	// Optional. Refers to the path length restriction X.509 extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. If this value is missing, the max path length will be omitted from the CA certificate.
	MaxIssuerPathLength pulumi.IntPtrInput `pulumi:"maxIssuerPathLength"`
}

func (CertificateTemplatePredefinedValuesCaOptionsArgs) ElementType

func (CertificateTemplatePredefinedValuesCaOptionsArgs) ToCertificateTemplatePredefinedValuesCaOptionsOutput

func (i CertificateTemplatePredefinedValuesCaOptionsArgs) ToCertificateTemplatePredefinedValuesCaOptionsOutput() CertificateTemplatePredefinedValuesCaOptionsOutput

func (CertificateTemplatePredefinedValuesCaOptionsArgs) ToCertificateTemplatePredefinedValuesCaOptionsOutputWithContext

func (i CertificateTemplatePredefinedValuesCaOptionsArgs) ToCertificateTemplatePredefinedValuesCaOptionsOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesCaOptionsOutput

func (CertificateTemplatePredefinedValuesCaOptionsArgs) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutput

func (i CertificateTemplatePredefinedValuesCaOptionsArgs) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutput() CertificateTemplatePredefinedValuesCaOptionsPtrOutput

func (CertificateTemplatePredefinedValuesCaOptionsArgs) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutputWithContext

func (i CertificateTemplatePredefinedValuesCaOptionsArgs) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesCaOptionsPtrOutput

type CertificateTemplatePredefinedValuesCaOptionsInput

type CertificateTemplatePredefinedValuesCaOptionsInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesCaOptionsOutput() CertificateTemplatePredefinedValuesCaOptionsOutput
	ToCertificateTemplatePredefinedValuesCaOptionsOutputWithContext(context.Context) CertificateTemplatePredefinedValuesCaOptionsOutput
}

CertificateTemplatePredefinedValuesCaOptionsInput is an input type that accepts CertificateTemplatePredefinedValuesCaOptionsArgs and CertificateTemplatePredefinedValuesCaOptionsOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesCaOptionsInput` via:

CertificateTemplatePredefinedValuesCaOptionsArgs{...}

type CertificateTemplatePredefinedValuesCaOptionsOutput

type CertificateTemplatePredefinedValuesCaOptionsOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesCaOptionsOutput) ElementType

func (CertificateTemplatePredefinedValuesCaOptionsOutput) IsCa

Optional. Refers to the "CA" X.509 extension, which is a boolean value. When this value is missing, the extension will be omitted from the CA certificate.

func (CertificateTemplatePredefinedValuesCaOptionsOutput) MaxIssuerPathLength

Optional. Refers to the path length restriction X.509 extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. If this value is missing, the max path length will be omitted from the CA certificate.

func (CertificateTemplatePredefinedValuesCaOptionsOutput) ToCertificateTemplatePredefinedValuesCaOptionsOutput

func (o CertificateTemplatePredefinedValuesCaOptionsOutput) ToCertificateTemplatePredefinedValuesCaOptionsOutput() CertificateTemplatePredefinedValuesCaOptionsOutput

func (CertificateTemplatePredefinedValuesCaOptionsOutput) ToCertificateTemplatePredefinedValuesCaOptionsOutputWithContext

func (o CertificateTemplatePredefinedValuesCaOptionsOutput) ToCertificateTemplatePredefinedValuesCaOptionsOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesCaOptionsOutput

func (CertificateTemplatePredefinedValuesCaOptionsOutput) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutput

func (o CertificateTemplatePredefinedValuesCaOptionsOutput) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutput() CertificateTemplatePredefinedValuesCaOptionsPtrOutput

func (CertificateTemplatePredefinedValuesCaOptionsOutput) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutputWithContext

func (o CertificateTemplatePredefinedValuesCaOptionsOutput) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesCaOptionsPtrOutput

type CertificateTemplatePredefinedValuesCaOptionsPtrInput

type CertificateTemplatePredefinedValuesCaOptionsPtrInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesCaOptionsPtrOutput() CertificateTemplatePredefinedValuesCaOptionsPtrOutput
	ToCertificateTemplatePredefinedValuesCaOptionsPtrOutputWithContext(context.Context) CertificateTemplatePredefinedValuesCaOptionsPtrOutput
}

CertificateTemplatePredefinedValuesCaOptionsPtrInput is an input type that accepts CertificateTemplatePredefinedValuesCaOptionsArgs, CertificateTemplatePredefinedValuesCaOptionsPtr and CertificateTemplatePredefinedValuesCaOptionsPtrOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesCaOptionsPtrInput` via:

        CertificateTemplatePredefinedValuesCaOptionsArgs{...}

or:

        nil

type CertificateTemplatePredefinedValuesCaOptionsPtrOutput

type CertificateTemplatePredefinedValuesCaOptionsPtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesCaOptionsPtrOutput) Elem

func (CertificateTemplatePredefinedValuesCaOptionsPtrOutput) ElementType

func (CertificateTemplatePredefinedValuesCaOptionsPtrOutput) IsCa

Optional. Refers to the "CA" X.509 extension, which is a boolean value. When this value is missing, the extension will be omitted from the CA certificate.

func (CertificateTemplatePredefinedValuesCaOptionsPtrOutput) MaxIssuerPathLength

Optional. Refers to the path length restriction X.509 extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. If this value is missing, the max path length will be omitted from the CA certificate.

func (CertificateTemplatePredefinedValuesCaOptionsPtrOutput) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutput

func (CertificateTemplatePredefinedValuesCaOptionsPtrOutput) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutputWithContext

func (o CertificateTemplatePredefinedValuesCaOptionsPtrOutput) ToCertificateTemplatePredefinedValuesCaOptionsPtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesCaOptionsPtrOutput

type CertificateTemplatePredefinedValuesInput

type CertificateTemplatePredefinedValuesInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesOutput() CertificateTemplatePredefinedValuesOutput
	ToCertificateTemplatePredefinedValuesOutputWithContext(context.Context) CertificateTemplatePredefinedValuesOutput
}

CertificateTemplatePredefinedValuesInput is an input type that accepts CertificateTemplatePredefinedValuesArgs and CertificateTemplatePredefinedValuesOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesInput` via:

CertificateTemplatePredefinedValuesArgs{...}

type CertificateTemplatePredefinedValuesKeyUsage

type CertificateTemplatePredefinedValuesKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	BaseKeyUsage *CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsage `pulumi:"baseKeyUsage"`
	// Detailed scenarios in which a key may be used.
	ExtendedKeyUsage *CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsage `pulumi:"extendedKeyUsage"`
	// Used to describe extended key usages that are not listed in the KeyUsage.ExtendedKeyUsageOptions message.
	UnknownExtendedKeyUsages []CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsage `pulumi:"unknownExtendedKeyUsages"`
}

type CertificateTemplatePredefinedValuesKeyUsageArgs

type CertificateTemplatePredefinedValuesKeyUsageArgs struct {
	// Describes high-level ways in which a key may be used.
	BaseKeyUsage CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrInput `pulumi:"baseKeyUsage"`
	// Detailed scenarios in which a key may be used.
	ExtendedKeyUsage CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrInput `pulumi:"extendedKeyUsage"`
	// Used to describe extended key usages that are not listed in the KeyUsage.ExtendedKeyUsageOptions message.
	UnknownExtendedKeyUsages CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayInput `pulumi:"unknownExtendedKeyUsages"`
}

func (CertificateTemplatePredefinedValuesKeyUsageArgs) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageOutput

func (i CertificateTemplatePredefinedValuesKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageOutput() CertificateTemplatePredefinedValuesKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageOutputWithContext

func (i CertificateTemplatePredefinedValuesKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutput

func (i CertificateTemplatePredefinedValuesKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutput() CertificateTemplatePredefinedValuesKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutputWithContext

func (i CertificateTemplatePredefinedValuesKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsage

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	CertSign *bool `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment *bool `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign *bool `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment *bool `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly *bool `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature *bool `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly *bool `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement *bool `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment *bool `pulumi:"keyEncipherment"`
}

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs struct {
	// The key may be used to sign certificates.
	CertSign pulumi.BoolPtrInput `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment pulumi.BoolPtrInput `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign pulumi.BoolPtrInput `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment pulumi.BoolPtrInput `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly pulumi.BoolPtrInput `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature pulumi.BoolPtrInput `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly pulumi.BoolPtrInput `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement pulumi.BoolPtrInput `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment pulumi.BoolPtrInput `pulumi:"keyEncipherment"`
}

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutputWithContext

func (i CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutputWithContext

func (i CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageInput

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput() CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput
	ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutputWithContext(context.Context) CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput
}

CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageInput is an input type that accepts CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs and CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageInput` via:

CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs{...}

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) CertSign

The key may be used to sign certificates.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) CrlSign

The key may be used sign certificate revocation lists.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) DataEncipherment

The key may be used to encipher data.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) DecipherOnly

The key may be used to decipher only.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) DigitalSignature

The key may be used for digital signatures.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) EncipherOnly

The key may be used to encipher only.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) KeyEncipherment

The key may be used to encipher other keys.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutputWithContext

func (o CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutputWithContext

func (o CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrInput

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput() CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput
	ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutputWithContext(context.Context) CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput
}

CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrInput is an input type that accepts CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs, CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtr and CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrInput` via:

        CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs{...}

or:

        nil

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) CertSign

The key may be used to sign certificates.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) CrlSign

The key may be used sign certificate revocation lists.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) DataEncipherment

The key may be used to encipher data.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) DecipherOnly

The key may be used to decipher only.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) DigitalSignature

The key may be used for digital signatures.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) Elem

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) EncipherOnly

The key may be used to encipher only.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) KeyEncipherment

The key may be used to encipher other keys.

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutputWithContext

func (o CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput) ToCertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsage

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth *bool `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning *bool `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection *bool `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning *bool `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth *bool `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping *bool `pulumi:"timeStamping"`
}

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth pulumi.BoolPtrInput `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning pulumi.BoolPtrInput `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection pulumi.BoolPtrInput `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning pulumi.BoolPtrInput `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth pulumi.BoolPtrInput `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping pulumi.BoolPtrInput `pulumi:"timeStamping"`
}

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutputWithContext

func (i CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutputWithContext

func (i CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageInput

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput() CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput
	ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutputWithContext(context.Context) CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput
}

CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageInput is an input type that accepts CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs and CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageInput` via:

CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs{...}

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutputWithContext

func (o CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutputWithContext

func (o CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrInput

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput() CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput
	ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutputWithContext(context.Context) CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput
}

CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrInput is an input type that accepts CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs, CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtr and CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrInput` via:

        CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs{...}

or:

        nil

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) Elem

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutputWithContext

func (o CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput) ToCertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsageInput

type CertificateTemplatePredefinedValuesKeyUsageInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesKeyUsageOutput() CertificateTemplatePredefinedValuesKeyUsageOutput
	ToCertificateTemplatePredefinedValuesKeyUsageOutputWithContext(context.Context) CertificateTemplatePredefinedValuesKeyUsageOutput
}

CertificateTemplatePredefinedValuesKeyUsageInput is an input type that accepts CertificateTemplatePredefinedValuesKeyUsageArgs and CertificateTemplatePredefinedValuesKeyUsageOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesKeyUsageInput` via:

CertificateTemplatePredefinedValuesKeyUsageArgs{...}

type CertificateTemplatePredefinedValuesKeyUsageOutput

type CertificateTemplatePredefinedValuesKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesKeyUsageOutput) BaseKeyUsage

Describes high-level ways in which a key may be used.

func (CertificateTemplatePredefinedValuesKeyUsageOutput) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageOutput) ExtendedKeyUsage

Detailed scenarios in which a key may be used.

func (CertificateTemplatePredefinedValuesKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageOutput

func (o CertificateTemplatePredefinedValuesKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageOutput() CertificateTemplatePredefinedValuesKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageOutputWithContext

func (o CertificateTemplatePredefinedValuesKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutput

func (o CertificateTemplatePredefinedValuesKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutput() CertificateTemplatePredefinedValuesKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutputWithContext

func (o CertificateTemplatePredefinedValuesKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsageOutput) UnknownExtendedKeyUsages

Used to describe extended key usages that are not listed in the KeyUsage.ExtendedKeyUsageOptions message.

type CertificateTemplatePredefinedValuesKeyUsagePtrInput

type CertificateTemplatePredefinedValuesKeyUsagePtrInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesKeyUsagePtrOutput() CertificateTemplatePredefinedValuesKeyUsagePtrOutput
	ToCertificateTemplatePredefinedValuesKeyUsagePtrOutputWithContext(context.Context) CertificateTemplatePredefinedValuesKeyUsagePtrOutput
}

CertificateTemplatePredefinedValuesKeyUsagePtrInput is an input type that accepts CertificateTemplatePredefinedValuesKeyUsageArgs, CertificateTemplatePredefinedValuesKeyUsagePtr and CertificateTemplatePredefinedValuesKeyUsagePtrOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesKeyUsagePtrInput` via:

        CertificateTemplatePredefinedValuesKeyUsageArgs{...}

or:

        nil

type CertificateTemplatePredefinedValuesKeyUsagePtrOutput

type CertificateTemplatePredefinedValuesKeyUsagePtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesKeyUsagePtrOutput) BaseKeyUsage

Describes high-level ways in which a key may be used.

func (CertificateTemplatePredefinedValuesKeyUsagePtrOutput) Elem

func (CertificateTemplatePredefinedValuesKeyUsagePtrOutput) ElementType

func (CertificateTemplatePredefinedValuesKeyUsagePtrOutput) ExtendedKeyUsage

Detailed scenarios in which a key may be used.

func (CertificateTemplatePredefinedValuesKeyUsagePtrOutput) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsagePtrOutput) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutputWithContext

func (o CertificateTemplatePredefinedValuesKeyUsagePtrOutput) ToCertificateTemplatePredefinedValuesKeyUsagePtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsagePtrOutput

func (CertificateTemplatePredefinedValuesKeyUsagePtrOutput) UnknownExtendedKeyUsages

Used to describe extended key usages that are not listed in the KeyUsage.ExtendedKeyUsageOptions message.

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsage

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsage struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutputWithContext

func (i CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray []CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageInput

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

func (i CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayInput

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput() CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput
	ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(context.Context) CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput
}

CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayInput is an input type that accepts CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray and CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayInput` via:

CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArray{ CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs{...} }

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutput) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageInput

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput() CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput
	ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutputWithContext(context.Context) CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput
}

CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageInput is an input type that accepts CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs and CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageInput` via:

CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs{...}

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput

type CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput) ElementType

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput) ObjectIdPaths

Required. The parts of an OID path. The most significant parts of the path come first.

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput

func (CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutput) ToCertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageOutputWithContext

type CertificateTemplatePredefinedValuesOutput

type CertificateTemplatePredefinedValuesOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesOutput) AdditionalExtensions

Optional. Describes custom X.509 extensions.

func (CertificateTemplatePredefinedValuesOutput) AiaOcspServers

Optional. Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (CertificateTemplatePredefinedValuesOutput) CaOptions

Optional. Describes options in this X509Parameters that are relevant in a CA certificate.

func (CertificateTemplatePredefinedValuesOutput) ElementType

func (CertificateTemplatePredefinedValuesOutput) KeyUsage

Optional. Indicates the intended use for keys that correspond to a certificate.

func (CertificateTemplatePredefinedValuesOutput) PolicyIds

Optional. Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.

func (CertificateTemplatePredefinedValuesOutput) ToCertificateTemplatePredefinedValuesOutput

func (o CertificateTemplatePredefinedValuesOutput) ToCertificateTemplatePredefinedValuesOutput() CertificateTemplatePredefinedValuesOutput

func (CertificateTemplatePredefinedValuesOutput) ToCertificateTemplatePredefinedValuesOutputWithContext

func (o CertificateTemplatePredefinedValuesOutput) ToCertificateTemplatePredefinedValuesOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesOutput

func (CertificateTemplatePredefinedValuesOutput) ToCertificateTemplatePredefinedValuesPtrOutput

func (o CertificateTemplatePredefinedValuesOutput) ToCertificateTemplatePredefinedValuesPtrOutput() CertificateTemplatePredefinedValuesPtrOutput

func (CertificateTemplatePredefinedValuesOutput) ToCertificateTemplatePredefinedValuesPtrOutputWithContext

func (o CertificateTemplatePredefinedValuesOutput) ToCertificateTemplatePredefinedValuesPtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesPtrOutput

type CertificateTemplatePredefinedValuesPolicyId

type CertificateTemplatePredefinedValuesPolicyId struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type CertificateTemplatePredefinedValuesPolicyIdArgs

type CertificateTemplatePredefinedValuesPolicyIdArgs struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (CertificateTemplatePredefinedValuesPolicyIdArgs) ElementType

func (CertificateTemplatePredefinedValuesPolicyIdArgs) ToCertificateTemplatePredefinedValuesPolicyIdOutput

func (i CertificateTemplatePredefinedValuesPolicyIdArgs) ToCertificateTemplatePredefinedValuesPolicyIdOutput() CertificateTemplatePredefinedValuesPolicyIdOutput

func (CertificateTemplatePredefinedValuesPolicyIdArgs) ToCertificateTemplatePredefinedValuesPolicyIdOutputWithContext

func (i CertificateTemplatePredefinedValuesPolicyIdArgs) ToCertificateTemplatePredefinedValuesPolicyIdOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesPolicyIdOutput

type CertificateTemplatePredefinedValuesPolicyIdArray

type CertificateTemplatePredefinedValuesPolicyIdArray []CertificateTemplatePredefinedValuesPolicyIdInput

func (CertificateTemplatePredefinedValuesPolicyIdArray) ElementType

func (CertificateTemplatePredefinedValuesPolicyIdArray) ToCertificateTemplatePredefinedValuesPolicyIdArrayOutput

func (i CertificateTemplatePredefinedValuesPolicyIdArray) ToCertificateTemplatePredefinedValuesPolicyIdArrayOutput() CertificateTemplatePredefinedValuesPolicyIdArrayOutput

func (CertificateTemplatePredefinedValuesPolicyIdArray) ToCertificateTemplatePredefinedValuesPolicyIdArrayOutputWithContext

func (i CertificateTemplatePredefinedValuesPolicyIdArray) ToCertificateTemplatePredefinedValuesPolicyIdArrayOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesPolicyIdArrayOutput

type CertificateTemplatePredefinedValuesPolicyIdArrayInput

type CertificateTemplatePredefinedValuesPolicyIdArrayInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesPolicyIdArrayOutput() CertificateTemplatePredefinedValuesPolicyIdArrayOutput
	ToCertificateTemplatePredefinedValuesPolicyIdArrayOutputWithContext(context.Context) CertificateTemplatePredefinedValuesPolicyIdArrayOutput
}

CertificateTemplatePredefinedValuesPolicyIdArrayInput is an input type that accepts CertificateTemplatePredefinedValuesPolicyIdArray and CertificateTemplatePredefinedValuesPolicyIdArrayOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesPolicyIdArrayInput` via:

CertificateTemplatePredefinedValuesPolicyIdArray{ CertificateTemplatePredefinedValuesPolicyIdArgs{...} }

type CertificateTemplatePredefinedValuesPolicyIdArrayOutput

type CertificateTemplatePredefinedValuesPolicyIdArrayOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesPolicyIdArrayOutput) ElementType

func (CertificateTemplatePredefinedValuesPolicyIdArrayOutput) Index

func (CertificateTemplatePredefinedValuesPolicyIdArrayOutput) ToCertificateTemplatePredefinedValuesPolicyIdArrayOutput

func (CertificateTemplatePredefinedValuesPolicyIdArrayOutput) ToCertificateTemplatePredefinedValuesPolicyIdArrayOutputWithContext

func (o CertificateTemplatePredefinedValuesPolicyIdArrayOutput) ToCertificateTemplatePredefinedValuesPolicyIdArrayOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesPolicyIdArrayOutput

type CertificateTemplatePredefinedValuesPolicyIdInput

type CertificateTemplatePredefinedValuesPolicyIdInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesPolicyIdOutput() CertificateTemplatePredefinedValuesPolicyIdOutput
	ToCertificateTemplatePredefinedValuesPolicyIdOutputWithContext(context.Context) CertificateTemplatePredefinedValuesPolicyIdOutput
}

CertificateTemplatePredefinedValuesPolicyIdInput is an input type that accepts CertificateTemplatePredefinedValuesPolicyIdArgs and CertificateTemplatePredefinedValuesPolicyIdOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesPolicyIdInput` via:

CertificateTemplatePredefinedValuesPolicyIdArgs{...}

type CertificateTemplatePredefinedValuesPolicyIdOutput

type CertificateTemplatePredefinedValuesPolicyIdOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesPolicyIdOutput) ElementType

func (CertificateTemplatePredefinedValuesPolicyIdOutput) ObjectIdPaths

Required. The parts of an OID path. The most significant parts of the path come first.

func (CertificateTemplatePredefinedValuesPolicyIdOutput) ToCertificateTemplatePredefinedValuesPolicyIdOutput

func (o CertificateTemplatePredefinedValuesPolicyIdOutput) ToCertificateTemplatePredefinedValuesPolicyIdOutput() CertificateTemplatePredefinedValuesPolicyIdOutput

func (CertificateTemplatePredefinedValuesPolicyIdOutput) ToCertificateTemplatePredefinedValuesPolicyIdOutputWithContext

func (o CertificateTemplatePredefinedValuesPolicyIdOutput) ToCertificateTemplatePredefinedValuesPolicyIdOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesPolicyIdOutput

type CertificateTemplatePredefinedValuesPtrInput

type CertificateTemplatePredefinedValuesPtrInput interface {
	pulumi.Input

	ToCertificateTemplatePredefinedValuesPtrOutput() CertificateTemplatePredefinedValuesPtrOutput
	ToCertificateTemplatePredefinedValuesPtrOutputWithContext(context.Context) CertificateTemplatePredefinedValuesPtrOutput
}

CertificateTemplatePredefinedValuesPtrInput is an input type that accepts CertificateTemplatePredefinedValuesArgs, CertificateTemplatePredefinedValuesPtr and CertificateTemplatePredefinedValuesPtrOutput values. You can construct a concrete instance of `CertificateTemplatePredefinedValuesPtrInput` via:

        CertificateTemplatePredefinedValuesArgs{...}

or:

        nil

type CertificateTemplatePredefinedValuesPtrOutput

type CertificateTemplatePredefinedValuesPtrOutput struct{ *pulumi.OutputState }

func (CertificateTemplatePredefinedValuesPtrOutput) AdditionalExtensions

Optional. Describes custom X.509 extensions.

func (CertificateTemplatePredefinedValuesPtrOutput) AiaOcspServers

Optional. Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (CertificateTemplatePredefinedValuesPtrOutput) CaOptions

Optional. Describes options in this X509Parameters that are relevant in a CA certificate.

func (CertificateTemplatePredefinedValuesPtrOutput) Elem

func (CertificateTemplatePredefinedValuesPtrOutput) ElementType

func (CertificateTemplatePredefinedValuesPtrOutput) KeyUsage

Optional. Indicates the intended use for keys that correspond to a certificate.

func (CertificateTemplatePredefinedValuesPtrOutput) PolicyIds

Optional. Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.

func (CertificateTemplatePredefinedValuesPtrOutput) ToCertificateTemplatePredefinedValuesPtrOutput

func (o CertificateTemplatePredefinedValuesPtrOutput) ToCertificateTemplatePredefinedValuesPtrOutput() CertificateTemplatePredefinedValuesPtrOutput

func (CertificateTemplatePredefinedValuesPtrOutput) ToCertificateTemplatePredefinedValuesPtrOutputWithContext

func (o CertificateTemplatePredefinedValuesPtrOutput) ToCertificateTemplatePredefinedValuesPtrOutputWithContext(ctx context.Context) CertificateTemplatePredefinedValuesPtrOutput

type CertificateTemplateState

type CertificateTemplateState struct {
	// Output only. The time at which this CertificateTemplate was created.
	CreateTime pulumi.StringPtrInput
	// Optional. A human-readable description of scenarios this template is intended for.
	Description pulumi.StringPtrInput
	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.MapInput
	// Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
	// omitted, then this template will not add restrictions on a certificate's identity.
	IdentityConstraints CertificateTemplateIdentityConstraintsPtrInput
	// Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
	// present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
	// resource.
	Labels pulumi.StringMapInput
	// The location for the resource
	Location pulumi.StringPtrInput
	// The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
	Name pulumi.StringPtrInput
	// Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
	// If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
	// dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
	// request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
	// These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
	PassthroughExtensions CertificateTemplatePassthroughExtensionsPtrInput
	// Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
	// certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
	// here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
	// certificate issuance request will fail.
	PredefinedValues CertificateTemplatePredefinedValuesPtrInput
	// The project for the resource
	Project pulumi.StringPtrInput
	// The combination of labels configured directly on the resource and default labels configured on the provider.
	PulumiLabels pulumi.MapInput
	// Output only. The time at which this CertificateTemplate was updated.
	UpdateTime pulumi.StringPtrInput
}

func (CertificateTemplateState) ElementType

func (CertificateTemplateState) ElementType() reflect.Type

type GetAuthorityAccessUrl

type GetAuthorityAccessUrl struct {
	// The URL where this CertificateAuthority's CA certificate is published. This will only be
	// set for CAs that have been activated.
	CaCertificateAccessUrl string `pulumi:"caCertificateAccessUrl"`
	// The URL where this CertificateAuthority's CRLs are published. This will only be set for
	// CAs that have been activated.
	CrlAccessUrls []string `pulumi:"crlAccessUrls"`
}

type GetAuthorityAccessUrlArgs

type GetAuthorityAccessUrlArgs struct {
	// The URL where this CertificateAuthority's CA certificate is published. This will only be
	// set for CAs that have been activated.
	CaCertificateAccessUrl pulumi.StringInput `pulumi:"caCertificateAccessUrl"`
	// The URL where this CertificateAuthority's CRLs are published. This will only be set for
	// CAs that have been activated.
	CrlAccessUrls pulumi.StringArrayInput `pulumi:"crlAccessUrls"`
}

func (GetAuthorityAccessUrlArgs) ElementType

func (GetAuthorityAccessUrlArgs) ElementType() reflect.Type

func (GetAuthorityAccessUrlArgs) ToGetAuthorityAccessUrlOutput

func (i GetAuthorityAccessUrlArgs) ToGetAuthorityAccessUrlOutput() GetAuthorityAccessUrlOutput

func (GetAuthorityAccessUrlArgs) ToGetAuthorityAccessUrlOutputWithContext

func (i GetAuthorityAccessUrlArgs) ToGetAuthorityAccessUrlOutputWithContext(ctx context.Context) GetAuthorityAccessUrlOutput

type GetAuthorityAccessUrlArray

type GetAuthorityAccessUrlArray []GetAuthorityAccessUrlInput

func (GetAuthorityAccessUrlArray) ElementType

func (GetAuthorityAccessUrlArray) ElementType() reflect.Type

func (GetAuthorityAccessUrlArray) ToGetAuthorityAccessUrlArrayOutput

func (i GetAuthorityAccessUrlArray) ToGetAuthorityAccessUrlArrayOutput() GetAuthorityAccessUrlArrayOutput

func (GetAuthorityAccessUrlArray) ToGetAuthorityAccessUrlArrayOutputWithContext

func (i GetAuthorityAccessUrlArray) ToGetAuthorityAccessUrlArrayOutputWithContext(ctx context.Context) GetAuthorityAccessUrlArrayOutput

type GetAuthorityAccessUrlArrayInput

type GetAuthorityAccessUrlArrayInput interface {
	pulumi.Input

	ToGetAuthorityAccessUrlArrayOutput() GetAuthorityAccessUrlArrayOutput
	ToGetAuthorityAccessUrlArrayOutputWithContext(context.Context) GetAuthorityAccessUrlArrayOutput
}

GetAuthorityAccessUrlArrayInput is an input type that accepts GetAuthorityAccessUrlArray and GetAuthorityAccessUrlArrayOutput values. You can construct a concrete instance of `GetAuthorityAccessUrlArrayInput` via:

GetAuthorityAccessUrlArray{ GetAuthorityAccessUrlArgs{...} }

type GetAuthorityAccessUrlArrayOutput

type GetAuthorityAccessUrlArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityAccessUrlArrayOutput) ElementType

func (GetAuthorityAccessUrlArrayOutput) Index

func (GetAuthorityAccessUrlArrayOutput) ToGetAuthorityAccessUrlArrayOutput

func (o GetAuthorityAccessUrlArrayOutput) ToGetAuthorityAccessUrlArrayOutput() GetAuthorityAccessUrlArrayOutput

func (GetAuthorityAccessUrlArrayOutput) ToGetAuthorityAccessUrlArrayOutputWithContext

func (o GetAuthorityAccessUrlArrayOutput) ToGetAuthorityAccessUrlArrayOutputWithContext(ctx context.Context) GetAuthorityAccessUrlArrayOutput

type GetAuthorityAccessUrlInput

type GetAuthorityAccessUrlInput interface {
	pulumi.Input

	ToGetAuthorityAccessUrlOutput() GetAuthorityAccessUrlOutput
	ToGetAuthorityAccessUrlOutputWithContext(context.Context) GetAuthorityAccessUrlOutput
}

GetAuthorityAccessUrlInput is an input type that accepts GetAuthorityAccessUrlArgs and GetAuthorityAccessUrlOutput values. You can construct a concrete instance of `GetAuthorityAccessUrlInput` via:

GetAuthorityAccessUrlArgs{...}

type GetAuthorityAccessUrlOutput

type GetAuthorityAccessUrlOutput struct{ *pulumi.OutputState }

func (GetAuthorityAccessUrlOutput) CaCertificateAccessUrl

func (o GetAuthorityAccessUrlOutput) CaCertificateAccessUrl() pulumi.StringOutput

The URL where this CertificateAuthority's CA certificate is published. This will only be set for CAs that have been activated.

func (GetAuthorityAccessUrlOutput) CrlAccessUrls

The URL where this CertificateAuthority's CRLs are published. This will only be set for CAs that have been activated.

func (GetAuthorityAccessUrlOutput) ElementType

func (GetAuthorityAccessUrlOutput) ToGetAuthorityAccessUrlOutput

func (o GetAuthorityAccessUrlOutput) ToGetAuthorityAccessUrlOutput() GetAuthorityAccessUrlOutput

func (GetAuthorityAccessUrlOutput) ToGetAuthorityAccessUrlOutputWithContext

func (o GetAuthorityAccessUrlOutput) ToGetAuthorityAccessUrlOutputWithContext(ctx context.Context) GetAuthorityAccessUrlOutput

type GetAuthorityConfig

type GetAuthorityConfig struct {
	// Specifies some of the values in a certificate that are related to the subject.
	SubjectConfigs []GetAuthorityConfigSubjectConfig `pulumi:"subjectConfigs"`
	// Describes how some of the technical X.509 fields in a certificate should be populated.
	X509Configs []GetAuthorityConfigX509Config `pulumi:"x509Configs"`
}

type GetAuthorityConfigArgs

type GetAuthorityConfigArgs struct {
	// Specifies some of the values in a certificate that are related to the subject.
	SubjectConfigs GetAuthorityConfigSubjectConfigArrayInput `pulumi:"subjectConfigs"`
	// Describes how some of the technical X.509 fields in a certificate should be populated.
	X509Configs GetAuthorityConfigX509ConfigArrayInput `pulumi:"x509Configs"`
}

func (GetAuthorityConfigArgs) ElementType

func (GetAuthorityConfigArgs) ElementType() reflect.Type

func (GetAuthorityConfigArgs) ToGetAuthorityConfigOutput

func (i GetAuthorityConfigArgs) ToGetAuthorityConfigOutput() GetAuthorityConfigOutput

func (GetAuthorityConfigArgs) ToGetAuthorityConfigOutputWithContext

func (i GetAuthorityConfigArgs) ToGetAuthorityConfigOutputWithContext(ctx context.Context) GetAuthorityConfigOutput

type GetAuthorityConfigArray

type GetAuthorityConfigArray []GetAuthorityConfigInput

func (GetAuthorityConfigArray) ElementType

func (GetAuthorityConfigArray) ElementType() reflect.Type

func (GetAuthorityConfigArray) ToGetAuthorityConfigArrayOutput

func (i GetAuthorityConfigArray) ToGetAuthorityConfigArrayOutput() GetAuthorityConfigArrayOutput

func (GetAuthorityConfigArray) ToGetAuthorityConfigArrayOutputWithContext

func (i GetAuthorityConfigArray) ToGetAuthorityConfigArrayOutputWithContext(ctx context.Context) GetAuthorityConfigArrayOutput

type GetAuthorityConfigArrayInput

type GetAuthorityConfigArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigArrayOutput() GetAuthorityConfigArrayOutput
	ToGetAuthorityConfigArrayOutputWithContext(context.Context) GetAuthorityConfigArrayOutput
}

GetAuthorityConfigArrayInput is an input type that accepts GetAuthorityConfigArray and GetAuthorityConfigArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigArrayInput` via:

GetAuthorityConfigArray{ GetAuthorityConfigArgs{...} }

type GetAuthorityConfigArrayOutput

type GetAuthorityConfigArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigArrayOutput) ElementType

func (GetAuthorityConfigArrayOutput) Index

func (GetAuthorityConfigArrayOutput) ToGetAuthorityConfigArrayOutput

func (o GetAuthorityConfigArrayOutput) ToGetAuthorityConfigArrayOutput() GetAuthorityConfigArrayOutput

func (GetAuthorityConfigArrayOutput) ToGetAuthorityConfigArrayOutputWithContext

func (o GetAuthorityConfigArrayOutput) ToGetAuthorityConfigArrayOutputWithContext(ctx context.Context) GetAuthorityConfigArrayOutput

type GetAuthorityConfigInput

type GetAuthorityConfigInput interface {
	pulumi.Input

	ToGetAuthorityConfigOutput() GetAuthorityConfigOutput
	ToGetAuthorityConfigOutputWithContext(context.Context) GetAuthorityConfigOutput
}

GetAuthorityConfigInput is an input type that accepts GetAuthorityConfigArgs and GetAuthorityConfigOutput values. You can construct a concrete instance of `GetAuthorityConfigInput` via:

GetAuthorityConfigArgs{...}

type GetAuthorityConfigOutput

type GetAuthorityConfigOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigOutput) ElementType

func (GetAuthorityConfigOutput) ElementType() reflect.Type

func (GetAuthorityConfigOutput) SubjectConfigs

Specifies some of the values in a certificate that are related to the subject.

func (GetAuthorityConfigOutput) ToGetAuthorityConfigOutput

func (o GetAuthorityConfigOutput) ToGetAuthorityConfigOutput() GetAuthorityConfigOutput

func (GetAuthorityConfigOutput) ToGetAuthorityConfigOutputWithContext

func (o GetAuthorityConfigOutput) ToGetAuthorityConfigOutputWithContext(ctx context.Context) GetAuthorityConfigOutput

func (GetAuthorityConfigOutput) X509Configs

Describes how some of the technical X.509 fields in a certificate should be populated.

type GetAuthorityConfigSubjectConfig

type GetAuthorityConfigSubjectConfig struct {
	// The subject alternative name fields.
	SubjectAltNames []GetAuthorityConfigSubjectConfigSubjectAltName `pulumi:"subjectAltNames"`
	// Contains distinguished name fields such as the location and organization.
	Subjects []GetAuthorityConfigSubjectConfigSubject `pulumi:"subjects"`
}

type GetAuthorityConfigSubjectConfigArgs

type GetAuthorityConfigSubjectConfigArgs struct {
	// The subject alternative name fields.
	SubjectAltNames GetAuthorityConfigSubjectConfigSubjectAltNameArrayInput `pulumi:"subjectAltNames"`
	// Contains distinguished name fields such as the location and organization.
	Subjects GetAuthorityConfigSubjectConfigSubjectArrayInput `pulumi:"subjects"`
}

func (GetAuthorityConfigSubjectConfigArgs) ElementType

func (GetAuthorityConfigSubjectConfigArgs) ToGetAuthorityConfigSubjectConfigOutput

func (i GetAuthorityConfigSubjectConfigArgs) ToGetAuthorityConfigSubjectConfigOutput() GetAuthorityConfigSubjectConfigOutput

func (GetAuthorityConfigSubjectConfigArgs) ToGetAuthorityConfigSubjectConfigOutputWithContext

func (i GetAuthorityConfigSubjectConfigArgs) ToGetAuthorityConfigSubjectConfigOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigOutput

type GetAuthorityConfigSubjectConfigArray

type GetAuthorityConfigSubjectConfigArray []GetAuthorityConfigSubjectConfigInput

func (GetAuthorityConfigSubjectConfigArray) ElementType

func (GetAuthorityConfigSubjectConfigArray) ToGetAuthorityConfigSubjectConfigArrayOutput

func (i GetAuthorityConfigSubjectConfigArray) ToGetAuthorityConfigSubjectConfigArrayOutput() GetAuthorityConfigSubjectConfigArrayOutput

func (GetAuthorityConfigSubjectConfigArray) ToGetAuthorityConfigSubjectConfigArrayOutputWithContext

func (i GetAuthorityConfigSubjectConfigArray) ToGetAuthorityConfigSubjectConfigArrayOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigArrayOutput

type GetAuthorityConfigSubjectConfigArrayInput

type GetAuthorityConfigSubjectConfigArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigSubjectConfigArrayOutput() GetAuthorityConfigSubjectConfigArrayOutput
	ToGetAuthorityConfigSubjectConfigArrayOutputWithContext(context.Context) GetAuthorityConfigSubjectConfigArrayOutput
}

GetAuthorityConfigSubjectConfigArrayInput is an input type that accepts GetAuthorityConfigSubjectConfigArray and GetAuthorityConfigSubjectConfigArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigSubjectConfigArrayInput` via:

GetAuthorityConfigSubjectConfigArray{ GetAuthorityConfigSubjectConfigArgs{...} }

type GetAuthorityConfigSubjectConfigArrayOutput

type GetAuthorityConfigSubjectConfigArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigSubjectConfigArrayOutput) ElementType

func (GetAuthorityConfigSubjectConfigArrayOutput) Index

func (GetAuthorityConfigSubjectConfigArrayOutput) ToGetAuthorityConfigSubjectConfigArrayOutput

func (o GetAuthorityConfigSubjectConfigArrayOutput) ToGetAuthorityConfigSubjectConfigArrayOutput() GetAuthorityConfigSubjectConfigArrayOutput

func (GetAuthorityConfigSubjectConfigArrayOutput) ToGetAuthorityConfigSubjectConfigArrayOutputWithContext

func (o GetAuthorityConfigSubjectConfigArrayOutput) ToGetAuthorityConfigSubjectConfigArrayOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigArrayOutput

type GetAuthorityConfigSubjectConfigInput

type GetAuthorityConfigSubjectConfigInput interface {
	pulumi.Input

	ToGetAuthorityConfigSubjectConfigOutput() GetAuthorityConfigSubjectConfigOutput
	ToGetAuthorityConfigSubjectConfigOutputWithContext(context.Context) GetAuthorityConfigSubjectConfigOutput
}

GetAuthorityConfigSubjectConfigInput is an input type that accepts GetAuthorityConfigSubjectConfigArgs and GetAuthorityConfigSubjectConfigOutput values. You can construct a concrete instance of `GetAuthorityConfigSubjectConfigInput` via:

GetAuthorityConfigSubjectConfigArgs{...}

type GetAuthorityConfigSubjectConfigOutput

type GetAuthorityConfigSubjectConfigOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigSubjectConfigOutput) ElementType

func (GetAuthorityConfigSubjectConfigOutput) SubjectAltNames

The subject alternative name fields.

func (GetAuthorityConfigSubjectConfigOutput) Subjects

Contains distinguished name fields such as the location and organization.

func (GetAuthorityConfigSubjectConfigOutput) ToGetAuthorityConfigSubjectConfigOutput

func (o GetAuthorityConfigSubjectConfigOutput) ToGetAuthorityConfigSubjectConfigOutput() GetAuthorityConfigSubjectConfigOutput

func (GetAuthorityConfigSubjectConfigOutput) ToGetAuthorityConfigSubjectConfigOutputWithContext

func (o GetAuthorityConfigSubjectConfigOutput) ToGetAuthorityConfigSubjectConfigOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigOutput

type GetAuthorityConfigSubjectConfigSubject

type GetAuthorityConfigSubjectConfigSubject struct {
	// The common name of the distinguished name.
	CommonName string `pulumi:"commonName"`
	// The country code of the subject.
	CountryCode string `pulumi:"countryCode"`
	// The locality or city of the subject.
	Locality string `pulumi:"locality"`
	// The organization of the subject.
	Organization string `pulumi:"organization"`
	// The organizational unit of the subject.
	OrganizationalUnit string `pulumi:"organizationalUnit"`
	// The postal code of the subject.
	PostalCode string `pulumi:"postalCode"`
	// The province, territory, or regional state of the subject.
	Province string `pulumi:"province"`
	// The street address of the subject.
	StreetAddress string `pulumi:"streetAddress"`
}

type GetAuthorityConfigSubjectConfigSubjectAltName

type GetAuthorityConfigSubjectConfigSubjectAltName struct {
	// Contains only valid, fully-qualified host names.
	DnsNames []string `pulumi:"dnsNames"`
	// Contains only valid RFC 2822 E-mail addresses.
	EmailAddresses []string `pulumi:"emailAddresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	IpAddresses []string `pulumi:"ipAddresses"`
	// Contains only valid RFC 3986 URIs.
	Uris []string `pulumi:"uris"`
}

type GetAuthorityConfigSubjectConfigSubjectAltNameArgs

type GetAuthorityConfigSubjectConfigSubjectAltNameArgs struct {
	// Contains only valid, fully-qualified host names.
	DnsNames pulumi.StringArrayInput `pulumi:"dnsNames"`
	// Contains only valid RFC 2822 E-mail addresses.
	EmailAddresses pulumi.StringArrayInput `pulumi:"emailAddresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	IpAddresses pulumi.StringArrayInput `pulumi:"ipAddresses"`
	// Contains only valid RFC 3986 URIs.
	Uris pulumi.StringArrayInput `pulumi:"uris"`
}

func (GetAuthorityConfigSubjectConfigSubjectAltNameArgs) ElementType

func (GetAuthorityConfigSubjectConfigSubjectAltNameArgs) ToGetAuthorityConfigSubjectConfigSubjectAltNameOutput

func (i GetAuthorityConfigSubjectConfigSubjectAltNameArgs) ToGetAuthorityConfigSubjectConfigSubjectAltNameOutput() GetAuthorityConfigSubjectConfigSubjectAltNameOutput

func (GetAuthorityConfigSubjectConfigSubjectAltNameArgs) ToGetAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext

func (i GetAuthorityConfigSubjectConfigSubjectAltNameArgs) ToGetAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigSubjectAltNameOutput

type GetAuthorityConfigSubjectConfigSubjectAltNameArray

type GetAuthorityConfigSubjectConfigSubjectAltNameArray []GetAuthorityConfigSubjectConfigSubjectAltNameInput

func (GetAuthorityConfigSubjectConfigSubjectAltNameArray) ElementType

func (GetAuthorityConfigSubjectConfigSubjectAltNameArray) ToGetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput

func (i GetAuthorityConfigSubjectConfigSubjectAltNameArray) ToGetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput() GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput

func (GetAuthorityConfigSubjectConfigSubjectAltNameArray) ToGetAuthorityConfigSubjectConfigSubjectAltNameArrayOutputWithContext

func (i GetAuthorityConfigSubjectConfigSubjectAltNameArray) ToGetAuthorityConfigSubjectConfigSubjectAltNameArrayOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput

type GetAuthorityConfigSubjectConfigSubjectAltNameArrayInput

type GetAuthorityConfigSubjectConfigSubjectAltNameArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput() GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput
	ToGetAuthorityConfigSubjectConfigSubjectAltNameArrayOutputWithContext(context.Context) GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput
}

GetAuthorityConfigSubjectConfigSubjectAltNameArrayInput is an input type that accepts GetAuthorityConfigSubjectConfigSubjectAltNameArray and GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigSubjectConfigSubjectAltNameArrayInput` via:

GetAuthorityConfigSubjectConfigSubjectAltNameArray{ GetAuthorityConfigSubjectConfigSubjectAltNameArgs{...} }

type GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput

type GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput) ElementType

func (GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput) Index

func (GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput) ToGetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput

func (GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput) ToGetAuthorityConfigSubjectConfigSubjectAltNameArrayOutputWithContext

func (o GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput) ToGetAuthorityConfigSubjectConfigSubjectAltNameArrayOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigSubjectAltNameArrayOutput

type GetAuthorityConfigSubjectConfigSubjectAltNameInput

type GetAuthorityConfigSubjectConfigSubjectAltNameInput interface {
	pulumi.Input

	ToGetAuthorityConfigSubjectConfigSubjectAltNameOutput() GetAuthorityConfigSubjectConfigSubjectAltNameOutput
	ToGetAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext(context.Context) GetAuthorityConfigSubjectConfigSubjectAltNameOutput
}

GetAuthorityConfigSubjectConfigSubjectAltNameInput is an input type that accepts GetAuthorityConfigSubjectConfigSubjectAltNameArgs and GetAuthorityConfigSubjectConfigSubjectAltNameOutput values. You can construct a concrete instance of `GetAuthorityConfigSubjectConfigSubjectAltNameInput` via:

GetAuthorityConfigSubjectConfigSubjectAltNameArgs{...}

type GetAuthorityConfigSubjectConfigSubjectAltNameOutput

type GetAuthorityConfigSubjectConfigSubjectAltNameOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigSubjectConfigSubjectAltNameOutput) DnsNames

Contains only valid, fully-qualified host names.

func (GetAuthorityConfigSubjectConfigSubjectAltNameOutput) ElementType

func (GetAuthorityConfigSubjectConfigSubjectAltNameOutput) EmailAddresses

Contains only valid RFC 2822 E-mail addresses.

func (GetAuthorityConfigSubjectConfigSubjectAltNameOutput) IpAddresses

Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.

func (GetAuthorityConfigSubjectConfigSubjectAltNameOutput) ToGetAuthorityConfigSubjectConfigSubjectAltNameOutput

func (o GetAuthorityConfigSubjectConfigSubjectAltNameOutput) ToGetAuthorityConfigSubjectConfigSubjectAltNameOutput() GetAuthorityConfigSubjectConfigSubjectAltNameOutput

func (GetAuthorityConfigSubjectConfigSubjectAltNameOutput) ToGetAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext

func (o GetAuthorityConfigSubjectConfigSubjectAltNameOutput) ToGetAuthorityConfigSubjectConfigSubjectAltNameOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigSubjectAltNameOutput

func (GetAuthorityConfigSubjectConfigSubjectAltNameOutput) Uris

Contains only valid RFC 3986 URIs.

type GetAuthorityConfigSubjectConfigSubjectArgs

type GetAuthorityConfigSubjectConfigSubjectArgs struct {
	// The common name of the distinguished name.
	CommonName pulumi.StringInput `pulumi:"commonName"`
	// The country code of the subject.
	CountryCode pulumi.StringInput `pulumi:"countryCode"`
	// The locality or city of the subject.
	Locality pulumi.StringInput `pulumi:"locality"`
	// The organization of the subject.
	Organization pulumi.StringInput `pulumi:"organization"`
	// The organizational unit of the subject.
	OrganizationalUnit pulumi.StringInput `pulumi:"organizationalUnit"`
	// The postal code of the subject.
	PostalCode pulumi.StringInput `pulumi:"postalCode"`
	// The province, territory, or regional state of the subject.
	Province pulumi.StringInput `pulumi:"province"`
	// The street address of the subject.
	StreetAddress pulumi.StringInput `pulumi:"streetAddress"`
}

func (GetAuthorityConfigSubjectConfigSubjectArgs) ElementType

func (GetAuthorityConfigSubjectConfigSubjectArgs) ToGetAuthorityConfigSubjectConfigSubjectOutput

func (i GetAuthorityConfigSubjectConfigSubjectArgs) ToGetAuthorityConfigSubjectConfigSubjectOutput() GetAuthorityConfigSubjectConfigSubjectOutput

func (GetAuthorityConfigSubjectConfigSubjectArgs) ToGetAuthorityConfigSubjectConfigSubjectOutputWithContext

func (i GetAuthorityConfigSubjectConfigSubjectArgs) ToGetAuthorityConfigSubjectConfigSubjectOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigSubjectOutput

type GetAuthorityConfigSubjectConfigSubjectArray

type GetAuthorityConfigSubjectConfigSubjectArray []GetAuthorityConfigSubjectConfigSubjectInput

func (GetAuthorityConfigSubjectConfigSubjectArray) ElementType

func (GetAuthorityConfigSubjectConfigSubjectArray) ToGetAuthorityConfigSubjectConfigSubjectArrayOutput

func (i GetAuthorityConfigSubjectConfigSubjectArray) ToGetAuthorityConfigSubjectConfigSubjectArrayOutput() GetAuthorityConfigSubjectConfigSubjectArrayOutput

func (GetAuthorityConfigSubjectConfigSubjectArray) ToGetAuthorityConfigSubjectConfigSubjectArrayOutputWithContext

func (i GetAuthorityConfigSubjectConfigSubjectArray) ToGetAuthorityConfigSubjectConfigSubjectArrayOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigSubjectArrayOutput

type GetAuthorityConfigSubjectConfigSubjectArrayInput

type GetAuthorityConfigSubjectConfigSubjectArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigSubjectConfigSubjectArrayOutput() GetAuthorityConfigSubjectConfigSubjectArrayOutput
	ToGetAuthorityConfigSubjectConfigSubjectArrayOutputWithContext(context.Context) GetAuthorityConfigSubjectConfigSubjectArrayOutput
}

GetAuthorityConfigSubjectConfigSubjectArrayInput is an input type that accepts GetAuthorityConfigSubjectConfigSubjectArray and GetAuthorityConfigSubjectConfigSubjectArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigSubjectConfigSubjectArrayInput` via:

GetAuthorityConfigSubjectConfigSubjectArray{ GetAuthorityConfigSubjectConfigSubjectArgs{...} }

type GetAuthorityConfigSubjectConfigSubjectArrayOutput

type GetAuthorityConfigSubjectConfigSubjectArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigSubjectConfigSubjectArrayOutput) ElementType

func (GetAuthorityConfigSubjectConfigSubjectArrayOutput) Index

func (GetAuthorityConfigSubjectConfigSubjectArrayOutput) ToGetAuthorityConfigSubjectConfigSubjectArrayOutput

func (o GetAuthorityConfigSubjectConfigSubjectArrayOutput) ToGetAuthorityConfigSubjectConfigSubjectArrayOutput() GetAuthorityConfigSubjectConfigSubjectArrayOutput

func (GetAuthorityConfigSubjectConfigSubjectArrayOutput) ToGetAuthorityConfigSubjectConfigSubjectArrayOutputWithContext

func (o GetAuthorityConfigSubjectConfigSubjectArrayOutput) ToGetAuthorityConfigSubjectConfigSubjectArrayOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigSubjectArrayOutput

type GetAuthorityConfigSubjectConfigSubjectInput

type GetAuthorityConfigSubjectConfigSubjectInput interface {
	pulumi.Input

	ToGetAuthorityConfigSubjectConfigSubjectOutput() GetAuthorityConfigSubjectConfigSubjectOutput
	ToGetAuthorityConfigSubjectConfigSubjectOutputWithContext(context.Context) GetAuthorityConfigSubjectConfigSubjectOutput
}

GetAuthorityConfigSubjectConfigSubjectInput is an input type that accepts GetAuthorityConfigSubjectConfigSubjectArgs and GetAuthorityConfigSubjectConfigSubjectOutput values. You can construct a concrete instance of `GetAuthorityConfigSubjectConfigSubjectInput` via:

GetAuthorityConfigSubjectConfigSubjectArgs{...}

type GetAuthorityConfigSubjectConfigSubjectOutput

type GetAuthorityConfigSubjectConfigSubjectOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigSubjectConfigSubjectOutput) CommonName

The common name of the distinguished name.

func (GetAuthorityConfigSubjectConfigSubjectOutput) CountryCode

The country code of the subject.

func (GetAuthorityConfigSubjectConfigSubjectOutput) ElementType

func (GetAuthorityConfigSubjectConfigSubjectOutput) Locality

The locality or city of the subject.

func (GetAuthorityConfigSubjectConfigSubjectOutput) Organization

The organization of the subject.

func (GetAuthorityConfigSubjectConfigSubjectOutput) OrganizationalUnit

The organizational unit of the subject.

func (GetAuthorityConfigSubjectConfigSubjectOutput) PostalCode

The postal code of the subject.

func (GetAuthorityConfigSubjectConfigSubjectOutput) Province

The province, territory, or regional state of the subject.

func (GetAuthorityConfigSubjectConfigSubjectOutput) StreetAddress

The street address of the subject.

func (GetAuthorityConfigSubjectConfigSubjectOutput) ToGetAuthorityConfigSubjectConfigSubjectOutput

func (o GetAuthorityConfigSubjectConfigSubjectOutput) ToGetAuthorityConfigSubjectConfigSubjectOutput() GetAuthorityConfigSubjectConfigSubjectOutput

func (GetAuthorityConfigSubjectConfigSubjectOutput) ToGetAuthorityConfigSubjectConfigSubjectOutputWithContext

func (o GetAuthorityConfigSubjectConfigSubjectOutput) ToGetAuthorityConfigSubjectConfigSubjectOutputWithContext(ctx context.Context) GetAuthorityConfigSubjectConfigSubjectOutput

type GetAuthorityConfigX509Config

type GetAuthorityConfigX509Config struct {
	// Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
	AdditionalExtensions []GetAuthorityConfigX509ConfigAdditionalExtension `pulumi:"additionalExtensions"`
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers []string `pulumi:"aiaOcspServers"`
	// Describes values that are relevant in a CA certificate.
	CaOptions []GetAuthorityConfigX509ConfigCaOption `pulumi:"caOptions"`
	// Indicates the intended use for keys that correspond to a certificate.
	KeyUsages []GetAuthorityConfigX509ConfigKeyUsage `pulumi:"keyUsages"`
	// Describes the X.509 name constraints extension.
	NameConstraints []GetAuthorityConfigX509ConfigNameConstraint `pulumi:"nameConstraints"`
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	PolicyIds []GetAuthorityConfigX509ConfigPolicyId `pulumi:"policyIds"`
}

type GetAuthorityConfigX509ConfigAdditionalExtension

type GetAuthorityConfigX509ConfigAdditionalExtension struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical bool `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	ObjectIds []GetAuthorityConfigX509ConfigAdditionalExtensionObjectId `pulumi:"objectIds"`
	// The value of this X.509 extension. A base64-encoded string.
	Value string `pulumi:"value"`
}

type GetAuthorityConfigX509ConfigAdditionalExtensionArgs

type GetAuthorityConfigX509ConfigAdditionalExtensionArgs struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical pulumi.BoolInput `pulumi:"critical"`
	// Describes values that are relevant in a CA certificate.
	ObjectIds GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayInput `pulumi:"objectIds"`
	// The value of this X.509 extension. A base64-encoded string.
	Value pulumi.StringInput `pulumi:"value"`
}

func (GetAuthorityConfigX509ConfigAdditionalExtensionArgs) ElementType

func (GetAuthorityConfigX509ConfigAdditionalExtensionArgs) ToGetAuthorityConfigX509ConfigAdditionalExtensionOutput

func (i GetAuthorityConfigX509ConfigAdditionalExtensionArgs) ToGetAuthorityConfigX509ConfigAdditionalExtensionOutput() GetAuthorityConfigX509ConfigAdditionalExtensionOutput

func (GetAuthorityConfigX509ConfigAdditionalExtensionArgs) ToGetAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext

func (i GetAuthorityConfigX509ConfigAdditionalExtensionArgs) ToGetAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionArray

type GetAuthorityConfigX509ConfigAdditionalExtensionArray []GetAuthorityConfigX509ConfigAdditionalExtensionInput

func (GetAuthorityConfigX509ConfigAdditionalExtensionArray) ElementType

func (GetAuthorityConfigX509ConfigAdditionalExtensionArray) ToGetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput

func (i GetAuthorityConfigX509ConfigAdditionalExtensionArray) ToGetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput() GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput

func (GetAuthorityConfigX509ConfigAdditionalExtensionArray) ToGetAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigAdditionalExtensionArray) ToGetAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionArrayInput

type GetAuthorityConfigX509ConfigAdditionalExtensionArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput() GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput
	ToGetAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput
}

GetAuthorityConfigX509ConfigAdditionalExtensionArrayInput is an input type that accepts GetAuthorityConfigX509ConfigAdditionalExtensionArray and GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigAdditionalExtensionArrayInput` via:

GetAuthorityConfigX509ConfigAdditionalExtensionArray{ GetAuthorityConfigX509ConfigAdditionalExtensionArgs{...} }

type GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput) Index

func (GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput

func (GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionArrayOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionInput

type GetAuthorityConfigX509ConfigAdditionalExtensionInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigAdditionalExtensionOutput() GetAuthorityConfigX509ConfigAdditionalExtensionOutput
	ToGetAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext(context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionOutput
}

GetAuthorityConfigX509ConfigAdditionalExtensionInput is an input type that accepts GetAuthorityConfigX509ConfigAdditionalExtensionArgs and GetAuthorityConfigX509ConfigAdditionalExtensionOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigAdditionalExtensionInput` via:

GetAuthorityConfigX509ConfigAdditionalExtensionArgs{...}

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectId

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs) ElementType

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext

func (i GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArray

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArray []GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdInput

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArray) ElementType

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArray) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArray) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArray) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayInput

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput() GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput
	ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput
}

GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayInput is an input type that accepts GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArray and GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayInput` via:

GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArray{ GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs{...} }

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput) Index

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArrayOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdInput

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput() GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput
	ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext(context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput
}

GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdInput is an input type that accepts GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs and GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdInput` via:

GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs{...}

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ElementType

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

func (GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext

func (o GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionObjectIdOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionOutput

type GetAuthorityConfigX509ConfigAdditionalExtensionOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigAdditionalExtensionOutput) Critical

Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).

func (GetAuthorityConfigX509ConfigAdditionalExtensionOutput) ElementType

func (GetAuthorityConfigX509ConfigAdditionalExtensionOutput) ObjectIds

Describes values that are relevant in a CA certificate.

func (GetAuthorityConfigX509ConfigAdditionalExtensionOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionOutput

func (GetAuthorityConfigX509ConfigAdditionalExtensionOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext

func (o GetAuthorityConfigX509ConfigAdditionalExtensionOutput) ToGetAuthorityConfigX509ConfigAdditionalExtensionOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigAdditionalExtensionOutput

func (GetAuthorityConfigX509ConfigAdditionalExtensionOutput) Value

The value of this X.509 extension. A base64-encoded string.

type GetAuthorityConfigX509ConfigArgs

type GetAuthorityConfigX509ConfigArgs struct {
	// Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
	AdditionalExtensions GetAuthorityConfigX509ConfigAdditionalExtensionArrayInput `pulumi:"additionalExtensions"`
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	AiaOcspServers pulumi.StringArrayInput `pulumi:"aiaOcspServers"`
	// Describes values that are relevant in a CA certificate.
	CaOptions GetAuthorityConfigX509ConfigCaOptionArrayInput `pulumi:"caOptions"`
	// Indicates the intended use for keys that correspond to a certificate.
	KeyUsages GetAuthorityConfigX509ConfigKeyUsageArrayInput `pulumi:"keyUsages"`
	// Describes the X.509 name constraints extension.
	NameConstraints GetAuthorityConfigX509ConfigNameConstraintArrayInput `pulumi:"nameConstraints"`
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	PolicyIds GetAuthorityConfigX509ConfigPolicyIdArrayInput `pulumi:"policyIds"`
}

func (GetAuthorityConfigX509ConfigArgs) ElementType

func (GetAuthorityConfigX509ConfigArgs) ToGetAuthorityConfigX509ConfigOutput

func (i GetAuthorityConfigX509ConfigArgs) ToGetAuthorityConfigX509ConfigOutput() GetAuthorityConfigX509ConfigOutput

func (GetAuthorityConfigX509ConfigArgs) ToGetAuthorityConfigX509ConfigOutputWithContext

func (i GetAuthorityConfigX509ConfigArgs) ToGetAuthorityConfigX509ConfigOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigOutput

type GetAuthorityConfigX509ConfigArray

type GetAuthorityConfigX509ConfigArray []GetAuthorityConfigX509ConfigInput

func (GetAuthorityConfigX509ConfigArray) ElementType

func (GetAuthorityConfigX509ConfigArray) ToGetAuthorityConfigX509ConfigArrayOutput

func (i GetAuthorityConfigX509ConfigArray) ToGetAuthorityConfigX509ConfigArrayOutput() GetAuthorityConfigX509ConfigArrayOutput

func (GetAuthorityConfigX509ConfigArray) ToGetAuthorityConfigX509ConfigArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigArray) ToGetAuthorityConfigX509ConfigArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigArrayOutput

type GetAuthorityConfigX509ConfigArrayInput

type GetAuthorityConfigX509ConfigArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigArrayOutput() GetAuthorityConfigX509ConfigArrayOutput
	ToGetAuthorityConfigX509ConfigArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigArrayOutput
}

GetAuthorityConfigX509ConfigArrayInput is an input type that accepts GetAuthorityConfigX509ConfigArray and GetAuthorityConfigX509ConfigArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigArrayInput` via:

GetAuthorityConfigX509ConfigArray{ GetAuthorityConfigX509ConfigArgs{...} }

type GetAuthorityConfigX509ConfigArrayOutput

type GetAuthorityConfigX509ConfigArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigArrayOutput) Index

func (GetAuthorityConfigX509ConfigArrayOutput) ToGetAuthorityConfigX509ConfigArrayOutput

func (o GetAuthorityConfigX509ConfigArrayOutput) ToGetAuthorityConfigX509ConfigArrayOutput() GetAuthorityConfigX509ConfigArrayOutput

func (GetAuthorityConfigX509ConfigArrayOutput) ToGetAuthorityConfigX509ConfigArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigArrayOutput) ToGetAuthorityConfigX509ConfigArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigArrayOutput

type GetAuthorityConfigX509ConfigCaOption

type GetAuthorityConfigX509ConfigCaOption struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa bool `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. Setting the value to 0
	// requires setting 'zero_max_issuer_path_length = true'.
	MaxIssuerPathLength int `pulumi:"maxIssuerPathLength"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both 'is_ca' and 'non_ca' are unset, the extension will be omitted from the CA certificate.
	NonCa bool `pulumi:"nonCa"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// If both 'max_issuer_path_length' and 'zero_max_issuer_path_length' are unset,
	// the max path length will be omitted from the CA certificate.
	ZeroMaxIssuerPathLength bool `pulumi:"zeroMaxIssuerPathLength"`
}

type GetAuthorityConfigX509ConfigCaOptionArgs

type GetAuthorityConfigX509ConfigCaOptionArgs struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa pulumi.BoolInput `pulumi:"isCa"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. Setting the value to 0
	// requires setting 'zero_max_issuer_path_length = true'.
	MaxIssuerPathLength pulumi.IntInput `pulumi:"maxIssuerPathLength"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both 'is_ca' and 'non_ca' are unset, the extension will be omitted from the CA certificate.
	NonCa pulumi.BoolInput `pulumi:"nonCa"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// If both 'max_issuer_path_length' and 'zero_max_issuer_path_length' are unset,
	// the max path length will be omitted from the CA certificate.
	ZeroMaxIssuerPathLength pulumi.BoolInput `pulumi:"zeroMaxIssuerPathLength"`
}

func (GetAuthorityConfigX509ConfigCaOptionArgs) ElementType

func (GetAuthorityConfigX509ConfigCaOptionArgs) ToGetAuthorityConfigX509ConfigCaOptionOutput

func (i GetAuthorityConfigX509ConfigCaOptionArgs) ToGetAuthorityConfigX509ConfigCaOptionOutput() GetAuthorityConfigX509ConfigCaOptionOutput

func (GetAuthorityConfigX509ConfigCaOptionArgs) ToGetAuthorityConfigX509ConfigCaOptionOutputWithContext

func (i GetAuthorityConfigX509ConfigCaOptionArgs) ToGetAuthorityConfigX509ConfigCaOptionOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigCaOptionOutput

type GetAuthorityConfigX509ConfigCaOptionArray

type GetAuthorityConfigX509ConfigCaOptionArray []GetAuthorityConfigX509ConfigCaOptionInput

func (GetAuthorityConfigX509ConfigCaOptionArray) ElementType

func (GetAuthorityConfigX509ConfigCaOptionArray) ToGetAuthorityConfigX509ConfigCaOptionArrayOutput

func (i GetAuthorityConfigX509ConfigCaOptionArray) ToGetAuthorityConfigX509ConfigCaOptionArrayOutput() GetAuthorityConfigX509ConfigCaOptionArrayOutput

func (GetAuthorityConfigX509ConfigCaOptionArray) ToGetAuthorityConfigX509ConfigCaOptionArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigCaOptionArray) ToGetAuthorityConfigX509ConfigCaOptionArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigCaOptionArrayOutput

type GetAuthorityConfigX509ConfigCaOptionArrayInput

type GetAuthorityConfigX509ConfigCaOptionArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigCaOptionArrayOutput() GetAuthorityConfigX509ConfigCaOptionArrayOutput
	ToGetAuthorityConfigX509ConfigCaOptionArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigCaOptionArrayOutput
}

GetAuthorityConfigX509ConfigCaOptionArrayInput is an input type that accepts GetAuthorityConfigX509ConfigCaOptionArray and GetAuthorityConfigX509ConfigCaOptionArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigCaOptionArrayInput` via:

GetAuthorityConfigX509ConfigCaOptionArray{ GetAuthorityConfigX509ConfigCaOptionArgs{...} }

type GetAuthorityConfigX509ConfigCaOptionArrayOutput

type GetAuthorityConfigX509ConfigCaOptionArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigCaOptionArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigCaOptionArrayOutput) Index

func (GetAuthorityConfigX509ConfigCaOptionArrayOutput) ToGetAuthorityConfigX509ConfigCaOptionArrayOutput

func (o GetAuthorityConfigX509ConfigCaOptionArrayOutput) ToGetAuthorityConfigX509ConfigCaOptionArrayOutput() GetAuthorityConfigX509ConfigCaOptionArrayOutput

func (GetAuthorityConfigX509ConfigCaOptionArrayOutput) ToGetAuthorityConfigX509ConfigCaOptionArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigCaOptionArrayOutput) ToGetAuthorityConfigX509ConfigCaOptionArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigCaOptionArrayOutput

type GetAuthorityConfigX509ConfigCaOptionInput

type GetAuthorityConfigX509ConfigCaOptionInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigCaOptionOutput() GetAuthorityConfigX509ConfigCaOptionOutput
	ToGetAuthorityConfigX509ConfigCaOptionOutputWithContext(context.Context) GetAuthorityConfigX509ConfigCaOptionOutput
}

GetAuthorityConfigX509ConfigCaOptionInput is an input type that accepts GetAuthorityConfigX509ConfigCaOptionArgs and GetAuthorityConfigX509ConfigCaOptionOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigCaOptionInput` via:

GetAuthorityConfigX509ConfigCaOptionArgs{...}

type GetAuthorityConfigX509ConfigCaOptionOutput

type GetAuthorityConfigX509ConfigCaOptionOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigCaOptionOutput) ElementType

func (GetAuthorityConfigX509ConfigCaOptionOutput) IsCa

When true, the "CA" in Basic Constraints extension will be set to true.

func (GetAuthorityConfigX509ConfigCaOptionOutput) MaxIssuerPathLength

Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. Setting the value to 0 requires setting 'zero_max_issuer_path_length = true'.

func (GetAuthorityConfigX509ConfigCaOptionOutput) NonCa

When true, the "CA" in Basic Constraints extension will be set to false. If both 'is_ca' and 'non_ca' are unset, the extension will be omitted from the CA certificate.

func (GetAuthorityConfigX509ConfigCaOptionOutput) ToGetAuthorityConfigX509ConfigCaOptionOutput

func (o GetAuthorityConfigX509ConfigCaOptionOutput) ToGetAuthorityConfigX509ConfigCaOptionOutput() GetAuthorityConfigX509ConfigCaOptionOutput

func (GetAuthorityConfigX509ConfigCaOptionOutput) ToGetAuthorityConfigX509ConfigCaOptionOutputWithContext

func (o GetAuthorityConfigX509ConfigCaOptionOutput) ToGetAuthorityConfigX509ConfigCaOptionOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigCaOptionOutput

func (GetAuthorityConfigX509ConfigCaOptionOutput) ZeroMaxIssuerPathLength

func (o GetAuthorityConfigX509ConfigCaOptionOutput) ZeroMaxIssuerPathLength() pulumi.BoolOutput

When true, the "path length constraint" in Basic Constraints extension will be set to 0. If both 'max_issuer_path_length' and 'zero_max_issuer_path_length' are unset, the max path length will be omitted from the CA certificate.

type GetAuthorityConfigX509ConfigInput

type GetAuthorityConfigX509ConfigInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigOutput() GetAuthorityConfigX509ConfigOutput
	ToGetAuthorityConfigX509ConfigOutputWithContext(context.Context) GetAuthorityConfigX509ConfigOutput
}

GetAuthorityConfigX509ConfigInput is an input type that accepts GetAuthorityConfigX509ConfigArgs and GetAuthorityConfigX509ConfigOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigInput` via:

GetAuthorityConfigX509ConfigArgs{...}

type GetAuthorityConfigX509ConfigKeyUsage

type GetAuthorityConfigX509ConfigKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	BaseKeyUsages []GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsage `pulumi:"baseKeyUsages"`
	// Describes high-level ways in which a key may be used.
	ExtendedKeyUsages []GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsage `pulumi:"extendedKeyUsages"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	UnknownExtendedKeyUsages []GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsage `pulumi:"unknownExtendedKeyUsages"`
}

type GetAuthorityConfigX509ConfigKeyUsageArgs

type GetAuthorityConfigX509ConfigKeyUsageArgs struct {
	// Describes high-level ways in which a key may be used.
	BaseKeyUsages GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayInput `pulumi:"baseKeyUsages"`
	// Describes high-level ways in which a key may be used.
	ExtendedKeyUsages GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayInput `pulumi:"extendedKeyUsages"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	UnknownExtendedKeyUsages GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput `pulumi:"unknownExtendedKeyUsages"`
}

func (GetAuthorityConfigX509ConfigKeyUsageArgs) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageOutput

func (i GetAuthorityConfigX509ConfigKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageOutput() GetAuthorityConfigX509ConfigKeyUsageOutput

func (GetAuthorityConfigX509ConfigKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageOutputWithContext

func (i GetAuthorityConfigX509ConfigKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageArray

type GetAuthorityConfigX509ConfigKeyUsageArray []GetAuthorityConfigX509ConfigKeyUsageInput

func (GetAuthorityConfigX509ConfigKeyUsageArray) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageArrayOutput

func (i GetAuthorityConfigX509ConfigKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageArrayOutput() GetAuthorityConfigX509ConfigKeyUsageArrayOutput

func (GetAuthorityConfigX509ConfigKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageArrayInput

type GetAuthorityConfigX509ConfigKeyUsageArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigKeyUsageArrayOutput() GetAuthorityConfigX509ConfigKeyUsageArrayOutput
	ToGetAuthorityConfigX509ConfigKeyUsageArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigKeyUsageArrayOutput
}

GetAuthorityConfigX509ConfigKeyUsageArrayInput is an input type that accepts GetAuthorityConfigX509ConfigKeyUsageArray and GetAuthorityConfigX509ConfigKeyUsageArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigKeyUsageArrayInput` via:

GetAuthorityConfigX509ConfigKeyUsageArray{ GetAuthorityConfigX509ConfigKeyUsageArgs{...} }

type GetAuthorityConfigX509ConfigKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigKeyUsageArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageArrayOutput) Index

func (GetAuthorityConfigX509ConfigKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageArrayOutput

func (o GetAuthorityConfigX509ConfigKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageArrayOutput() GetAuthorityConfigX509ConfigKeyUsageArrayOutput

func (GetAuthorityConfigX509ConfigKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsage

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	CertSign bool `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment bool `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign bool `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment bool `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly bool `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature bool `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly bool `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement bool `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment bool `pulumi:"keyEncipherment"`
}

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs struct {
	// The key may be used to sign certificates.
	CertSign pulumi.BoolInput `pulumi:"certSign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	ContentCommitment pulumi.BoolInput `pulumi:"contentCommitment"`
	// The key may be used sign certificate revocation lists.
	CrlSign pulumi.BoolInput `pulumi:"crlSign"`
	// The key may be used to encipher data.
	DataEncipherment pulumi.BoolInput `pulumi:"dataEncipherment"`
	// The key may be used to decipher only.
	DecipherOnly pulumi.BoolInput `pulumi:"decipherOnly"`
	// The key may be used for digital signatures.
	DigitalSignature pulumi.BoolInput `pulumi:"digitalSignature"`
	// The key may be used to encipher only.
	EncipherOnly pulumi.BoolInput `pulumi:"encipherOnly"`
	// The key may be used in a key agreement protocol.
	KeyAgreement pulumi.BoolInput `pulumi:"keyAgreement"`
	// The key may be used to encipher other keys.
	KeyEncipherment pulumi.BoolInput `pulumi:"keyEncipherment"`
}

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (i GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput() GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext

func (i GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArray

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArray []GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArray) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput

func (i GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput() GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayInput

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput() GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput
	ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput
}

GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayInput is an input type that accepts GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArray and GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayInput` via:

GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArray{ GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{...} }

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput) Index

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput() GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput
	ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext(context.Context) GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput
}

GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput is an input type that accepts GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs and GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageInput` via:

GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs{...}

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) CertSign

The key may be used to sign certificates.

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ContentCommitment

The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) CrlSign

The key may be used sign certificate revocation lists.

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) DataEncipherment

The key may be used to encipher data.

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) DecipherOnly

The key may be used to decipher only.

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) DigitalSignature

The key may be used for digital signatures.

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) EncipherOnly

The key may be used to encipher only.

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) KeyAgreement

The key may be used in a key agreement protocol.

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) KeyEncipherment

The key may be used to encipher other keys.

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

func (GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext

func (o GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsage

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth bool `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning bool `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection bool `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning bool `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth bool `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping bool `pulumi:"timeStamping"`
}

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	ClientAuth pulumi.BoolInput `pulumi:"clientAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	CodeSigning pulumi.BoolInput `pulumi:"codeSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	EmailProtection pulumi.BoolInput `pulumi:"emailProtection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	OcspSigning pulumi.BoolInput `pulumi:"ocspSigning"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	ServerAuth pulumi.BoolInput `pulumi:"serverAuth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	TimeStamping pulumi.BoolInput `pulumi:"timeStamping"`
}

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext

func (i GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArray

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArray []GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArray) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput

func (i GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput() GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayInput

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput() GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput
	ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput
}

GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayInput is an input type that accepts GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArray and GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayInput` via:

GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArray{ GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{...} }

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput) Index

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput() GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput
	ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext(context.Context) GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput
}

GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput is an input type that accepts GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs and GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageInput` via:

GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs{...}

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ClientAuth

Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) CodeSigning

Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) EmailProtection

Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) OcspSigning

Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ServerAuth

Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) TimeStamping

Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

func (GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext

func (o GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageInput

type GetAuthorityConfigX509ConfigKeyUsageInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigKeyUsageOutput() GetAuthorityConfigX509ConfigKeyUsageOutput
	ToGetAuthorityConfigX509ConfigKeyUsageOutputWithContext(context.Context) GetAuthorityConfigX509ConfigKeyUsageOutput
}

GetAuthorityConfigX509ConfigKeyUsageInput is an input type that accepts GetAuthorityConfigX509ConfigKeyUsageArgs and GetAuthorityConfigX509ConfigKeyUsageOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigKeyUsageInput` via:

GetAuthorityConfigX509ConfigKeyUsageArgs{...}

type GetAuthorityConfigX509ConfigKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigKeyUsageOutput) BaseKeyUsages

Describes high-level ways in which a key may be used.

func (GetAuthorityConfigX509ConfigKeyUsageOutput) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageOutput) ExtendedKeyUsages

Describes high-level ways in which a key may be used.

func (GetAuthorityConfigX509ConfigKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageOutput

func (o GetAuthorityConfigX509ConfigKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageOutput() GetAuthorityConfigX509ConfigKeyUsageOutput

func (GetAuthorityConfigX509ConfigKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageOutputWithContext

func (o GetAuthorityConfigX509ConfigKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageOutput

func (GetAuthorityConfigX509ConfigKeyUsageOutput) UnknownExtendedKeyUsages

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsage

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsage struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext

func (i GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray []GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput() GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput
	ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput
}

GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput is an input type that accepts GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray and GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayInput` via:

GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArray{ GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs{...} }

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArrayOutput

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput() GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput
	ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext(context.Context) GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput
}

GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput is an input type that accepts GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs and GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageInput` via:

GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs{...}

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

type GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ElementType

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

func (GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext

func (o GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput) ToGetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageOutput

type GetAuthorityConfigX509ConfigNameConstraint

type GetAuthorityConfigX509ConfigNameConstraint struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical bool `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, 'example.com', 'www.example.com', 'www.sub.example.com'
	// would satisfy 'example.com' while 'example1.com' does not.
	ExcludedDnsNames []string `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. '.example.com') to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses []string `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges []string `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like '.example.com')
	ExcludedUris []string `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, 'example.com', 'www.example.com', 'www.sub.example.com'
	// would satisfy 'example.com' while 'example1.com' does not.
	PermittedDnsNames []string `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. '.example.com') to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses []string `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges []string `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like '.example.com')
	PermittedUris []string `pulumi:"permittedUris"`
}

type GetAuthorityConfigX509ConfigNameConstraintArgs

type GetAuthorityConfigX509ConfigNameConstraintArgs struct {
	// Indicates whether or not the name constraints are marked critical.
	Critical pulumi.BoolInput `pulumi:"critical"`
	// Contains excluded DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, 'example.com', 'www.example.com', 'www.sub.example.com'
	// would satisfy 'example.com' while 'example1.com' does not.
	ExcludedDnsNames pulumi.StringArrayInput `pulumi:"excludedDnsNames"`
	// Contains the excluded email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. '.example.com') to indicate
	// all email addresses in that domain.
	ExcludedEmailAddresses pulumi.StringArrayInput `pulumi:"excludedEmailAddresses"`
	// Contains the excluded IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	ExcludedIpRanges pulumi.StringArrayInput `pulumi:"excludedIpRanges"`
	// Contains the excluded URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like '.example.com')
	ExcludedUris pulumi.StringArrayInput `pulumi:"excludedUris"`
	// Contains permitted DNS names. Any DNS name that can be
	// constructed by simply adding zero or more labels to
	// the left-hand side of the name satisfies the name constraint.
	// For example, 'example.com', 'www.example.com', 'www.sub.example.com'
	// would satisfy 'example.com' while 'example1.com' does not.
	PermittedDnsNames pulumi.StringArrayInput `pulumi:"permittedDnsNames"`
	// Contains the permitted email addresses. The value can be a particular
	// email address, a hostname to indicate all email addresses on that host or
	// a domain with a leading period (e.g. '.example.com') to indicate
	// all email addresses in that domain.
	PermittedEmailAddresses pulumi.StringArrayInput `pulumi:"permittedEmailAddresses"`
	// Contains the permitted IP ranges. For IPv4 addresses, the ranges
	// are expressed using CIDR notation as specified in RFC 4632.
	// For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
	// addresses.
	PermittedIpRanges pulumi.StringArrayInput `pulumi:"permittedIpRanges"`
	// Contains the permitted URIs that apply to the host part of the name.
	// The value can be a hostname or a domain with a
	// leading period (like '.example.com')
	PermittedUris pulumi.StringArrayInput `pulumi:"permittedUris"`
}

func (GetAuthorityConfigX509ConfigNameConstraintArgs) ElementType

func (GetAuthorityConfigX509ConfigNameConstraintArgs) ToGetAuthorityConfigX509ConfigNameConstraintOutput

func (i GetAuthorityConfigX509ConfigNameConstraintArgs) ToGetAuthorityConfigX509ConfigNameConstraintOutput() GetAuthorityConfigX509ConfigNameConstraintOutput

func (GetAuthorityConfigX509ConfigNameConstraintArgs) ToGetAuthorityConfigX509ConfigNameConstraintOutputWithContext

func (i GetAuthorityConfigX509ConfigNameConstraintArgs) ToGetAuthorityConfigX509ConfigNameConstraintOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigNameConstraintOutput

type GetAuthorityConfigX509ConfigNameConstraintArray

type GetAuthorityConfigX509ConfigNameConstraintArray []GetAuthorityConfigX509ConfigNameConstraintInput

func (GetAuthorityConfigX509ConfigNameConstraintArray) ElementType

func (GetAuthorityConfigX509ConfigNameConstraintArray) ToGetAuthorityConfigX509ConfigNameConstraintArrayOutput

func (i GetAuthorityConfigX509ConfigNameConstraintArray) ToGetAuthorityConfigX509ConfigNameConstraintArrayOutput() GetAuthorityConfigX509ConfigNameConstraintArrayOutput

func (GetAuthorityConfigX509ConfigNameConstraintArray) ToGetAuthorityConfigX509ConfigNameConstraintArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigNameConstraintArray) ToGetAuthorityConfigX509ConfigNameConstraintArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigNameConstraintArrayOutput

type GetAuthorityConfigX509ConfigNameConstraintArrayInput

type GetAuthorityConfigX509ConfigNameConstraintArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigNameConstraintArrayOutput() GetAuthorityConfigX509ConfigNameConstraintArrayOutput
	ToGetAuthorityConfigX509ConfigNameConstraintArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigNameConstraintArrayOutput
}

GetAuthorityConfigX509ConfigNameConstraintArrayInput is an input type that accepts GetAuthorityConfigX509ConfigNameConstraintArray and GetAuthorityConfigX509ConfigNameConstraintArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigNameConstraintArrayInput` via:

GetAuthorityConfigX509ConfigNameConstraintArray{ GetAuthorityConfigX509ConfigNameConstraintArgs{...} }

type GetAuthorityConfigX509ConfigNameConstraintArrayOutput

type GetAuthorityConfigX509ConfigNameConstraintArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigNameConstraintArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigNameConstraintArrayOutput) Index

func (GetAuthorityConfigX509ConfigNameConstraintArrayOutput) ToGetAuthorityConfigX509ConfigNameConstraintArrayOutput

func (GetAuthorityConfigX509ConfigNameConstraintArrayOutput) ToGetAuthorityConfigX509ConfigNameConstraintArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigNameConstraintArrayOutput) ToGetAuthorityConfigX509ConfigNameConstraintArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigNameConstraintArrayOutput

type GetAuthorityConfigX509ConfigNameConstraintInput

type GetAuthorityConfigX509ConfigNameConstraintInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigNameConstraintOutput() GetAuthorityConfigX509ConfigNameConstraintOutput
	ToGetAuthorityConfigX509ConfigNameConstraintOutputWithContext(context.Context) GetAuthorityConfigX509ConfigNameConstraintOutput
}

GetAuthorityConfigX509ConfigNameConstraintInput is an input type that accepts GetAuthorityConfigX509ConfigNameConstraintArgs and GetAuthorityConfigX509ConfigNameConstraintOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigNameConstraintInput` via:

GetAuthorityConfigX509ConfigNameConstraintArgs{...}

type GetAuthorityConfigX509ConfigNameConstraintOutput

type GetAuthorityConfigX509ConfigNameConstraintOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigNameConstraintOutput) Critical

Indicates whether or not the name constraints are marked critical.

func (GetAuthorityConfigX509ConfigNameConstraintOutput) ElementType

func (GetAuthorityConfigX509ConfigNameConstraintOutput) ExcludedDnsNames

Contains excluded DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, 'example.com', 'www.example.com', 'www.sub.example.com' would satisfy 'example.com' while 'example1.com' does not.

func (GetAuthorityConfigX509ConfigNameConstraintOutput) ExcludedEmailAddresses

Contains the excluded email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. '.example.com') to indicate all email addresses in that domain.

func (GetAuthorityConfigX509ConfigNameConstraintOutput) ExcludedIpRanges

Contains the excluded IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (GetAuthorityConfigX509ConfigNameConstraintOutput) ExcludedUris

Contains the excluded URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like '.example.com')

func (GetAuthorityConfigX509ConfigNameConstraintOutput) PermittedDnsNames

Contains permitted DNS names. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name satisfies the name constraint. For example, 'example.com', 'www.example.com', 'www.sub.example.com' would satisfy 'example.com' while 'example1.com' does not.

func (GetAuthorityConfigX509ConfigNameConstraintOutput) PermittedEmailAddresses

Contains the permitted email addresses. The value can be a particular email address, a hostname to indicate all email addresses on that host or a domain with a leading period (e.g. '.example.com') to indicate all email addresses in that domain.

func (GetAuthorityConfigX509ConfigNameConstraintOutput) PermittedIpRanges

Contains the permitted IP ranges. For IPv4 addresses, the ranges are expressed using CIDR notation as specified in RFC 4632. For IPv6 addresses, the ranges are expressed in similar encoding as IPv4 addresses.

func (GetAuthorityConfigX509ConfigNameConstraintOutput) PermittedUris

Contains the permitted URIs that apply to the host part of the name. The value can be a hostname or a domain with a leading period (like '.example.com')

func (GetAuthorityConfigX509ConfigNameConstraintOutput) ToGetAuthorityConfigX509ConfigNameConstraintOutput

func (o GetAuthorityConfigX509ConfigNameConstraintOutput) ToGetAuthorityConfigX509ConfigNameConstraintOutput() GetAuthorityConfigX509ConfigNameConstraintOutput

func (GetAuthorityConfigX509ConfigNameConstraintOutput) ToGetAuthorityConfigX509ConfigNameConstraintOutputWithContext

func (o GetAuthorityConfigX509ConfigNameConstraintOutput) ToGetAuthorityConfigX509ConfigNameConstraintOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigNameConstraintOutput

type GetAuthorityConfigX509ConfigOutput

type GetAuthorityConfigX509ConfigOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigOutput) AdditionalExtensions

Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.

func (GetAuthorityConfigX509ConfigOutput) AiaOcspServers

Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.

func (GetAuthorityConfigX509ConfigOutput) CaOptions

Describes values that are relevant in a CA certificate.

func (GetAuthorityConfigX509ConfigOutput) ElementType

func (GetAuthorityConfigX509ConfigOutput) KeyUsages

Indicates the intended use for keys that correspond to a certificate.

func (GetAuthorityConfigX509ConfigOutput) NameConstraints

Describes the X.509 name constraints extension.

func (GetAuthorityConfigX509ConfigOutput) PolicyIds

Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.

func (GetAuthorityConfigX509ConfigOutput) ToGetAuthorityConfigX509ConfigOutput

func (o GetAuthorityConfigX509ConfigOutput) ToGetAuthorityConfigX509ConfigOutput() GetAuthorityConfigX509ConfigOutput

func (GetAuthorityConfigX509ConfigOutput) ToGetAuthorityConfigX509ConfigOutputWithContext

func (o GetAuthorityConfigX509ConfigOutput) ToGetAuthorityConfigX509ConfigOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigOutput

type GetAuthorityConfigX509ConfigPolicyId

type GetAuthorityConfigX509ConfigPolicyId struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths []int `pulumi:"objectIdPaths"`
}

type GetAuthorityConfigX509ConfigPolicyIdArgs

type GetAuthorityConfigX509ConfigPolicyIdArgs struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIdPaths pulumi.IntArrayInput `pulumi:"objectIdPaths"`
}

func (GetAuthorityConfigX509ConfigPolicyIdArgs) ElementType

func (GetAuthorityConfigX509ConfigPolicyIdArgs) ToGetAuthorityConfigX509ConfigPolicyIdOutput

func (i GetAuthorityConfigX509ConfigPolicyIdArgs) ToGetAuthorityConfigX509ConfigPolicyIdOutput() GetAuthorityConfigX509ConfigPolicyIdOutput

func (GetAuthorityConfigX509ConfigPolicyIdArgs) ToGetAuthorityConfigX509ConfigPolicyIdOutputWithContext

func (i GetAuthorityConfigX509ConfigPolicyIdArgs) ToGetAuthorityConfigX509ConfigPolicyIdOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigPolicyIdOutput

type GetAuthorityConfigX509ConfigPolicyIdArray

type GetAuthorityConfigX509ConfigPolicyIdArray []GetAuthorityConfigX509ConfigPolicyIdInput

func (GetAuthorityConfigX509ConfigPolicyIdArray) ElementType

func (GetAuthorityConfigX509ConfigPolicyIdArray) ToGetAuthorityConfigX509ConfigPolicyIdArrayOutput

func (i GetAuthorityConfigX509ConfigPolicyIdArray) ToGetAuthorityConfigX509ConfigPolicyIdArrayOutput() GetAuthorityConfigX509ConfigPolicyIdArrayOutput

func (GetAuthorityConfigX509ConfigPolicyIdArray) ToGetAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext

func (i GetAuthorityConfigX509ConfigPolicyIdArray) ToGetAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigPolicyIdArrayOutput

type GetAuthorityConfigX509ConfigPolicyIdArrayInput

type GetAuthorityConfigX509ConfigPolicyIdArrayInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigPolicyIdArrayOutput() GetAuthorityConfigX509ConfigPolicyIdArrayOutput
	ToGetAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext(context.Context) GetAuthorityConfigX509ConfigPolicyIdArrayOutput
}

GetAuthorityConfigX509ConfigPolicyIdArrayInput is an input type that accepts GetAuthorityConfigX509ConfigPolicyIdArray and GetAuthorityConfigX509ConfigPolicyIdArrayOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigPolicyIdArrayInput` via:

GetAuthorityConfigX509ConfigPolicyIdArray{ GetAuthorityConfigX509ConfigPolicyIdArgs{...} }

type GetAuthorityConfigX509ConfigPolicyIdArrayOutput

type GetAuthorityConfigX509ConfigPolicyIdArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigPolicyIdArrayOutput) ElementType

func (GetAuthorityConfigX509ConfigPolicyIdArrayOutput) Index

func (GetAuthorityConfigX509ConfigPolicyIdArrayOutput) ToGetAuthorityConfigX509ConfigPolicyIdArrayOutput

func (o GetAuthorityConfigX509ConfigPolicyIdArrayOutput) ToGetAuthorityConfigX509ConfigPolicyIdArrayOutput() GetAuthorityConfigX509ConfigPolicyIdArrayOutput

func (GetAuthorityConfigX509ConfigPolicyIdArrayOutput) ToGetAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext

func (o GetAuthorityConfigX509ConfigPolicyIdArrayOutput) ToGetAuthorityConfigX509ConfigPolicyIdArrayOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigPolicyIdArrayOutput

type GetAuthorityConfigX509ConfigPolicyIdInput

type GetAuthorityConfigX509ConfigPolicyIdInput interface {
	pulumi.Input

	ToGetAuthorityConfigX509ConfigPolicyIdOutput() GetAuthorityConfigX509ConfigPolicyIdOutput
	ToGetAuthorityConfigX509ConfigPolicyIdOutputWithContext(context.Context) GetAuthorityConfigX509ConfigPolicyIdOutput
}

GetAuthorityConfigX509ConfigPolicyIdInput is an input type that accepts GetAuthorityConfigX509ConfigPolicyIdArgs and GetAuthorityConfigX509ConfigPolicyIdOutput values. You can construct a concrete instance of `GetAuthorityConfigX509ConfigPolicyIdInput` via:

GetAuthorityConfigX509ConfigPolicyIdArgs{...}

type GetAuthorityConfigX509ConfigPolicyIdOutput

type GetAuthorityConfigX509ConfigPolicyIdOutput struct{ *pulumi.OutputState }

func (GetAuthorityConfigX509ConfigPolicyIdOutput) ElementType

func (GetAuthorityConfigX509ConfigPolicyIdOutput) ObjectIdPaths

An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.

func (GetAuthorityConfigX509ConfigPolicyIdOutput) ToGetAuthorityConfigX509ConfigPolicyIdOutput

func (o GetAuthorityConfigX509ConfigPolicyIdOutput) ToGetAuthorityConfigX509ConfigPolicyIdOutput() GetAuthorityConfigX509ConfigPolicyIdOutput

func (GetAuthorityConfigX509ConfigPolicyIdOutput) ToGetAuthorityConfigX509ConfigPolicyIdOutputWithContext

func (o GetAuthorityConfigX509ConfigPolicyIdOutput) ToGetAuthorityConfigX509ConfigPolicyIdOutputWithContext(ctx context.Context) GetAuthorityConfigX509ConfigPolicyIdOutput

type GetAuthorityKeySpec

type GetAuthorityKeySpec struct {
	// The algorithm to use for creating a managed Cloud KMS key for a for a simplified
	// experience. All managed keys will be have their ProtectionLevel as HSM. Possible values: ["SIGN_HASH_ALGORITHM_UNSPECIFIED", "RSA_PSS_2048_SHA256", "RSA_PSS_3072_SHA256", "RSA_PSS_4096_SHA256", "RSA_PKCS1_2048_SHA256", "RSA_PKCS1_3072_SHA256", "RSA_PKCS1_4096_SHA256", "EC_P256_SHA256", "EC_P384_SHA384"]
	Algorithm string `pulumi:"algorithm"`
	// The resource name for an existing Cloud KMS CryptoKeyVersion in the format
	// 'projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*'.
	CloudKmsKeyVersion string `pulumi:"cloudKmsKeyVersion"`
}

type GetAuthorityKeySpecArgs

type GetAuthorityKeySpecArgs struct {
	// The algorithm to use for creating a managed Cloud KMS key for a for a simplified
	// experience. All managed keys will be have their ProtectionLevel as HSM. Possible values: ["SIGN_HASH_ALGORITHM_UNSPECIFIED", "RSA_PSS_2048_SHA256", "RSA_PSS_3072_SHA256", "RSA_PSS_4096_SHA256", "RSA_PKCS1_2048_SHA256", "RSA_PKCS1_3072_SHA256", "RSA_PKCS1_4096_SHA256", "EC_P256_SHA256", "EC_P384_SHA384"]
	Algorithm pulumi.StringInput `pulumi:"algorithm"`
	// The resource name for an existing Cloud KMS CryptoKeyVersion in the format
	// 'projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*'.
	CloudKmsKeyVersion pulumi.StringInput `pulumi:"cloudKmsKeyVersion"`
}

func (GetAuthorityKeySpecArgs) ElementType

func (GetAuthorityKeySpecArgs) ElementType() reflect.Type

func (GetAuthorityKeySpecArgs) ToGetAuthorityKeySpecOutput

func (i GetAuthorityKeySpecArgs) ToGetAuthorityKeySpecOutput() GetAuthorityKeySpecOutput

func (GetAuthorityKeySpecArgs) ToGetAuthorityKeySpecOutputWithContext

func (i GetAuthorityKeySpecArgs) ToGetAuthorityKeySpecOutputWithContext(ctx context.Context) GetAuthorityKeySpecOutput

type GetAuthorityKeySpecArray

type GetAuthorityKeySpecArray []GetAuthorityKeySpecInput

func (GetAuthorityKeySpecArray) ElementType

func (GetAuthorityKeySpecArray) ElementType() reflect.Type

func (GetAuthorityKeySpecArray) ToGetAuthorityKeySpecArrayOutput

func (i GetAuthorityKeySpecArray) ToGetAuthorityKeySpecArrayOutput() GetAuthorityKeySpecArrayOutput

func (GetAuthorityKeySpecArray) ToGetAuthorityKeySpecArrayOutputWithContext

func (i GetAuthorityKeySpecArray) ToGetAuthorityKeySpecArrayOutputWithContext(ctx context.Context) GetAuthorityKeySpecArrayOutput

type GetAuthorityKeySpecArrayInput

type GetAuthorityKeySpecArrayInput interface {
	pulumi.Input

	ToGetAuthorityKeySpecArrayOutput() GetAuthorityKeySpecArrayOutput
	ToGetAuthorityKeySpecArrayOutputWithContext(context.Context) GetAuthorityKeySpecArrayOutput
}

GetAuthorityKeySpecArrayInput is an input type that accepts GetAuthorityKeySpecArray and GetAuthorityKeySpecArrayOutput values. You can construct a concrete instance of `GetAuthorityKeySpecArrayInput` via:

GetAuthorityKeySpecArray{ GetAuthorityKeySpecArgs{...} }

type GetAuthorityKeySpecArrayOutput

type GetAuthorityKeySpecArrayOutput struct{ *pulumi.OutputState }

func (GetAuthorityKeySpecArrayOutput) ElementType

func (GetAuthorityKeySpecArrayOutput) Index

func (GetAuthorityKeySpecArrayOutput) ToGetAuthorityKeySpecArrayOutput

func (o GetAuthorityKeySpecArrayOutput) ToGetAuthorityKeySpecArrayOutput() GetAuthorityKeySpecArrayOutput

func (GetAuthorityKeySpecArrayOutput) ToGetAuthorityKeySpecArrayOutputWithContext

func (o GetAuthorityKeySpecArrayOutput) ToGetAuthorityKeySpecArrayOutputWithContext(ctx context.Context) GetAuthorityKeySpecArrayOutput

type GetAuthorityKeySpecInput

type GetAuthorityKeySpecInput interface {
	pulumi.Input

	ToGetAuthorityKeySpecOutput() GetAuthorityKeySpecOutput
	ToGetAuthorityKeySpecOutputWithContext(context.Context) GetAuthorityKeySpecOutput
}

GetAuthorityKeySpecInput is an input type that accepts GetAuthorityKeySpecArgs and GetAuthorityKeySpecOutput values. You can construct a concrete instance of `GetAuthorityKeySpecInput` via:

GetAuthorityKeySpecArgs{...}

type GetAuthorityKeySpecOutput

type GetAuthorityKeySpecOutput struct{ *pulumi.OutputState }

func (GetAuthorityKeySpecOutput) Algorithm

The algorithm to use for creating a managed Cloud KMS key for a for a simplified experience. All managed keys will be have their ProtectionLevel as HSM. Possible values: ["SIGN_HASH_ALGORITHM_UNSPECIFIED", "RSA_PSS_2048_SHA256", "RSA_PSS_3072_SHA256", "RSA_PSS_4096_SHA256", "RSA_PKCS1_2048_SHA256", "RSA_PKCS1_3072_SHA256", "RSA_PKCS1_4096_SHA256", "EC_P256_SHA256", "EC_P384_SHA384"]

func (GetAuthorityKeySpecOutput) CloudKmsKeyVersion

func (o GetAuthorityKeySpecOutput) CloudKmsKeyVersion() pulumi.StringOutput

The resource name for an existing Cloud KMS CryptoKeyVersion in the format 'projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*'.

func (GetAuthorityKeySpecOutput) ElementType

func (GetAuthorityKeySpecOutput) ElementType() reflect.Type

func (GetAuthorityKeySpecOutput) ToGetAuthorityKeySpecOutput

func (o GetAuthorityKeySpecOutput) ToGetAuthorityKeySpecOutput() GetAuthorityKeySpecOutput

func (GetAuthorityKeySpecOutput) ToGetAuthorityKeySpecOutputWithContext

func (o GetAuthorityKeySpecOutput) ToGetAuthorityKeySpecOutputWithContext(ctx context.Context) GetAuthorityKeySpecOutput

type GetAuthoritySubordinateConfig

type GetAuthoritySubordinateConfig struct {
	// This can refer to a CertificateAuthority that was used to create a
	// subordinate CertificateAuthority. This field is used for information
	// and usability purposes only. The resource name is in the format
	// 'projects/*/locations/*/caPools/*/certificateAuthorities/*'.
	CertificateAuthority string `pulumi:"certificateAuthority"`
	// Contains the PEM certificate chain for the issuers of this CertificateAuthority,
	// but not pem certificate for this CA itself.
	PemIssuerChains []GetAuthoritySubordinateConfigPemIssuerChain `pulumi:"pemIssuerChains"`
}

type GetAuthoritySubordinateConfigArgs

type GetAuthoritySubordinateConfigArgs struct {
	// This can refer to a CertificateAuthority that was used to create a
	// subordinate CertificateAuthority. This field is used for information
	// and usability purposes only. The resource name is in the format
	// 'projects/*/locations/*/caPools/*/certificateAuthorities/*'.
	CertificateAuthority pulumi.StringInput `pulumi:"certificateAuthority"`
	// Contains the PEM certificate chain for the issuers of this CertificateAuthority,
	// but not pem certificate for this CA itself.
	PemIssuerChains GetAuthoritySubordinateConfigPemIssuerChainArrayInput `pulumi:"pemIssuerChains"`
}

func (GetAuthoritySubordinateConfigArgs) ElementType

func (GetAuthoritySubordinateConfigArgs) ToGetAuthoritySubordinateConfigOutput

func (i GetAuthoritySubordinateConfigArgs) ToGetAuthoritySubordinateConfigOutput() GetAuthoritySubordinateConfigOutput

func (GetAuthoritySubordinateConfigArgs) ToGetAuthoritySubordinateConfigOutputWithContext

func (i GetAuthoritySubordinateConfigArgs) ToGetAuthoritySubordinateConfigOutputWithContext(ctx context.Context) GetAuthoritySubordinateConfigOutput

type GetAuthoritySubordinateConfigArray

type GetAuthoritySubordinateConfigArray []GetAuthoritySubordinateConfigInput

func (GetAuthoritySubordinateConfigArray) ElementType

func (GetAuthoritySubordinateConfigArray) ToGetAuthoritySubordinateConfigArrayOutput

func (i GetAuthoritySubordinateConfigArray) ToGetAuthoritySubordinateConfigArrayOutput() GetAuthoritySubordinateConfigArrayOutput

func (GetAuthoritySubordinateConfigArray) ToGetAuthoritySubordinateConfigArrayOutputWithContext

func (i GetAuthoritySubordinateConfigArray) ToGetAuthoritySubordinateConfigArrayOutputWithContext(ctx context.Context) GetAuthoritySubordinateConfigArrayOutput

type GetAuthoritySubordinateConfigArrayInput

type GetAuthoritySubordinateConfigArrayInput interface {
	pulumi.Input

	ToGetAuthoritySubordinateConfigArrayOutput() GetAuthoritySubordinateConfigArrayOutput
	ToGetAuthoritySubordinateConfigArrayOutputWithContext(context.Context) GetAuthoritySubordinateConfigArrayOutput
}

GetAuthoritySubordinateConfigArrayInput is an input type that accepts GetAuthoritySubordinateConfigArray and GetAuthoritySubordinateConfigArrayOutput values. You can construct a concrete instance of `GetAuthoritySubordinateConfigArrayInput` via:

GetAuthoritySubordinateConfigArray{ GetAuthoritySubordinateConfigArgs{...} }

type GetAuthoritySubordinateConfigArrayOutput

type GetAuthoritySubordinateConfigArrayOutput struct{ *pulumi.OutputState }

func (GetAuthoritySubordinateConfigArrayOutput) ElementType

func (GetAuthoritySubordinateConfigArrayOutput) Index

func (GetAuthoritySubordinateConfigArrayOutput) ToGetAuthoritySubordinateConfigArrayOutput

func (o GetAuthoritySubordinateConfigArrayOutput) ToGetAuthoritySubordinateConfigArrayOutput() GetAuthoritySubordinateConfigArrayOutput

func (GetAuthoritySubordinateConfigArrayOutput) ToGetAuthoritySubordinateConfigArrayOutputWithContext

func (o GetAuthoritySubordinateConfigArrayOutput) ToGetAuthoritySubordinateConfigArrayOutputWithContext(ctx context.Context) GetAuthoritySubordinateConfigArrayOutput

type GetAuthoritySubordinateConfigInput

type GetAuthoritySubordinateConfigInput interface {
	pulumi.Input

	ToGetAuthoritySubordinateConfigOutput() GetAuthoritySubordinateConfigOutput
	ToGetAuthoritySubordinateConfigOutputWithContext(context.Context) GetAuthoritySubordinateConfigOutput
}

GetAuthoritySubordinateConfigInput is an input type that accepts GetAuthoritySubordinateConfigArgs and GetAuthoritySubordinateConfigOutput values. You can construct a concrete instance of `GetAuthoritySubordinateConfigInput` via:

GetAuthoritySubordinateConfigArgs{...}

type GetAuthoritySubordinateConfigOutput

type GetAuthoritySubordinateConfigOutput struct{ *pulumi.OutputState }

func (GetAuthoritySubordinateConfigOutput) CertificateAuthority

func (o GetAuthoritySubordinateConfigOutput) CertificateAuthority() pulumi.StringOutput

This can refer to a CertificateAuthority that was used to create a subordinate CertificateAuthority. This field is used for information and usability purposes only. The resource name is in the format 'projects/*/locations/*/caPools/*/certificateAuthorities/*'.

func (GetAuthoritySubordinateConfigOutput) ElementType

func (GetAuthoritySubordinateConfigOutput) PemIssuerChains

Contains the PEM certificate chain for the issuers of this CertificateAuthority, but not pem certificate for this CA itself.

func (GetAuthoritySubordinateConfigOutput) ToGetAuthoritySubordinateConfigOutput

func (o GetAuthoritySubordinateConfigOutput) ToGetAuthoritySubordinateConfigOutput() GetAuthoritySubordinateConfigOutput

func (GetAuthoritySubordinateConfigOutput) ToGetAuthoritySubordinateConfigOutputWithContext

func (o GetAuthoritySubordinateConfigOutput) ToGetAuthoritySubordinateConfigOutputWithContext(ctx context.Context) GetAuthoritySubordinateConfigOutput

type GetAuthoritySubordinateConfigPemIssuerChain

type GetAuthoritySubordinateConfigPemIssuerChain struct {
	// Expected to be in leaf-to-root order according to RFC 5246.
	PemCertificates []string `pulumi:"pemCertificates"`
}

type GetAuthoritySubordinateConfigPemIssuerChainArgs

type GetAuthoritySubordinateConfigPemIssuerChainArgs struct {
	// Expected to be in leaf-to-root order according to RFC 5246.
	PemCertificates pulumi.StringArrayInput `pulumi:"pemCertificates"`
}

func (GetAuthoritySubordinateConfigPemIssuerChainArgs) ElementType

func (GetAuthoritySubordinateConfigPemIssuerChainArgs) ToGetAuthoritySubordinateConfigPemIssuerChainOutput

func (i GetAuthoritySubordinateConfigPemIssuerChainArgs) ToGetAuthoritySubordinateConfigPemIssuerChainOutput() GetAuthoritySubordinateConfigPemIssuerChainOutput

func (GetAuthoritySubordinateConfigPemIssuerChainArgs) ToGetAuthoritySubordinateConfigPemIssuerChainOutputWithContext

func (i GetAuthoritySubordinateConfigPemIssuerChainArgs) ToGetAuthoritySubordinateConfigPemIssuerChainOutputWithContext(ctx context.Context) GetAuthoritySubordinateConfigPemIssuerChainOutput

type GetAuthoritySubordinateConfigPemIssuerChainArray

type GetAuthoritySubordinateConfigPemIssuerChainArray []GetAuthoritySubordinateConfigPemIssuerChainInput

func (GetAuthoritySubordinateConfigPemIssuerChainArray) ElementType

func (GetAuthoritySubordinateConfigPemIssuerChainArray) ToGetAuthoritySubordinateConfigPemIssuerChainArrayOutput

func (i GetAuthoritySubordinateConfigPemIssuerChainArray) ToGetAuthoritySubordinateConfigPemIssuerChainArrayOutput() GetAuthoritySubordinateConfigPemIssuerChainArrayOutput

func (GetAuthoritySubordinateConfigPemIssuerChainArray) ToGetAuthoritySubordinateConfigPemIssuerChainArrayOutputWithContext

func (i GetAuthoritySubordinateConfigPemIssuerChainArray) ToGetAuthoritySubordinateConfigPemIssuerChainArrayOutputWithContext(ctx context.Context) GetAuthoritySubordinateConfigPemIssuerChainArrayOutput

type GetAuthoritySubordinateConfigPemIssuerChainArrayInput

type GetAuthoritySubordinateConfigPemIssuerChainArrayInput interface {
	pulumi.Input

	ToGetAuthoritySubordinateConfigPemIssuerChainArrayOutput() GetAuthoritySubordinateConfigPemIssuerChainArrayOutput
	ToGetAuthoritySubordinateConfigPemIssuerChainArrayOutputWithContext(context.Context) GetAuthoritySubordinateConfigPemIssuerChainArrayOutput
}

GetAuthoritySubordinateConfigPemIssuerChainArrayInput is an input type that accepts GetAuthoritySubordinateConfigPemIssuerChainArray and GetAuthoritySubordinateConfigPemIssuerChainArrayOutput values. You can construct a concrete instance of `GetAuthoritySubordinateConfigPemIssuerChainArrayInput` via:

GetAuthoritySubordinateConfigPemIssuerChainArray{ GetAuthoritySubordinateConfigPemIssuerChainArgs{...} }

type GetAuthoritySubordinateConfigPemIssuerChainArrayOutput

type GetAuthoritySubordinateConfigPemIssuerChainArrayOutput struct{ *pulumi.OutputState }

func (GetAuthoritySubordinateConfigPemIssuerChainArrayOutput) ElementType

func (GetAuthoritySubordinateConfigPemIssuerChainArrayOutput) Index

func (GetAuthoritySubordinateConfigPemIssuerChainArrayOutput) ToGetAuthoritySubordinateConfigPemIssuerChainArrayOutput

func (GetAuthoritySubordinateConfigPemIssuerChainArrayOutput) ToGetAuthoritySubordinateConfigPemIssuerChainArrayOutputWithContext

func (o GetAuthoritySubordinateConfigPemIssuerChainArrayOutput) ToGetAuthoritySubordinateConfigPemIssuerChainArrayOutputWithContext(ctx context.Context) GetAuthoritySubordinateConfigPemIssuerChainArrayOutput

type GetAuthoritySubordinateConfigPemIssuerChainInput

type GetAuthoritySubordinateConfigPemIssuerChainInput interface {
	pulumi.Input

	ToGetAuthoritySubordinateConfigPemIssuerChainOutput() GetAuthoritySubordinateConfigPemIssuerChainOutput
	ToGetAuthoritySubordinateConfigPemIssuerChainOutputWithContext(context.Context) GetAuthoritySubordinateConfigPemIssuerChainOutput
}

GetAuthoritySubordinateConfigPemIssuerChainInput is an input type that accepts GetAuthoritySubordinateConfigPemIssuerChainArgs and GetAuthoritySubordinateConfigPemIssuerChainOutput values. You can construct a concrete instance of `GetAuthoritySubordinateConfigPemIssuerChainInput` via:

GetAuthoritySubordinateConfigPemIssuerChainArgs{...}

type GetAuthoritySubordinateConfigPemIssuerChainOutput

type GetAuthoritySubordinateConfigPemIssuerChainOutput struct{ *pulumi.OutputState }

func (GetAuthoritySubordinateConfigPemIssuerChainOutput) ElementType

func (GetAuthoritySubordinateConfigPemIssuerChainOutput) PemCertificates

Expected to be in leaf-to-root order according to RFC 5246.

func (GetAuthoritySubordinateConfigPemIssuerChainOutput) ToGetAuthoritySubordinateConfigPemIssuerChainOutput

func (o GetAuthoritySubordinateConfigPemIssuerChainOutput) ToGetAuthoritySubordinateConfigPemIssuerChainOutput() GetAuthoritySubordinateConfigPemIssuerChainOutput

func (GetAuthoritySubordinateConfigPemIssuerChainOutput) ToGetAuthoritySubordinateConfigPemIssuerChainOutputWithContext

func (o GetAuthoritySubordinateConfigPemIssuerChainOutput) ToGetAuthoritySubordinateConfigPemIssuerChainOutputWithContext(ctx context.Context) GetAuthoritySubordinateConfigPemIssuerChainOutput

type LookupAuthorityArgs

type LookupAuthorityArgs struct {
	// ID of the certificate authority.
	//
	// ***
	CertificateAuthorityId *string `pulumi:"certificateAuthorityId"`
	// The location the certificate authority exists in.
	Location *string `pulumi:"location"`
	// The name of the pool the certificate authority belongs to.
	Pool *string `pulumi:"pool"`
	// The ID of the project in which the resource belongs. If it
	// is not provided, the provider project is used.
	Project *string `pulumi:"project"`
}

A collection of arguments for invoking getAuthority.

type LookupAuthorityOutputArgs

type LookupAuthorityOutputArgs struct {
	// ID of the certificate authority.
	//
	// ***
	CertificateAuthorityId pulumi.StringPtrInput `pulumi:"certificateAuthorityId"`
	// The location the certificate authority exists in.
	Location pulumi.StringPtrInput `pulumi:"location"`
	// The name of the pool the certificate authority belongs to.
	Pool pulumi.StringPtrInput `pulumi:"pool"`
	// The ID of the project in which the resource belongs. If it
	// is not provided, the provider project is used.
	Project pulumi.StringPtrInput `pulumi:"project"`
}

A collection of arguments for invoking getAuthority.

func (LookupAuthorityOutputArgs) ElementType

func (LookupAuthorityOutputArgs) ElementType() reflect.Type

type LookupAuthorityResult

type LookupAuthorityResult struct {
	AccessUrls             []GetAuthorityAccessUrl `pulumi:"accessUrls"`
	CertificateAuthorityId *string                 `pulumi:"certificateAuthorityId"`
	Configs                []GetAuthorityConfig    `pulumi:"configs"`
	CreateTime             string                  `pulumi:"createTime"`
	DeletionProtection     bool                    `pulumi:"deletionProtection"`
	DesiredState           string                  `pulumi:"desiredState"`
	EffectiveLabels        map[string]string       `pulumi:"effectiveLabels"`
	GcsBucket              string                  `pulumi:"gcsBucket"`
	// The provider-assigned unique ID for this managed resource.
	Id                                 string                `pulumi:"id"`
	IgnoreActiveCertificatesOnDeletion bool                  `pulumi:"ignoreActiveCertificatesOnDeletion"`
	KeySpecs                           []GetAuthorityKeySpec `pulumi:"keySpecs"`
	Labels                             map[string]string     `pulumi:"labels"`
	Lifetime                           string                `pulumi:"lifetime"`
	Location                           *string               `pulumi:"location"`
	Name                               string                `pulumi:"name"`
	PemCaCertificate                   string                `pulumi:"pemCaCertificate"`
	PemCaCertificates                  []string              `pulumi:"pemCaCertificates"`
	// The PEM-encoded signed certificate signing request (CSR). This is only set on subordinate certificate authorities that are awaiting user activation.
	PemCsr             string                          `pulumi:"pemCsr"`
	Pool               *string                         `pulumi:"pool"`
	Project            *string                         `pulumi:"project"`
	PulumiLabels       map[string]string               `pulumi:"pulumiLabels"`
	SkipGracePeriod    bool                            `pulumi:"skipGracePeriod"`
	State              string                          `pulumi:"state"`
	SubordinateConfigs []GetAuthoritySubordinateConfig `pulumi:"subordinateConfigs"`
	Type               string                          `pulumi:"type"`
	UpdateTime         string                          `pulumi:"updateTime"`
}

A collection of values returned by getAuthority.

func LookupAuthority

func LookupAuthority(ctx *pulumi.Context, args *LookupAuthorityArgs, opts ...pulumi.InvokeOption) (*LookupAuthorityResult, error)

Get info about a Google CAS Certificate Authority.

## Example Usage

type LookupAuthorityResultOutput

type LookupAuthorityResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getAuthority.

func (LookupAuthorityResultOutput) AccessUrls

func (LookupAuthorityResultOutput) CertificateAuthorityId

func (o LookupAuthorityResultOutput) CertificateAuthorityId() pulumi.StringPtrOutput

func (LookupAuthorityResultOutput) Configs

func (LookupAuthorityResultOutput) CreateTime

func (LookupAuthorityResultOutput) DeletionProtection

func (o LookupAuthorityResultOutput) DeletionProtection() pulumi.BoolOutput

func (LookupAuthorityResultOutput) DesiredState

func (LookupAuthorityResultOutput) EffectiveLabels

func (LookupAuthorityResultOutput) ElementType

func (LookupAuthorityResultOutput) GcsBucket

func (LookupAuthorityResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupAuthorityResultOutput) IgnoreActiveCertificatesOnDeletion

func (o LookupAuthorityResultOutput) IgnoreActiveCertificatesOnDeletion() pulumi.BoolOutput

func (LookupAuthorityResultOutput) KeySpecs

func (LookupAuthorityResultOutput) Labels

func (LookupAuthorityResultOutput) Lifetime

func (LookupAuthorityResultOutput) Location

func (LookupAuthorityResultOutput) Name

func (LookupAuthorityResultOutput) PemCaCertificate

func (o LookupAuthorityResultOutput) PemCaCertificate() pulumi.StringOutput

func (LookupAuthorityResultOutput) PemCaCertificates

func (LookupAuthorityResultOutput) PemCsr

The PEM-encoded signed certificate signing request (CSR). This is only set on subordinate certificate authorities that are awaiting user activation.

func (LookupAuthorityResultOutput) Pool

func (LookupAuthorityResultOutput) Project

func (LookupAuthorityResultOutput) PulumiLabels

func (LookupAuthorityResultOutput) SkipGracePeriod

func (o LookupAuthorityResultOutput) SkipGracePeriod() pulumi.BoolOutput

func (LookupAuthorityResultOutput) State

func (LookupAuthorityResultOutput) SubordinateConfigs

func (LookupAuthorityResultOutput) ToLookupAuthorityResultOutput

func (o LookupAuthorityResultOutput) ToLookupAuthorityResultOutput() LookupAuthorityResultOutput

func (LookupAuthorityResultOutput) ToLookupAuthorityResultOutputWithContext

func (o LookupAuthorityResultOutput) ToLookupAuthorityResultOutputWithContext(ctx context.Context) LookupAuthorityResultOutput

func (LookupAuthorityResultOutput) Type

func (LookupAuthorityResultOutput) UpdateTime

type LookupCaPoolIamPolicyArgs

type LookupCaPoolIamPolicyArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CaPool string `pulumi:"caPool"`
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location *string `pulumi:"location"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project *string `pulumi:"project"`
}

A collection of arguments for invoking getCaPoolIamPolicy.

type LookupCaPoolIamPolicyOutputArgs

type LookupCaPoolIamPolicyOutputArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CaPool pulumi.StringInput `pulumi:"caPool"`
	// Location of the CaPool. A full list of valid locations can be found by
	// running `gcloud privateca locations list`.
	// Used to find the parent resource to bind the IAM policy to
	Location pulumi.StringPtrInput `pulumi:"location"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput `pulumi:"project"`
}

A collection of arguments for invoking getCaPoolIamPolicy.

func (LookupCaPoolIamPolicyOutputArgs) ElementType

type LookupCaPoolIamPolicyResult

type LookupCaPoolIamPolicyResult struct {
	CaPool string `pulumi:"caPool"`
	// (Computed) The etag of the IAM policy.
	Etag string `pulumi:"etag"`
	// The provider-assigned unique ID for this managed resource.
	Id       string `pulumi:"id"`
	Location string `pulumi:"location"`
	// (Required only by `certificateauthority.CaPoolIamPolicy`) The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData string `pulumi:"policyData"`
	Project    string `pulumi:"project"`
}

A collection of values returned by getCaPoolIamPolicy.

func LookupCaPoolIamPolicy

func LookupCaPoolIamPolicy(ctx *pulumi.Context, args *LookupCaPoolIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupCaPoolIamPolicyResult, error)

Retrieves the current IAM policy data for capool

## example

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.LookupCaPoolIamPolicy(ctx, &certificateauthority.LookupCaPoolIamPolicyArgs{
			CaPool: _default.Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupCaPoolIamPolicyResultOutput

type LookupCaPoolIamPolicyResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getCaPoolIamPolicy.

func (LookupCaPoolIamPolicyResultOutput) CaPool

func (LookupCaPoolIamPolicyResultOutput) ElementType

func (LookupCaPoolIamPolicyResultOutput) Etag

(Computed) The etag of the IAM policy.

func (LookupCaPoolIamPolicyResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupCaPoolIamPolicyResultOutput) Location

func (LookupCaPoolIamPolicyResultOutput) PolicyData

(Required only by `certificateauthority.CaPoolIamPolicy`) The policy data generated by a `organizations.getIAMPolicy` data source.

func (LookupCaPoolIamPolicyResultOutput) Project

func (LookupCaPoolIamPolicyResultOutput) ToLookupCaPoolIamPolicyResultOutput

func (o LookupCaPoolIamPolicyResultOutput) ToLookupCaPoolIamPolicyResultOutput() LookupCaPoolIamPolicyResultOutput

func (LookupCaPoolIamPolicyResultOutput) ToLookupCaPoolIamPolicyResultOutputWithContext

func (o LookupCaPoolIamPolicyResultOutput) ToLookupCaPoolIamPolicyResultOutputWithContext(ctx context.Context) LookupCaPoolIamPolicyResultOutput

type LookupCertificateTemplateIamPolicyArgs

type LookupCertificateTemplateIamPolicyArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate string  `pulumi:"certificateTemplate"`
	Location            *string `pulumi:"location"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project *string `pulumi:"project"`
}

A collection of arguments for invoking getCertificateTemplateIamPolicy.

type LookupCertificateTemplateIamPolicyOutputArgs

type LookupCertificateTemplateIamPolicyOutputArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	CertificateTemplate pulumi.StringInput    `pulumi:"certificateTemplate"`
	Location            pulumi.StringPtrInput `pulumi:"location"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
	Project pulumi.StringPtrInput `pulumi:"project"`
}

A collection of arguments for invoking getCertificateTemplateIamPolicy.

func (LookupCertificateTemplateIamPolicyOutputArgs) ElementType

type LookupCertificateTemplateIamPolicyResult

type LookupCertificateTemplateIamPolicyResult struct {
	CertificateTemplate string `pulumi:"certificateTemplate"`
	// (Computed) The etag of the IAM policy.
	Etag string `pulumi:"etag"`
	// The provider-assigned unique ID for this managed resource.
	Id       string `pulumi:"id"`
	Location string `pulumi:"location"`
	// (Required only by `certificateauthority.CertificateTemplateIamPolicy`) The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData string `pulumi:"policyData"`
	Project    string `pulumi:"project"`
}

A collection of values returned by getCertificateTemplateIamPolicy.

func LookupCertificateTemplateIamPolicy

Retrieves the current IAM policy data for certificatetemplate

## example

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/certificateauthority"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificateauthority.LookupCertificateTemplateIamPolicy(ctx, &certificateauthority.LookupCertificateTemplateIamPolicyArgs{
			CertificateTemplate: _default.Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupCertificateTemplateIamPolicyResultOutput

type LookupCertificateTemplateIamPolicyResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getCertificateTemplateIamPolicy.

func (LookupCertificateTemplateIamPolicyResultOutput) CertificateTemplate

func (LookupCertificateTemplateIamPolicyResultOutput) ElementType

func (LookupCertificateTemplateIamPolicyResultOutput) Etag

(Computed) The etag of the IAM policy.

func (LookupCertificateTemplateIamPolicyResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupCertificateTemplateIamPolicyResultOutput) Location

func (LookupCertificateTemplateIamPolicyResultOutput) PolicyData

(Required only by `certificateauthority.CertificateTemplateIamPolicy`) The policy data generated by a `organizations.getIAMPolicy` data source.

func (LookupCertificateTemplateIamPolicyResultOutput) Project

func (LookupCertificateTemplateIamPolicyResultOutput) ToLookupCertificateTemplateIamPolicyResultOutput

func (o LookupCertificateTemplateIamPolicyResultOutput) ToLookupCertificateTemplateIamPolicyResultOutput() LookupCertificateTemplateIamPolicyResultOutput

func (LookupCertificateTemplateIamPolicyResultOutput) ToLookupCertificateTemplateIamPolicyResultOutputWithContext

func (o LookupCertificateTemplateIamPolicyResultOutput) ToLookupCertificateTemplateIamPolicyResultOutputWithContext(ctx context.Context) LookupCertificateTemplateIamPolicyResultOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL