tls

package
v4.11.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 28, 2023 License: Apache-2.0 Imports: 8 Imported by: 18

Documentation

Overview

A Pulumi package to create TLS resources in Pulumi programs.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type CertRequest

type CertRequest struct {
	pulumi.CustomResourceState

	// The certificate request data in PEM (RFC 1421).
	CertRequestPem pulumi.StringOutput `pulumi:"certRequestPem"`
	// List of DNS names for which a certificate is being requested (i.e. certificate subjects).
	DnsNames pulumi.StringArrayOutput `pulumi:"dnsNames"`
	// List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
	IpAddresses pulumi.StringArrayOutput `pulumi:"ipAddresses"`
	// Name of the algorithm used when generating the private key provided in `privateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.
	//
	// Deprecated: This is now ignored, as the key algorithm is inferred from the `private_key_pem`.
	KeyAlgorithm pulumi.StringOutput `pulumi:"keyAlgorithm"`
	// Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong
	// to. This can be read from a separate file using the [`file`](https://www.terraform.io/language/functions/file)
	// interpolation function. Only an irreversible secure hash of the private key will be stored in the Terraform state.
	PrivateKeyPem pulumi.StringOutput `pulumi:"privateKeyPem"`
	// The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
	Subject CertRequestSubjectPtrOutput `pulumi:"subject"`
	// List of URIs for which a certificate is being requested (i.e. certificate subjects).
	Uris pulumi.StringArrayOutput `pulumi:"uris"`
}

## Example Usage

```go package main

import (

"os"

"github.com/pulumi/pulumi-tls/sdk/v4/go/tls"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func readFileOrPanic(path string) pulumi.StringPtrInput {
	data, err := os.ReadFile(path)
	if err != nil {
		panic(err.Error())
	}
	return pulumi.String(string(data))
}

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := tls.NewCertRequest(ctx, "example", &tls.CertRequestArgs{
			PrivateKeyPem: readFileOrPanic("private_key.pem"),
			Subject: &tls.CertRequestSubjectArgs{
				CommonName:   pulumi.String("example.com"),
				Organization: pulumi.String("ACME Examples, Inc"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

func GetCertRequest

func GetCertRequest(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertRequestState, opts ...pulumi.ResourceOption) (*CertRequest, error)

GetCertRequest gets an existing CertRequest resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertRequest

func NewCertRequest(ctx *pulumi.Context,
	name string, args *CertRequestArgs, opts ...pulumi.ResourceOption) (*CertRequest, error)

NewCertRequest registers a new resource with the given unique name, arguments, and options.

func (*CertRequest) ElementType

func (*CertRequest) ElementType() reflect.Type

func (*CertRequest) ToCertRequestOutput

func (i *CertRequest) ToCertRequestOutput() CertRequestOutput

func (*CertRequest) ToCertRequestOutputWithContext

func (i *CertRequest) ToCertRequestOutputWithContext(ctx context.Context) CertRequestOutput

func (*CertRequest) ToOutput added in v4.11.0

func (i *CertRequest) ToOutput(ctx context.Context) pulumix.Output[*CertRequest]

type CertRequestArgs

type CertRequestArgs struct {
	// List of DNS names for which a certificate is being requested (i.e. certificate subjects).
	DnsNames pulumi.StringArrayInput
	// List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
	IpAddresses pulumi.StringArrayInput
	// Name of the algorithm used when generating the private key provided in `privateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.
	//
	// Deprecated: This is now ignored, as the key algorithm is inferred from the `private_key_pem`.
	KeyAlgorithm pulumi.StringPtrInput
	// Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong
	// to. This can be read from a separate file using the [`file`](https://www.terraform.io/language/functions/file)
	// interpolation function. Only an irreversible secure hash of the private key will be stored in the Terraform state.
	PrivateKeyPem pulumi.StringInput
	// The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
	Subject CertRequestSubjectPtrInput
	// List of URIs for which a certificate is being requested (i.e. certificate subjects).
	Uris pulumi.StringArrayInput
}

The set of arguments for constructing a CertRequest resource.

func (CertRequestArgs) ElementType

func (CertRequestArgs) ElementType() reflect.Type

type CertRequestArray

type CertRequestArray []CertRequestInput

func (CertRequestArray) ElementType

func (CertRequestArray) ElementType() reflect.Type

func (CertRequestArray) ToCertRequestArrayOutput

func (i CertRequestArray) ToCertRequestArrayOutput() CertRequestArrayOutput

func (CertRequestArray) ToCertRequestArrayOutputWithContext

func (i CertRequestArray) ToCertRequestArrayOutputWithContext(ctx context.Context) CertRequestArrayOutput

func (CertRequestArray) ToOutput added in v4.11.0

type CertRequestArrayInput

type CertRequestArrayInput interface {
	pulumi.Input

	ToCertRequestArrayOutput() CertRequestArrayOutput
	ToCertRequestArrayOutputWithContext(context.Context) CertRequestArrayOutput
}

CertRequestArrayInput is an input type that accepts CertRequestArray and CertRequestArrayOutput values. You can construct a concrete instance of `CertRequestArrayInput` via:

CertRequestArray{ CertRequestArgs{...} }

type CertRequestArrayOutput

type CertRequestArrayOutput struct{ *pulumi.OutputState }

func (CertRequestArrayOutput) ElementType

func (CertRequestArrayOutput) ElementType() reflect.Type

func (CertRequestArrayOutput) Index

func (CertRequestArrayOutput) ToCertRequestArrayOutput

func (o CertRequestArrayOutput) ToCertRequestArrayOutput() CertRequestArrayOutput

func (CertRequestArrayOutput) ToCertRequestArrayOutputWithContext

func (o CertRequestArrayOutput) ToCertRequestArrayOutputWithContext(ctx context.Context) CertRequestArrayOutput

func (CertRequestArrayOutput) ToOutput added in v4.11.0

type CertRequestInput

type CertRequestInput interface {
	pulumi.Input

	ToCertRequestOutput() CertRequestOutput
	ToCertRequestOutputWithContext(ctx context.Context) CertRequestOutput
}

type CertRequestMap

type CertRequestMap map[string]CertRequestInput

func (CertRequestMap) ElementType

func (CertRequestMap) ElementType() reflect.Type

func (CertRequestMap) ToCertRequestMapOutput

func (i CertRequestMap) ToCertRequestMapOutput() CertRequestMapOutput

func (CertRequestMap) ToCertRequestMapOutputWithContext

func (i CertRequestMap) ToCertRequestMapOutputWithContext(ctx context.Context) CertRequestMapOutput

func (CertRequestMap) ToOutput added in v4.11.0

type CertRequestMapInput

type CertRequestMapInput interface {
	pulumi.Input

	ToCertRequestMapOutput() CertRequestMapOutput
	ToCertRequestMapOutputWithContext(context.Context) CertRequestMapOutput
}

CertRequestMapInput is an input type that accepts CertRequestMap and CertRequestMapOutput values. You can construct a concrete instance of `CertRequestMapInput` via:

CertRequestMap{ "key": CertRequestArgs{...} }

type CertRequestMapOutput

type CertRequestMapOutput struct{ *pulumi.OutputState }

func (CertRequestMapOutput) ElementType

func (CertRequestMapOutput) ElementType() reflect.Type

func (CertRequestMapOutput) MapIndex

func (CertRequestMapOutput) ToCertRequestMapOutput

func (o CertRequestMapOutput) ToCertRequestMapOutput() CertRequestMapOutput

func (CertRequestMapOutput) ToCertRequestMapOutputWithContext

func (o CertRequestMapOutput) ToCertRequestMapOutputWithContext(ctx context.Context) CertRequestMapOutput

func (CertRequestMapOutput) ToOutput added in v4.11.0

type CertRequestOutput

type CertRequestOutput struct{ *pulumi.OutputState }

func (CertRequestOutput) CertRequestPem added in v4.4.0

func (o CertRequestOutput) CertRequestPem() pulumi.StringOutput

The certificate request data in PEM (RFC 1421).

func (CertRequestOutput) DnsNames added in v4.4.0

List of DNS names for which a certificate is being requested (i.e. certificate subjects).

func (CertRequestOutput) ElementType

func (CertRequestOutput) ElementType() reflect.Type

func (CertRequestOutput) IpAddresses added in v4.4.0

func (o CertRequestOutput) IpAddresses() pulumi.StringArrayOutput

List of IP addresses for which a certificate is being requested (i.e. certificate subjects).

func (CertRequestOutput) KeyAlgorithm deprecated added in v4.4.0

func (o CertRequestOutput) KeyAlgorithm() pulumi.StringOutput

Name of the algorithm used when generating the private key provided in `privateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.

Deprecated: This is now ignored, as the key algorithm is inferred from the `private_key_pem`.

func (CertRequestOutput) PrivateKeyPem added in v4.4.0

func (o CertRequestOutput) PrivateKeyPem() pulumi.StringOutput

Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the [`file`](https://www.terraform.io/language/functions/file) interpolation function. Only an irreversible secure hash of the private key will be stored in the Terraform state.

func (CertRequestOutput) Subject added in v4.5.0

The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.

func (CertRequestOutput) ToCertRequestOutput

func (o CertRequestOutput) ToCertRequestOutput() CertRequestOutput

func (CertRequestOutput) ToCertRequestOutputWithContext

func (o CertRequestOutput) ToCertRequestOutputWithContext(ctx context.Context) CertRequestOutput

func (CertRequestOutput) ToOutput added in v4.11.0

func (CertRequestOutput) Uris added in v4.4.0

List of URIs for which a certificate is being requested (i.e. certificate subjects).

type CertRequestState

type CertRequestState struct {
	// The certificate request data in PEM (RFC 1421).
	CertRequestPem pulumi.StringPtrInput
	// List of DNS names for which a certificate is being requested (i.e. certificate subjects).
	DnsNames pulumi.StringArrayInput
	// List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
	IpAddresses pulumi.StringArrayInput
	// Name of the algorithm used when generating the private key provided in `privateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.
	//
	// Deprecated: This is now ignored, as the key algorithm is inferred from the `private_key_pem`.
	KeyAlgorithm pulumi.StringPtrInput
	// Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong
	// to. This can be read from a separate file using the [`file`](https://www.terraform.io/language/functions/file)
	// interpolation function. Only an irreversible secure hash of the private key will be stored in the Terraform state.
	PrivateKeyPem pulumi.StringPtrInput
	// The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
	Subject CertRequestSubjectPtrInput
	// List of URIs for which a certificate is being requested (i.e. certificate subjects).
	Uris pulumi.StringArrayInput
}

func (CertRequestState) ElementType

func (CertRequestState) ElementType() reflect.Type

type CertRequestSubject

type CertRequestSubject struct {
	// Distinguished name: `CN`
	CommonName *string `pulumi:"commonName"`
	// Distinguished name: `C`
	Country *string `pulumi:"country"`
	// Distinguished name: `L`
	Locality *string `pulumi:"locality"`
	// Distinguished name: `O`
	Organization *string `pulumi:"organization"`
	// Distinguished name: `OU`
	OrganizationalUnit *string `pulumi:"organizationalUnit"`
	// Distinguished name: `PC`
	PostalCode *string `pulumi:"postalCode"`
	// Distinguished name: `ST`
	Province *string `pulumi:"province"`
	// Distinguished name: `SERIALNUMBER`
	SerialNumber *string `pulumi:"serialNumber"`
	// Distinguished name: `STREET`
	StreetAddresses []string `pulumi:"streetAddresses"`
}

type CertRequestSubjectArgs

type CertRequestSubjectArgs struct {
	// Distinguished name: `CN`
	CommonName pulumi.StringPtrInput `pulumi:"commonName"`
	// Distinguished name: `C`
	Country pulumi.StringPtrInput `pulumi:"country"`
	// Distinguished name: `L`
	Locality pulumi.StringPtrInput `pulumi:"locality"`
	// Distinguished name: `O`
	Organization pulumi.StringPtrInput `pulumi:"organization"`
	// Distinguished name: `OU`
	OrganizationalUnit pulumi.StringPtrInput `pulumi:"organizationalUnit"`
	// Distinguished name: `PC`
	PostalCode pulumi.StringPtrInput `pulumi:"postalCode"`
	// Distinguished name: `ST`
	Province pulumi.StringPtrInput `pulumi:"province"`
	// Distinguished name: `SERIALNUMBER`
	SerialNumber pulumi.StringPtrInput `pulumi:"serialNumber"`
	// Distinguished name: `STREET`
	StreetAddresses pulumi.StringArrayInput `pulumi:"streetAddresses"`
}

func (CertRequestSubjectArgs) ElementType

func (CertRequestSubjectArgs) ElementType() reflect.Type

func (CertRequestSubjectArgs) ToCertRequestSubjectOutput

func (i CertRequestSubjectArgs) ToCertRequestSubjectOutput() CertRequestSubjectOutput

func (CertRequestSubjectArgs) ToCertRequestSubjectOutputWithContext

func (i CertRequestSubjectArgs) ToCertRequestSubjectOutputWithContext(ctx context.Context) CertRequestSubjectOutput

func (CertRequestSubjectArgs) ToCertRequestSubjectPtrOutput added in v4.5.0

func (i CertRequestSubjectArgs) ToCertRequestSubjectPtrOutput() CertRequestSubjectPtrOutput

func (CertRequestSubjectArgs) ToCertRequestSubjectPtrOutputWithContext added in v4.5.0

func (i CertRequestSubjectArgs) ToCertRequestSubjectPtrOutputWithContext(ctx context.Context) CertRequestSubjectPtrOutput

func (CertRequestSubjectArgs) ToOutput added in v4.11.0

type CertRequestSubjectInput

type CertRequestSubjectInput interface {
	pulumi.Input

	ToCertRequestSubjectOutput() CertRequestSubjectOutput
	ToCertRequestSubjectOutputWithContext(context.Context) CertRequestSubjectOutput
}

CertRequestSubjectInput is an input type that accepts CertRequestSubjectArgs and CertRequestSubjectOutput values. You can construct a concrete instance of `CertRequestSubjectInput` via:

CertRequestSubjectArgs{...}

type CertRequestSubjectOutput

type CertRequestSubjectOutput struct{ *pulumi.OutputState }

func (CertRequestSubjectOutput) CommonName

Distinguished name: `CN`

func (CertRequestSubjectOutput) Country

Distinguished name: `C`

func (CertRequestSubjectOutput) ElementType

func (CertRequestSubjectOutput) ElementType() reflect.Type

func (CertRequestSubjectOutput) Locality

Distinguished name: `L`

func (CertRequestSubjectOutput) Organization

Distinguished name: `O`

func (CertRequestSubjectOutput) OrganizationalUnit

func (o CertRequestSubjectOutput) OrganizationalUnit() pulumi.StringPtrOutput

Distinguished name: `OU`

func (CertRequestSubjectOutput) PostalCode

Distinguished name: `PC`

func (CertRequestSubjectOutput) Province

Distinguished name: `ST`

func (CertRequestSubjectOutput) SerialNumber

Distinguished name: `SERIALNUMBER`

func (CertRequestSubjectOutput) StreetAddresses

Distinguished name: `STREET`

func (CertRequestSubjectOutput) ToCertRequestSubjectOutput

func (o CertRequestSubjectOutput) ToCertRequestSubjectOutput() CertRequestSubjectOutput

func (CertRequestSubjectOutput) ToCertRequestSubjectOutputWithContext

func (o CertRequestSubjectOutput) ToCertRequestSubjectOutputWithContext(ctx context.Context) CertRequestSubjectOutput

func (CertRequestSubjectOutput) ToCertRequestSubjectPtrOutput added in v4.5.0

func (o CertRequestSubjectOutput) ToCertRequestSubjectPtrOutput() CertRequestSubjectPtrOutput

func (CertRequestSubjectOutput) ToCertRequestSubjectPtrOutputWithContext added in v4.5.0

func (o CertRequestSubjectOutput) ToCertRequestSubjectPtrOutputWithContext(ctx context.Context) CertRequestSubjectPtrOutput

func (CertRequestSubjectOutput) ToOutput added in v4.11.0

type CertRequestSubjectPtrInput added in v4.5.0

type CertRequestSubjectPtrInput interface {
	pulumi.Input

	ToCertRequestSubjectPtrOutput() CertRequestSubjectPtrOutput
	ToCertRequestSubjectPtrOutputWithContext(context.Context) CertRequestSubjectPtrOutput
}

CertRequestSubjectPtrInput is an input type that accepts CertRequestSubjectArgs, CertRequestSubjectPtr and CertRequestSubjectPtrOutput values. You can construct a concrete instance of `CertRequestSubjectPtrInput` via:

        CertRequestSubjectArgs{...}

or:

        nil

func CertRequestSubjectPtr added in v4.5.0

func CertRequestSubjectPtr(v *CertRequestSubjectArgs) CertRequestSubjectPtrInput

type CertRequestSubjectPtrOutput added in v4.5.0

type CertRequestSubjectPtrOutput struct{ *pulumi.OutputState }

func (CertRequestSubjectPtrOutput) CommonName added in v4.5.0

Distinguished name: `CN`

func (CertRequestSubjectPtrOutput) Country added in v4.5.0

Distinguished name: `C`

func (CertRequestSubjectPtrOutput) Elem added in v4.5.0

func (CertRequestSubjectPtrOutput) ElementType added in v4.5.0

func (CertRequestSubjectPtrOutput) Locality added in v4.5.0

Distinguished name: `L`

func (CertRequestSubjectPtrOutput) Organization added in v4.5.0

Distinguished name: `O`

func (CertRequestSubjectPtrOutput) OrganizationalUnit added in v4.5.0

func (o CertRequestSubjectPtrOutput) OrganizationalUnit() pulumi.StringPtrOutput

Distinguished name: `OU`

func (CertRequestSubjectPtrOutput) PostalCode added in v4.5.0

Distinguished name: `PC`

func (CertRequestSubjectPtrOutput) Province added in v4.5.0

Distinguished name: `ST`

func (CertRequestSubjectPtrOutput) SerialNumber added in v4.5.0

Distinguished name: `SERIALNUMBER`

func (CertRequestSubjectPtrOutput) StreetAddresses added in v4.5.0

Distinguished name: `STREET`

func (CertRequestSubjectPtrOutput) ToCertRequestSubjectPtrOutput added in v4.5.0

func (o CertRequestSubjectPtrOutput) ToCertRequestSubjectPtrOutput() CertRequestSubjectPtrOutput

func (CertRequestSubjectPtrOutput) ToCertRequestSubjectPtrOutputWithContext added in v4.5.0

func (o CertRequestSubjectPtrOutput) ToCertRequestSubjectPtrOutputWithContext(ctx context.Context) CertRequestSubjectPtrOutput

func (CertRequestSubjectPtrOutput) ToOutput added in v4.11.0

type GetCertificateArgs

type GetCertificateArgs struct {
	// The content of the certificate in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. Cannot be used with `url`.
	Content *string `pulumi:"content"`
	// The URL of the website to get the certificates from. Cannot be used with `content`.
	Url *string `pulumi:"url"`
	// Whether to verify the certificate chain while parsing it or not (default: `true`). Cannot be used with `content`.
	VerifyChain *bool `pulumi:"verifyChain"`
}

A collection of arguments for invoking getCertificate.

type GetCertificateCertificate

type GetCertificateCertificate struct {
	// Certificate data in PEM (RFC 1421).
	CertPem string `pulumi:"certPem"`
	// `true` if the certificate is of a CA (Certificate Authority).
	IsCa bool `pulumi:"isCa"`
	// Who verified and signed the certificate, roughly following [RFC2253](https://tools.ietf.org/html/rfc2253).
	Issuer string `pulumi:"issuer"`
	// The time until which the certificate is invalid, as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	NotAfter string `pulumi:"notAfter"`
	// The time after which the certificate is valid, as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	NotBefore string `pulumi:"notBefore"`
	// The key algorithm used to create the certificate.
	PublicKeyAlgorithm string `pulumi:"publicKeyAlgorithm"`
	// Number that uniquely identifies the certificate with the CA's system.
	// The `format` function can be used to convert this *base 10* number into other bases, such as hex.
	SerialNumber string `pulumi:"serialNumber"`
	// The SHA1 fingerprint of the public key of the certificate.
	Sha1Fingerprint string `pulumi:"sha1Fingerprint"`
	// The algorithm used to sign the certificate.
	SignatureAlgorithm string `pulumi:"signatureAlgorithm"`
	// The entity the certificate belongs to, roughly following [RFC2253](https://tools.ietf.org/html/rfc2253).
	Subject string `pulumi:"subject"`
	// The version the certificate is in.
	Version int `pulumi:"version"`
}

type GetCertificateCertificateArgs

type GetCertificateCertificateArgs struct {
	// Certificate data in PEM (RFC 1421).
	CertPem pulumi.StringInput `pulumi:"certPem"`
	// `true` if the certificate is of a CA (Certificate Authority).
	IsCa pulumi.BoolInput `pulumi:"isCa"`
	// Who verified and signed the certificate, roughly following [RFC2253](https://tools.ietf.org/html/rfc2253).
	Issuer pulumi.StringInput `pulumi:"issuer"`
	// The time until which the certificate is invalid, as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	NotAfter pulumi.StringInput `pulumi:"notAfter"`
	// The time after which the certificate is valid, as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	NotBefore pulumi.StringInput `pulumi:"notBefore"`
	// The key algorithm used to create the certificate.
	PublicKeyAlgorithm pulumi.StringInput `pulumi:"publicKeyAlgorithm"`
	// Number that uniquely identifies the certificate with the CA's system.
	// The `format` function can be used to convert this *base 10* number into other bases, such as hex.
	SerialNumber pulumi.StringInput `pulumi:"serialNumber"`
	// The SHA1 fingerprint of the public key of the certificate.
	Sha1Fingerprint pulumi.StringInput `pulumi:"sha1Fingerprint"`
	// The algorithm used to sign the certificate.
	SignatureAlgorithm pulumi.StringInput `pulumi:"signatureAlgorithm"`
	// The entity the certificate belongs to, roughly following [RFC2253](https://tools.ietf.org/html/rfc2253).
	Subject pulumi.StringInput `pulumi:"subject"`
	// The version the certificate is in.
	Version pulumi.IntInput `pulumi:"version"`
}

func (GetCertificateCertificateArgs) ElementType

func (GetCertificateCertificateArgs) ToGetCertificateCertificateOutput

func (i GetCertificateCertificateArgs) ToGetCertificateCertificateOutput() GetCertificateCertificateOutput

func (GetCertificateCertificateArgs) ToGetCertificateCertificateOutputWithContext

func (i GetCertificateCertificateArgs) ToGetCertificateCertificateOutputWithContext(ctx context.Context) GetCertificateCertificateOutput

func (GetCertificateCertificateArgs) ToOutput added in v4.11.0

type GetCertificateCertificateArray

type GetCertificateCertificateArray []GetCertificateCertificateInput

func (GetCertificateCertificateArray) ElementType

func (GetCertificateCertificateArray) ToGetCertificateCertificateArrayOutput

func (i GetCertificateCertificateArray) ToGetCertificateCertificateArrayOutput() GetCertificateCertificateArrayOutput

func (GetCertificateCertificateArray) ToGetCertificateCertificateArrayOutputWithContext

func (i GetCertificateCertificateArray) ToGetCertificateCertificateArrayOutputWithContext(ctx context.Context) GetCertificateCertificateArrayOutput

func (GetCertificateCertificateArray) ToOutput added in v4.11.0

type GetCertificateCertificateArrayInput

type GetCertificateCertificateArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificateArrayOutput() GetCertificateCertificateArrayOutput
	ToGetCertificateCertificateArrayOutputWithContext(context.Context) GetCertificateCertificateArrayOutput
}

GetCertificateCertificateArrayInput is an input type that accepts GetCertificateCertificateArray and GetCertificateCertificateArrayOutput values. You can construct a concrete instance of `GetCertificateCertificateArrayInput` via:

GetCertificateCertificateArray{ GetCertificateCertificateArgs{...} }

type GetCertificateCertificateArrayOutput

type GetCertificateCertificateArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificateArrayOutput) ElementType

func (GetCertificateCertificateArrayOutput) Index

func (GetCertificateCertificateArrayOutput) ToGetCertificateCertificateArrayOutput

func (o GetCertificateCertificateArrayOutput) ToGetCertificateCertificateArrayOutput() GetCertificateCertificateArrayOutput

func (GetCertificateCertificateArrayOutput) ToGetCertificateCertificateArrayOutputWithContext

func (o GetCertificateCertificateArrayOutput) ToGetCertificateCertificateArrayOutputWithContext(ctx context.Context) GetCertificateCertificateArrayOutput

func (GetCertificateCertificateArrayOutput) ToOutput added in v4.11.0

type GetCertificateCertificateInput

type GetCertificateCertificateInput interface {
	pulumi.Input

	ToGetCertificateCertificateOutput() GetCertificateCertificateOutput
	ToGetCertificateCertificateOutputWithContext(context.Context) GetCertificateCertificateOutput
}

GetCertificateCertificateInput is an input type that accepts GetCertificateCertificateArgs and GetCertificateCertificateOutput values. You can construct a concrete instance of `GetCertificateCertificateInput` via:

GetCertificateCertificateArgs{...}

type GetCertificateCertificateOutput

type GetCertificateCertificateOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificateOutput) CertPem added in v4.5.0

Certificate data in PEM (RFC 1421).

func (GetCertificateCertificateOutput) ElementType

func (GetCertificateCertificateOutput) IsCa

`true` if the certificate is of a CA (Certificate Authority).

func (GetCertificateCertificateOutput) Issuer

Who verified and signed the certificate, roughly following [RFC2253](https://tools.ietf.org/html/rfc2253).

func (GetCertificateCertificateOutput) NotAfter

The time until which the certificate is invalid, as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.

func (GetCertificateCertificateOutput) NotBefore

The time after which the certificate is valid, as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.

func (GetCertificateCertificateOutput) PublicKeyAlgorithm

func (o GetCertificateCertificateOutput) PublicKeyAlgorithm() pulumi.StringOutput

The key algorithm used to create the certificate.

func (GetCertificateCertificateOutput) SerialNumber

Number that uniquely identifies the certificate with the CA's system. The `format` function can be used to convert this *base 10* number into other bases, such as hex.

func (GetCertificateCertificateOutput) Sha1Fingerprint

The SHA1 fingerprint of the public key of the certificate.

func (GetCertificateCertificateOutput) SignatureAlgorithm

func (o GetCertificateCertificateOutput) SignatureAlgorithm() pulumi.StringOutput

The algorithm used to sign the certificate.

func (GetCertificateCertificateOutput) Subject

The entity the certificate belongs to, roughly following [RFC2253](https://tools.ietf.org/html/rfc2253).

func (GetCertificateCertificateOutput) ToGetCertificateCertificateOutput

func (o GetCertificateCertificateOutput) ToGetCertificateCertificateOutput() GetCertificateCertificateOutput

func (GetCertificateCertificateOutput) ToGetCertificateCertificateOutputWithContext

func (o GetCertificateCertificateOutput) ToGetCertificateCertificateOutputWithContext(ctx context.Context) GetCertificateCertificateOutput

func (GetCertificateCertificateOutput) ToOutput added in v4.11.0

func (GetCertificateCertificateOutput) Version

The version the certificate is in.

type GetCertificateOutputArgs added in v4.1.0

type GetCertificateOutputArgs struct {
	// The content of the certificate in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. Cannot be used with `url`.
	Content pulumi.StringPtrInput `pulumi:"content"`
	// The URL of the website to get the certificates from. Cannot be used with `content`.
	Url pulumi.StringPtrInput `pulumi:"url"`
	// Whether to verify the certificate chain while parsing it or not (default: `true`). Cannot be used with `content`.
	VerifyChain pulumi.BoolPtrInput `pulumi:"verifyChain"`
}

A collection of arguments for invoking getCertificate.

func (GetCertificateOutputArgs) ElementType added in v4.1.0

func (GetCertificateOutputArgs) ElementType() reflect.Type

type GetCertificateResult

type GetCertificateResult struct {
	// The certificates protecting the site, with the root of the chain first.
	Certificates []GetCertificateCertificate `pulumi:"certificates"`
	// The content of the certificate in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. Cannot be used with `url`.
	Content *string `pulumi:"content"`
	// Unique identifier of this data source: hashing of the certificates in the chain.
	Id string `pulumi:"id"`
	// The URL of the website to get the certificates from. Cannot be used with `content`.
	Url *string `pulumi:"url"`
	// Whether to verify the certificate chain while parsing it or not (default: `true`). Cannot be used with `content`.
	VerifyChain *bool `pulumi:"verifyChain"`
}

A collection of values returned by getCertificate.

func GetCertificate

func GetCertificate(ctx *pulumi.Context, args *GetCertificateArgs, opts ...pulumi.InvokeOption) (*GetCertificateResult, error)

type GetCertificateResultOutput added in v4.1.0

type GetCertificateResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getCertificate.

func GetCertificateOutput added in v4.1.0

func GetCertificateOutput(ctx *pulumi.Context, args GetCertificateOutputArgs, opts ...pulumi.InvokeOption) GetCertificateResultOutput

func (GetCertificateResultOutput) Certificates added in v4.1.0

The certificates protecting the site, with the root of the chain first.

func (GetCertificateResultOutput) Content added in v4.5.0

The content of the certificate in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. Cannot be used with `url`.

func (GetCertificateResultOutput) ElementType added in v4.1.0

func (GetCertificateResultOutput) ElementType() reflect.Type

func (GetCertificateResultOutput) Id added in v4.1.0

Unique identifier of this data source: hashing of the certificates in the chain.

func (GetCertificateResultOutput) ToGetCertificateResultOutput added in v4.1.0

func (o GetCertificateResultOutput) ToGetCertificateResultOutput() GetCertificateResultOutput

func (GetCertificateResultOutput) ToGetCertificateResultOutputWithContext added in v4.1.0

func (o GetCertificateResultOutput) ToGetCertificateResultOutputWithContext(ctx context.Context) GetCertificateResultOutput

func (GetCertificateResultOutput) ToOutput added in v4.11.0

func (GetCertificateResultOutput) Url added in v4.1.0

The URL of the website to get the certificates from. Cannot be used with `content`.

func (GetCertificateResultOutput) VerifyChain added in v4.1.0

Whether to verify the certificate chain while parsing it or not (default: `true`). Cannot be used with `content`.

type GetPublicKeyArgs

type GetPublicKeyArgs struct {
	// The private key (in  [OpenSSH PEM (RFC 4716)](https://datatracker.ietf.org/doc/html/rfc4716) format) to extract the public key from. Currently-supported algorithms for keys are `RSA`, `ECDSA` and `ED25519`. This is *mutually exclusive* with `privateKeyPem`.
	PrivateKeyOpenssh *string `pulumi:"privateKeyOpenssh"`
	// The private key (in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format) to extract the public key from. Currently-supported algorithms for keys are `RSA`, `ECDSA` and `ED25519`. This is *mutually exclusive* with `privateKeyOpenssh`.
	PrivateKeyPem *string `pulumi:"privateKeyPem"`
}

A collection of arguments for invoking getPublicKey.

type GetPublicKeyOutputArgs added in v4.1.0

type GetPublicKeyOutputArgs struct {
	// The private key (in  [OpenSSH PEM (RFC 4716)](https://datatracker.ietf.org/doc/html/rfc4716) format) to extract the public key from. Currently-supported algorithms for keys are `RSA`, `ECDSA` and `ED25519`. This is *mutually exclusive* with `privateKeyPem`.
	PrivateKeyOpenssh pulumi.StringPtrInput `pulumi:"privateKeyOpenssh"`
	// The private key (in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format) to extract the public key from. Currently-supported algorithms for keys are `RSA`, `ECDSA` and `ED25519`. This is *mutually exclusive* with `privateKeyOpenssh`.
	PrivateKeyPem pulumi.StringPtrInput `pulumi:"privateKeyPem"`
}

A collection of arguments for invoking getPublicKey.

func (GetPublicKeyOutputArgs) ElementType added in v4.1.0

func (GetPublicKeyOutputArgs) ElementType() reflect.Type

type GetPublicKeyResult

type GetPublicKeyResult struct {
	// The name of the algorithm used by the given private key. Possible values are: `RSA`, `ECDSA` and `ED25519`.
	Algorithm string `pulumi:"algorithm"`
	// Unique identifier for this data source: hexadecimal representation of the SHA1 checksum of the data source.
	Id string `pulumi:"id"`
	// The private key (in  [OpenSSH PEM (RFC 4716)](https://datatracker.ietf.org/doc/html/rfc4716) format) to extract the public key from. Currently-supported algorithms for keys are `RSA`, `ECDSA` and `ED25519`. This is *mutually exclusive* with `privateKeyPem`.
	PrivateKeyOpenssh *string `pulumi:"privateKeyOpenssh"`
	// The private key (in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format) to extract the public key from. Currently-supported algorithms for keys are `RSA`, `ECDSA` and `ED25519`. This is *mutually exclusive* with `privateKeyOpenssh`.
	PrivateKeyPem *string `pulumi:"privateKeyPem"`
	// The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:...`. Only available if the selected private key format is compatible, as per the rules for `publicKeyOpenssh` and ECDSA P224 limitations.
	PublicKeyFingerprintMd5 string `pulumi:"publicKeyFingerprintMd5"`
	// The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:...`. Only available if the selected private key format is compatible, as per the rules for `publicKeyOpenssh` and ECDSA P224 limitations.
	PublicKeyFingerprintSha256 string `pulumi:"publicKeyFingerprintSha256"`
	// The public key, in  OpenSSH PEM (RFC 4716).
	PublicKeyOpenssh string `pulumi:"publicKeyOpenssh"`
	// The public key, in PEM (RFC 1421).
	PublicKeyPem string `pulumi:"publicKeyPem"`
}

A collection of values returned by getPublicKey.

func GetPublicKey

func GetPublicKey(ctx *pulumi.Context, args *GetPublicKeyArgs, opts ...pulumi.InvokeOption) (*GetPublicKeyResult, error)

Get a public key from a PEM-encoded private key.

Use this data source to get the public key from a [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) or [OpenSSH PEM (RFC 4716)](https://datatracker.ietf.org/doc/html/rfc4716) formatted private key, for use in other resources.

## Example Usage

```go package main

import (

"os"

"github.com/pulumi/pulumi-tls/sdk/v4/go/tls"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func readFileOrPanic(path string) pulumi.StringPtrInput {
	data, err := os.ReadFile(path)
	if err != nil {
		panic(err.Error())
	}
	return pulumi.String(string(data))
}

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := tls.NewPrivateKey(ctx, "ed25519-example", &tls.PrivateKeyArgs{
			Algorithm: pulumi.String("ED25519"),
		})
		if err != nil {
			return err
		}
		_ = tls.GetPublicKeyOutput(ctx, tls.GetPublicKeyOutputArgs{
			PrivateKeyPem: ed25519_example.PrivateKeyPem,
		}, nil)
		_, err = tls.GetPublicKey(ctx, &tls.GetPublicKeyArgs{
			PrivateKeyOpenssh: pulumi.StringRef(readFileOrPanic("~/.ssh/id_rsa_rfc4716")),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetPublicKeyResultOutput added in v4.1.0

type GetPublicKeyResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getPublicKey.

func GetPublicKeyOutput added in v4.1.0

func GetPublicKeyOutput(ctx *pulumi.Context, args GetPublicKeyOutputArgs, opts ...pulumi.InvokeOption) GetPublicKeyResultOutput

func (GetPublicKeyResultOutput) Algorithm added in v4.1.0

The name of the algorithm used by the given private key. Possible values are: `RSA`, `ECDSA` and `ED25519`.

func (GetPublicKeyResultOutput) ElementType added in v4.1.0

func (GetPublicKeyResultOutput) ElementType() reflect.Type

func (GetPublicKeyResultOutput) Id added in v4.1.0

Unique identifier for this data source: hexadecimal representation of the SHA1 checksum of the data source.

func (GetPublicKeyResultOutput) PrivateKeyOpenssh added in v4.2.0

func (o GetPublicKeyResultOutput) PrivateKeyOpenssh() pulumi.StringPtrOutput

The private key (in [OpenSSH PEM (RFC 4716)](https://datatracker.ietf.org/doc/html/rfc4716) format) to extract the public key from. Currently-supported algorithms for keys are `RSA`, `ECDSA` and `ED25519`. This is *mutually exclusive* with `privateKeyPem`.

func (GetPublicKeyResultOutput) PrivateKeyPem added in v4.1.0

The private key (in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format) to extract the public key from. Currently-supported algorithms for keys are `RSA`, `ECDSA` and `ED25519`. This is *mutually exclusive* with `privateKeyOpenssh`.

func (GetPublicKeyResultOutput) PublicKeyFingerprintMd5 added in v4.1.0

func (o GetPublicKeyResultOutput) PublicKeyFingerprintMd5() pulumi.StringOutput

The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:...`. Only available if the selected private key format is compatible, as per the rules for `publicKeyOpenssh` and ECDSA P224 limitations.

func (GetPublicKeyResultOutput) PublicKeyFingerprintSha256 added in v4.2.0

func (o GetPublicKeyResultOutput) PublicKeyFingerprintSha256() pulumi.StringOutput

The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:...`. Only available if the selected private key format is compatible, as per the rules for `publicKeyOpenssh` and ECDSA P224 limitations.

func (GetPublicKeyResultOutput) PublicKeyOpenssh added in v4.1.0

func (o GetPublicKeyResultOutput) PublicKeyOpenssh() pulumi.StringOutput

The public key, in OpenSSH PEM (RFC 4716).

func (GetPublicKeyResultOutput) PublicKeyPem added in v4.1.0

func (o GetPublicKeyResultOutput) PublicKeyPem() pulumi.StringOutput

The public key, in PEM (RFC 1421).

func (GetPublicKeyResultOutput) ToGetPublicKeyResultOutput added in v4.1.0

func (o GetPublicKeyResultOutput) ToGetPublicKeyResultOutput() GetPublicKeyResultOutput

func (GetPublicKeyResultOutput) ToGetPublicKeyResultOutputWithContext added in v4.1.0

func (o GetPublicKeyResultOutput) ToGetPublicKeyResultOutputWithContext(ctx context.Context) GetPublicKeyResultOutput

func (GetPublicKeyResultOutput) ToOutput added in v4.11.0

type LocallySignedCert

type LocallySignedCert struct {
	pulumi.CustomResourceState

	// List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `anyExtended`, `certSigning`, `clientAuth`, `codeSigning`, `contentCommitment`, `crlSigning`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `emailProtection`, `encipherOnly`, `ipsecEndSystem`, `ipsecTunnel`, `ipsecUser`, `keyAgreement`, `keyEncipherment`, `microsoftCommercialCodeSigning`, `microsoftKernelCodeSigning`, `microsoftServerGatedCrypto`, `netscapeServerGatedCrypto`, `ocspSigning`, `serverAuth`, `timestamping`.
	AllowedUses pulumi.StringArrayOutput `pulumi:"allowedUses"`
	// Certificate data of the Certificate Authority (CA) in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	CaCertPem pulumi.StringOutput `pulumi:"caCertPem"`
	// Name of the algorithm used when generating the private key provided in `caPrivateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.
	//
	// Deprecated: This is now ignored, as the key algorithm is inferred from the `ca_private_key_pem`.
	CaKeyAlgorithm pulumi.StringOutput `pulumi:"caKeyAlgorithm"`
	// Private key of the Certificate Authority (CA) used to sign the certificate, in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	CaPrivateKeyPem pulumi.StringOutput `pulumi:"caPrivateKeyPem"`
	// Certificate data in PEM (RFC 1421).
	CertPem pulumi.StringOutput `pulumi:"certPem"`
	// Certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	CertRequestPem pulumi.StringOutput `pulumi:"certRequestPem"`
	// The resource will consider the certificate to have expired the given number of hours before its actual expiry time. This
	// can be useful to deploy an updated certificate in advance of the expiration of the current certificate. However, the old
	// certificate remains valid until its true expiration time, since this resource does not (and cannot) support certificate
	// revocation. Also, this advance update can only be performed should the Terraform configuration be applied during the
	// early renewal period. (default: `0`)
	EarlyRenewalHours pulumi.IntPtrOutput `pulumi:"earlyRenewalHours"`
	// Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
	IsCaCertificate pulumi.BoolPtrOutput `pulumi:"isCaCertificate"`
	// Is the certificate either expired (i.e. beyond the `validityPeriodHours`) or ready for an early renewal (i.e. within the `earlyRenewalHours`)?
	ReadyForRenewal pulumi.BoolOutput `pulumi:"readyForRenewal"`
	// Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
	SetSubjectKeyId pulumi.BoolPtrOutput `pulumi:"setSubjectKeyId"`
	// The time until which the certificate is invalid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	ValidityEndTime pulumi.StringOutput `pulumi:"validityEndTime"`
	// Number of hours, after initial issuing, that the certificate will remain valid for.
	ValidityPeriodHours pulumi.IntOutput `pulumi:"validityPeriodHours"`
	// The time after which the certificate is valid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	ValidityStartTime pulumi.StringOutput `pulumi:"validityStartTime"`
}

func GetLocallySignedCert

func GetLocallySignedCert(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *LocallySignedCertState, opts ...pulumi.ResourceOption) (*LocallySignedCert, error)

GetLocallySignedCert gets an existing LocallySignedCert resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewLocallySignedCert

func NewLocallySignedCert(ctx *pulumi.Context,
	name string, args *LocallySignedCertArgs, opts ...pulumi.ResourceOption) (*LocallySignedCert, error)

NewLocallySignedCert registers a new resource with the given unique name, arguments, and options.

func (*LocallySignedCert) ElementType

func (*LocallySignedCert) ElementType() reflect.Type

func (*LocallySignedCert) ToLocallySignedCertOutput

func (i *LocallySignedCert) ToLocallySignedCertOutput() LocallySignedCertOutput

func (*LocallySignedCert) ToLocallySignedCertOutputWithContext

func (i *LocallySignedCert) ToLocallySignedCertOutputWithContext(ctx context.Context) LocallySignedCertOutput

func (*LocallySignedCert) ToOutput added in v4.11.0

type LocallySignedCertArgs

type LocallySignedCertArgs struct {
	// List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `anyExtended`, `certSigning`, `clientAuth`, `codeSigning`, `contentCommitment`, `crlSigning`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `emailProtection`, `encipherOnly`, `ipsecEndSystem`, `ipsecTunnel`, `ipsecUser`, `keyAgreement`, `keyEncipherment`, `microsoftCommercialCodeSigning`, `microsoftKernelCodeSigning`, `microsoftServerGatedCrypto`, `netscapeServerGatedCrypto`, `ocspSigning`, `serverAuth`, `timestamping`.
	AllowedUses pulumi.StringArrayInput
	// Certificate data of the Certificate Authority (CA) in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	CaCertPem pulumi.StringInput
	// Name of the algorithm used when generating the private key provided in `caPrivateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.
	//
	// Deprecated: This is now ignored, as the key algorithm is inferred from the `ca_private_key_pem`.
	CaKeyAlgorithm pulumi.StringPtrInput
	// Private key of the Certificate Authority (CA) used to sign the certificate, in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	CaPrivateKeyPem pulumi.StringInput
	// Certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	CertRequestPem pulumi.StringInput
	// The resource will consider the certificate to have expired the given number of hours before its actual expiry time. This
	// can be useful to deploy an updated certificate in advance of the expiration of the current certificate. However, the old
	// certificate remains valid until its true expiration time, since this resource does not (and cannot) support certificate
	// revocation. Also, this advance update can only be performed should the Terraform configuration be applied during the
	// early renewal period. (default: `0`)
	EarlyRenewalHours pulumi.IntPtrInput
	// Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
	IsCaCertificate pulumi.BoolPtrInput
	// Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
	SetSubjectKeyId pulumi.BoolPtrInput
	// Number of hours, after initial issuing, that the certificate will remain valid for.
	ValidityPeriodHours pulumi.IntInput
}

The set of arguments for constructing a LocallySignedCert resource.

func (LocallySignedCertArgs) ElementType

func (LocallySignedCertArgs) ElementType() reflect.Type

type LocallySignedCertArray

type LocallySignedCertArray []LocallySignedCertInput

func (LocallySignedCertArray) ElementType

func (LocallySignedCertArray) ElementType() reflect.Type

func (LocallySignedCertArray) ToLocallySignedCertArrayOutput

func (i LocallySignedCertArray) ToLocallySignedCertArrayOutput() LocallySignedCertArrayOutput

func (LocallySignedCertArray) ToLocallySignedCertArrayOutputWithContext

func (i LocallySignedCertArray) ToLocallySignedCertArrayOutputWithContext(ctx context.Context) LocallySignedCertArrayOutput

func (LocallySignedCertArray) ToOutput added in v4.11.0

type LocallySignedCertArrayInput

type LocallySignedCertArrayInput interface {
	pulumi.Input

	ToLocallySignedCertArrayOutput() LocallySignedCertArrayOutput
	ToLocallySignedCertArrayOutputWithContext(context.Context) LocallySignedCertArrayOutput
}

LocallySignedCertArrayInput is an input type that accepts LocallySignedCertArray and LocallySignedCertArrayOutput values. You can construct a concrete instance of `LocallySignedCertArrayInput` via:

LocallySignedCertArray{ LocallySignedCertArgs{...} }

type LocallySignedCertArrayOutput

type LocallySignedCertArrayOutput struct{ *pulumi.OutputState }

func (LocallySignedCertArrayOutput) ElementType

func (LocallySignedCertArrayOutput) Index

func (LocallySignedCertArrayOutput) ToLocallySignedCertArrayOutput

func (o LocallySignedCertArrayOutput) ToLocallySignedCertArrayOutput() LocallySignedCertArrayOutput

func (LocallySignedCertArrayOutput) ToLocallySignedCertArrayOutputWithContext

func (o LocallySignedCertArrayOutput) ToLocallySignedCertArrayOutputWithContext(ctx context.Context) LocallySignedCertArrayOutput

func (LocallySignedCertArrayOutput) ToOutput added in v4.11.0

type LocallySignedCertInput

type LocallySignedCertInput interface {
	pulumi.Input

	ToLocallySignedCertOutput() LocallySignedCertOutput
	ToLocallySignedCertOutputWithContext(ctx context.Context) LocallySignedCertOutput
}

type LocallySignedCertMap

type LocallySignedCertMap map[string]LocallySignedCertInput

func (LocallySignedCertMap) ElementType

func (LocallySignedCertMap) ElementType() reflect.Type

func (LocallySignedCertMap) ToLocallySignedCertMapOutput

func (i LocallySignedCertMap) ToLocallySignedCertMapOutput() LocallySignedCertMapOutput

func (LocallySignedCertMap) ToLocallySignedCertMapOutputWithContext

func (i LocallySignedCertMap) ToLocallySignedCertMapOutputWithContext(ctx context.Context) LocallySignedCertMapOutput

func (LocallySignedCertMap) ToOutput added in v4.11.0

type LocallySignedCertMapInput

type LocallySignedCertMapInput interface {
	pulumi.Input

	ToLocallySignedCertMapOutput() LocallySignedCertMapOutput
	ToLocallySignedCertMapOutputWithContext(context.Context) LocallySignedCertMapOutput
}

LocallySignedCertMapInput is an input type that accepts LocallySignedCertMap and LocallySignedCertMapOutput values. You can construct a concrete instance of `LocallySignedCertMapInput` via:

LocallySignedCertMap{ "key": LocallySignedCertArgs{...} }

type LocallySignedCertMapOutput

type LocallySignedCertMapOutput struct{ *pulumi.OutputState }

func (LocallySignedCertMapOutput) ElementType

func (LocallySignedCertMapOutput) ElementType() reflect.Type

func (LocallySignedCertMapOutput) MapIndex

func (LocallySignedCertMapOutput) ToLocallySignedCertMapOutput

func (o LocallySignedCertMapOutput) ToLocallySignedCertMapOutput() LocallySignedCertMapOutput

func (LocallySignedCertMapOutput) ToLocallySignedCertMapOutputWithContext

func (o LocallySignedCertMapOutput) ToLocallySignedCertMapOutputWithContext(ctx context.Context) LocallySignedCertMapOutput

func (LocallySignedCertMapOutput) ToOutput added in v4.11.0

type LocallySignedCertOutput

type LocallySignedCertOutput struct{ *pulumi.OutputState }

func (LocallySignedCertOutput) AllowedUses added in v4.4.0

List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `anyExtended`, `certSigning`, `clientAuth`, `codeSigning`, `contentCommitment`, `crlSigning`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `emailProtection`, `encipherOnly`, `ipsecEndSystem`, `ipsecTunnel`, `ipsecUser`, `keyAgreement`, `keyEncipherment`, `microsoftCommercialCodeSigning`, `microsoftKernelCodeSigning`, `microsoftServerGatedCrypto`, `netscapeServerGatedCrypto`, `ocspSigning`, `serverAuth`, `timestamping`.

func (LocallySignedCertOutput) CaCertPem added in v4.4.0

Certificate data of the Certificate Authority (CA) in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.

func (LocallySignedCertOutput) CaKeyAlgorithm deprecated added in v4.4.0

func (o LocallySignedCertOutput) CaKeyAlgorithm() pulumi.StringOutput

Name of the algorithm used when generating the private key provided in `caPrivateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.

Deprecated: This is now ignored, as the key algorithm is inferred from the `ca_private_key_pem`.

func (LocallySignedCertOutput) CaPrivateKeyPem added in v4.4.0

func (o LocallySignedCertOutput) CaPrivateKeyPem() pulumi.StringOutput

Private key of the Certificate Authority (CA) used to sign the certificate, in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.

func (LocallySignedCertOutput) CertPem added in v4.4.0

Certificate data in PEM (RFC 1421).

func (LocallySignedCertOutput) CertRequestPem added in v4.4.0

func (o LocallySignedCertOutput) CertRequestPem() pulumi.StringOutput

Certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.

func (LocallySignedCertOutput) EarlyRenewalHours added in v4.4.0

func (o LocallySignedCertOutput) EarlyRenewalHours() pulumi.IntPtrOutput

The resource will consider the certificate to have expired the given number of hours before its actual expiry time. This can be useful to deploy an updated certificate in advance of the expiration of the current certificate. However, the old certificate remains valid until its true expiration time, since this resource does not (and cannot) support certificate revocation. Also, this advance update can only be performed should the Terraform configuration be applied during the early renewal period. (default: `0`)

func (LocallySignedCertOutput) ElementType

func (LocallySignedCertOutput) ElementType() reflect.Type

func (LocallySignedCertOutput) IsCaCertificate added in v4.4.0

func (o LocallySignedCertOutput) IsCaCertificate() pulumi.BoolPtrOutput

Is the generated certificate representing a Certificate Authority (CA) (default: `false`).

func (LocallySignedCertOutput) ReadyForRenewal added in v4.4.0

func (o LocallySignedCertOutput) ReadyForRenewal() pulumi.BoolOutput

Is the certificate either expired (i.e. beyond the `validityPeriodHours`) or ready for an early renewal (i.e. within the `earlyRenewalHours`)?

func (LocallySignedCertOutput) SetSubjectKeyId added in v4.4.0

func (o LocallySignedCertOutput) SetSubjectKeyId() pulumi.BoolPtrOutput

Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).

func (LocallySignedCertOutput) ToLocallySignedCertOutput

func (o LocallySignedCertOutput) ToLocallySignedCertOutput() LocallySignedCertOutput

func (LocallySignedCertOutput) ToLocallySignedCertOutputWithContext

func (o LocallySignedCertOutput) ToLocallySignedCertOutputWithContext(ctx context.Context) LocallySignedCertOutput

func (LocallySignedCertOutput) ToOutput added in v4.11.0

func (LocallySignedCertOutput) ValidityEndTime added in v4.4.0

func (o LocallySignedCertOutput) ValidityEndTime() pulumi.StringOutput

The time until which the certificate is invalid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.

func (LocallySignedCertOutput) ValidityPeriodHours added in v4.4.0

func (o LocallySignedCertOutput) ValidityPeriodHours() pulumi.IntOutput

Number of hours, after initial issuing, that the certificate will remain valid for.

func (LocallySignedCertOutput) ValidityStartTime added in v4.4.0

func (o LocallySignedCertOutput) ValidityStartTime() pulumi.StringOutput

The time after which the certificate is valid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.

type LocallySignedCertState

type LocallySignedCertState struct {
	// List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `anyExtended`, `certSigning`, `clientAuth`, `codeSigning`, `contentCommitment`, `crlSigning`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `emailProtection`, `encipherOnly`, `ipsecEndSystem`, `ipsecTunnel`, `ipsecUser`, `keyAgreement`, `keyEncipherment`, `microsoftCommercialCodeSigning`, `microsoftKernelCodeSigning`, `microsoftServerGatedCrypto`, `netscapeServerGatedCrypto`, `ocspSigning`, `serverAuth`, `timestamping`.
	AllowedUses pulumi.StringArrayInput
	// Certificate data of the Certificate Authority (CA) in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	CaCertPem pulumi.StringPtrInput
	// Name of the algorithm used when generating the private key provided in `caPrivateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.
	//
	// Deprecated: This is now ignored, as the key algorithm is inferred from the `ca_private_key_pem`.
	CaKeyAlgorithm pulumi.StringPtrInput
	// Private key of the Certificate Authority (CA) used to sign the certificate, in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	CaPrivateKeyPem pulumi.StringPtrInput
	// Certificate data in PEM (RFC 1421).
	CertPem pulumi.StringPtrInput
	// Certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	CertRequestPem pulumi.StringPtrInput
	// The resource will consider the certificate to have expired the given number of hours before its actual expiry time. This
	// can be useful to deploy an updated certificate in advance of the expiration of the current certificate. However, the old
	// certificate remains valid until its true expiration time, since this resource does not (and cannot) support certificate
	// revocation. Also, this advance update can only be performed should the Terraform configuration be applied during the
	// early renewal period. (default: `0`)
	EarlyRenewalHours pulumi.IntPtrInput
	// Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
	IsCaCertificate pulumi.BoolPtrInput
	// Is the certificate either expired (i.e. beyond the `validityPeriodHours`) or ready for an early renewal (i.e. within the `earlyRenewalHours`)?
	ReadyForRenewal pulumi.BoolPtrInput
	// Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
	SetSubjectKeyId pulumi.BoolPtrInput
	// The time until which the certificate is invalid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	ValidityEndTime pulumi.StringPtrInput
	// Number of hours, after initial issuing, that the certificate will remain valid for.
	ValidityPeriodHours pulumi.IntPtrInput
	// The time after which the certificate is valid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	ValidityStartTime pulumi.StringPtrInput
}

func (LocallySignedCertState) ElementType

func (LocallySignedCertState) ElementType() reflect.Type

type PrivateKey

type PrivateKey struct {
	pulumi.CustomResourceState

	// Name of the algorithm to use when generating the private key. Currently-supported values are `RSA`, `ECDSA` and `ED25519`.
	Algorithm pulumi.StringOutput `pulumi:"algorithm"`
	// When `algorithm` is `ECDSA`, the name of the elliptic curve to use. Currently-supported values are `P224`, `P256`, `P384` or `P521` (default: `P224`).
	EcdsaCurve pulumi.StringPtrOutput `pulumi:"ecdsaCurve"`
	// Private key data in [OpenSSH PEM (RFC 4716)](https://datatracker.ietf.org/doc/html/rfc4716) format.
	PrivateKeyOpenssh pulumi.StringOutput `pulumi:"privateKeyOpenssh"`
	// Private key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	PrivateKeyPem pulumi.StringOutput `pulumi:"privateKeyPem"`
	// The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:...`. Only available if the selected private key format is compatible, similarly to `publicKeyOpenssh` and the ECDSA P224 limitations.
	PublicKeyFingerprintMd5 pulumi.StringOutput `pulumi:"publicKeyFingerprintMd5"`
	// The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:...`. Only available if the selected private key format is compatible, similarly to `publicKeyOpenssh` and the ECDSA P224 limitations.
	PublicKeyFingerprintSha256 pulumi.StringOutput `pulumi:"publicKeyFingerprintSha256"`
	// The public key data in "Authorized Keys".
	PublicKeyOpenssh pulumi.StringOutput `pulumi:"publicKeyOpenssh"`
	// Public key data in PEM (RFC 1421).
	PublicKeyPem pulumi.StringOutput `pulumi:"publicKeyPem"`
	// When `algorithm` is `RSA`, the size of the generated RSA key, in bits (default: `2048`).
	RsaBits pulumi.IntPtrOutput `pulumi:"rsaBits"`
}

func GetPrivateKey

func GetPrivateKey(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PrivateKeyState, opts ...pulumi.ResourceOption) (*PrivateKey, error)

GetPrivateKey gets an existing PrivateKey resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPrivateKey

func NewPrivateKey(ctx *pulumi.Context,
	name string, args *PrivateKeyArgs, opts ...pulumi.ResourceOption) (*PrivateKey, error)

NewPrivateKey registers a new resource with the given unique name, arguments, and options.

func (*PrivateKey) ElementType

func (*PrivateKey) ElementType() reflect.Type

func (*PrivateKey) ToOutput added in v4.11.0

func (i *PrivateKey) ToOutput(ctx context.Context) pulumix.Output[*PrivateKey]

func (*PrivateKey) ToPrivateKeyOutput

func (i *PrivateKey) ToPrivateKeyOutput() PrivateKeyOutput

func (*PrivateKey) ToPrivateKeyOutputWithContext

func (i *PrivateKey) ToPrivateKeyOutputWithContext(ctx context.Context) PrivateKeyOutput

type PrivateKeyArgs

type PrivateKeyArgs struct {
	// Name of the algorithm to use when generating the private key. Currently-supported values are `RSA`, `ECDSA` and `ED25519`.
	Algorithm pulumi.StringInput
	// When `algorithm` is `ECDSA`, the name of the elliptic curve to use. Currently-supported values are `P224`, `P256`, `P384` or `P521` (default: `P224`).
	EcdsaCurve pulumi.StringPtrInput
	// When `algorithm` is `RSA`, the size of the generated RSA key, in bits (default: `2048`).
	RsaBits pulumi.IntPtrInput
}

The set of arguments for constructing a PrivateKey resource.

func (PrivateKeyArgs) ElementType

func (PrivateKeyArgs) ElementType() reflect.Type

type PrivateKeyArray

type PrivateKeyArray []PrivateKeyInput

func (PrivateKeyArray) ElementType

func (PrivateKeyArray) ElementType() reflect.Type

func (PrivateKeyArray) ToOutput added in v4.11.0

func (PrivateKeyArray) ToPrivateKeyArrayOutput

func (i PrivateKeyArray) ToPrivateKeyArrayOutput() PrivateKeyArrayOutput

func (PrivateKeyArray) ToPrivateKeyArrayOutputWithContext

func (i PrivateKeyArray) ToPrivateKeyArrayOutputWithContext(ctx context.Context) PrivateKeyArrayOutput

type PrivateKeyArrayInput

type PrivateKeyArrayInput interface {
	pulumi.Input

	ToPrivateKeyArrayOutput() PrivateKeyArrayOutput
	ToPrivateKeyArrayOutputWithContext(context.Context) PrivateKeyArrayOutput
}

PrivateKeyArrayInput is an input type that accepts PrivateKeyArray and PrivateKeyArrayOutput values. You can construct a concrete instance of `PrivateKeyArrayInput` via:

PrivateKeyArray{ PrivateKeyArgs{...} }

type PrivateKeyArrayOutput

type PrivateKeyArrayOutput struct{ *pulumi.OutputState }

func (PrivateKeyArrayOutput) ElementType

func (PrivateKeyArrayOutput) ElementType() reflect.Type

func (PrivateKeyArrayOutput) Index

func (PrivateKeyArrayOutput) ToOutput added in v4.11.0

func (PrivateKeyArrayOutput) ToPrivateKeyArrayOutput

func (o PrivateKeyArrayOutput) ToPrivateKeyArrayOutput() PrivateKeyArrayOutput

func (PrivateKeyArrayOutput) ToPrivateKeyArrayOutputWithContext

func (o PrivateKeyArrayOutput) ToPrivateKeyArrayOutputWithContext(ctx context.Context) PrivateKeyArrayOutput

type PrivateKeyInput

type PrivateKeyInput interface {
	pulumi.Input

	ToPrivateKeyOutput() PrivateKeyOutput
	ToPrivateKeyOutputWithContext(ctx context.Context) PrivateKeyOutput
}

type PrivateKeyMap

type PrivateKeyMap map[string]PrivateKeyInput

func (PrivateKeyMap) ElementType

func (PrivateKeyMap) ElementType() reflect.Type

func (PrivateKeyMap) ToOutput added in v4.11.0

func (PrivateKeyMap) ToPrivateKeyMapOutput

func (i PrivateKeyMap) ToPrivateKeyMapOutput() PrivateKeyMapOutput

func (PrivateKeyMap) ToPrivateKeyMapOutputWithContext

func (i PrivateKeyMap) ToPrivateKeyMapOutputWithContext(ctx context.Context) PrivateKeyMapOutput

type PrivateKeyMapInput

type PrivateKeyMapInput interface {
	pulumi.Input

	ToPrivateKeyMapOutput() PrivateKeyMapOutput
	ToPrivateKeyMapOutputWithContext(context.Context) PrivateKeyMapOutput
}

PrivateKeyMapInput is an input type that accepts PrivateKeyMap and PrivateKeyMapOutput values. You can construct a concrete instance of `PrivateKeyMapInput` via:

PrivateKeyMap{ "key": PrivateKeyArgs{...} }

type PrivateKeyMapOutput

type PrivateKeyMapOutput struct{ *pulumi.OutputState }

func (PrivateKeyMapOutput) ElementType

func (PrivateKeyMapOutput) ElementType() reflect.Type

func (PrivateKeyMapOutput) MapIndex

func (PrivateKeyMapOutput) ToOutput added in v4.11.0

func (PrivateKeyMapOutput) ToPrivateKeyMapOutput

func (o PrivateKeyMapOutput) ToPrivateKeyMapOutput() PrivateKeyMapOutput

func (PrivateKeyMapOutput) ToPrivateKeyMapOutputWithContext

func (o PrivateKeyMapOutput) ToPrivateKeyMapOutputWithContext(ctx context.Context) PrivateKeyMapOutput

type PrivateKeyOutput

type PrivateKeyOutput struct{ *pulumi.OutputState }

func (PrivateKeyOutput) Algorithm added in v4.4.0

func (o PrivateKeyOutput) Algorithm() pulumi.StringOutput

Name of the algorithm to use when generating the private key. Currently-supported values are `RSA`, `ECDSA` and `ED25519`.

func (PrivateKeyOutput) EcdsaCurve added in v4.4.0

func (o PrivateKeyOutput) EcdsaCurve() pulumi.StringPtrOutput

When `algorithm` is `ECDSA`, the name of the elliptic curve to use. Currently-supported values are `P224`, `P256`, `P384` or `P521` (default: `P224`).

func (PrivateKeyOutput) ElementType

func (PrivateKeyOutput) ElementType() reflect.Type

func (PrivateKeyOutput) PrivateKeyOpenssh added in v4.4.0

func (o PrivateKeyOutput) PrivateKeyOpenssh() pulumi.StringOutput

Private key data in [OpenSSH PEM (RFC 4716)](https://datatracker.ietf.org/doc/html/rfc4716) format.

func (PrivateKeyOutput) PrivateKeyPem added in v4.4.0

func (o PrivateKeyOutput) PrivateKeyPem() pulumi.StringOutput

Private key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.

func (PrivateKeyOutput) PublicKeyFingerprintMd5 added in v4.4.0

func (o PrivateKeyOutput) PublicKeyFingerprintMd5() pulumi.StringOutput

The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:...`. Only available if the selected private key format is compatible, similarly to `publicKeyOpenssh` and the ECDSA P224 limitations.

func (PrivateKeyOutput) PublicKeyFingerprintSha256 added in v4.4.0

func (o PrivateKeyOutput) PublicKeyFingerprintSha256() pulumi.StringOutput

The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:...`. Only available if the selected private key format is compatible, similarly to `publicKeyOpenssh` and the ECDSA P224 limitations.

func (PrivateKeyOutput) PublicKeyOpenssh added in v4.4.0

func (o PrivateKeyOutput) PublicKeyOpenssh() pulumi.StringOutput

The public key data in "Authorized Keys".

func (PrivateKeyOutput) PublicKeyPem added in v4.4.0

func (o PrivateKeyOutput) PublicKeyPem() pulumi.StringOutput

Public key data in PEM (RFC 1421).

func (PrivateKeyOutput) RsaBits added in v4.4.0

func (o PrivateKeyOutput) RsaBits() pulumi.IntPtrOutput

When `algorithm` is `RSA`, the size of the generated RSA key, in bits (default: `2048`).

func (PrivateKeyOutput) ToOutput added in v4.11.0

func (PrivateKeyOutput) ToPrivateKeyOutput

func (o PrivateKeyOutput) ToPrivateKeyOutput() PrivateKeyOutput

func (PrivateKeyOutput) ToPrivateKeyOutputWithContext

func (o PrivateKeyOutput) ToPrivateKeyOutputWithContext(ctx context.Context) PrivateKeyOutput

type PrivateKeyState

type PrivateKeyState struct {
	// Name of the algorithm to use when generating the private key. Currently-supported values are `RSA`, `ECDSA` and `ED25519`.
	Algorithm pulumi.StringPtrInput
	// When `algorithm` is `ECDSA`, the name of the elliptic curve to use. Currently-supported values are `P224`, `P256`, `P384` or `P521` (default: `P224`).
	EcdsaCurve pulumi.StringPtrInput
	// Private key data in [OpenSSH PEM (RFC 4716)](https://datatracker.ietf.org/doc/html/rfc4716) format.
	PrivateKeyOpenssh pulumi.StringPtrInput
	// Private key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
	PrivateKeyPem pulumi.StringPtrInput
	// The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:...`. Only available if the selected private key format is compatible, similarly to `publicKeyOpenssh` and the ECDSA P224 limitations.
	PublicKeyFingerprintMd5 pulumi.StringPtrInput
	// The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:...`. Only available if the selected private key format is compatible, similarly to `publicKeyOpenssh` and the ECDSA P224 limitations.
	PublicKeyFingerprintSha256 pulumi.StringPtrInput
	// The public key data in "Authorized Keys".
	PublicKeyOpenssh pulumi.StringPtrInput
	// Public key data in PEM (RFC 1421).
	PublicKeyPem pulumi.StringPtrInput
	// When `algorithm` is `RSA`, the size of the generated RSA key, in bits (default: `2048`).
	RsaBits pulumi.IntPtrInput
}

func (PrivateKeyState) ElementType

func (PrivateKeyState) ElementType() reflect.Type

type Provider

type Provider struct {
	pulumi.ProviderResourceState
}

The provider type for the tls package. By default, resources use package-wide configuration settings, however an explicit `Provider` instance may be created and passed during resource construction to achieve fine-grained programmatic control over provider settings. See the [documentation](https://www.pulumi.com/docs/reference/programming-model/#providers) for more information.

func NewProvider

func NewProvider(ctx *pulumi.Context,
	name string, args *ProviderArgs, opts ...pulumi.ResourceOption) (*Provider, error)

NewProvider registers a new resource with the given unique name, arguments, and options.

func (*Provider) ElementType

func (*Provider) ElementType() reflect.Type

func (*Provider) ToOutput added in v4.11.0

func (i *Provider) ToOutput(ctx context.Context) pulumix.Output[*Provider]

func (*Provider) ToProviderOutput

func (i *Provider) ToProviderOutput() ProviderOutput

func (*Provider) ToProviderOutputWithContext

func (i *Provider) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

type ProviderArgs

type ProviderArgs struct {
	// Proxy used by resources and data sources that connect to external endpoints.
	Proxy ProviderProxyPtrInput
}

The set of arguments for constructing a Provider resource.

func (ProviderArgs) ElementType

func (ProviderArgs) ElementType() reflect.Type

type ProviderInput

type ProviderInput interface {
	pulumi.Input

	ToProviderOutput() ProviderOutput
	ToProviderOutputWithContext(ctx context.Context) ProviderOutput
}

type ProviderOutput

type ProviderOutput struct{ *pulumi.OutputState }

func (ProviderOutput) ElementType

func (ProviderOutput) ElementType() reflect.Type

func (ProviderOutput) ToOutput added in v4.11.0

func (ProviderOutput) ToProviderOutput

func (o ProviderOutput) ToProviderOutput() ProviderOutput

func (ProviderOutput) ToProviderOutputWithContext

func (o ProviderOutput) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

type ProviderProxy added in v4.3.0

type ProviderProxy struct {
	FromEnv  *bool   `pulumi:"fromEnv"`
	Password *string `pulumi:"password"`
	Url      *string `pulumi:"url"`
	Username *string `pulumi:"username"`
}

type ProviderProxyArgs added in v4.3.0

type ProviderProxyArgs struct {
	FromEnv  pulumi.BoolPtrInput   `pulumi:"fromEnv"`
	Password pulumi.StringPtrInput `pulumi:"password"`
	Url      pulumi.StringPtrInput `pulumi:"url"`
	Username pulumi.StringPtrInput `pulumi:"username"`
}

func (ProviderProxyArgs) ElementType added in v4.3.0

func (ProviderProxyArgs) ElementType() reflect.Type

func (ProviderProxyArgs) ToOutput added in v4.11.0

func (ProviderProxyArgs) ToProviderProxyOutput added in v4.3.0

func (i ProviderProxyArgs) ToProviderProxyOutput() ProviderProxyOutput

func (ProviderProxyArgs) ToProviderProxyOutputWithContext added in v4.3.0

func (i ProviderProxyArgs) ToProviderProxyOutputWithContext(ctx context.Context) ProviderProxyOutput

func (ProviderProxyArgs) ToProviderProxyPtrOutput added in v4.3.0

func (i ProviderProxyArgs) ToProviderProxyPtrOutput() ProviderProxyPtrOutput

func (ProviderProxyArgs) ToProviderProxyPtrOutputWithContext added in v4.3.0

func (i ProviderProxyArgs) ToProviderProxyPtrOutputWithContext(ctx context.Context) ProviderProxyPtrOutput

type ProviderProxyInput added in v4.3.0

type ProviderProxyInput interface {
	pulumi.Input

	ToProviderProxyOutput() ProviderProxyOutput
	ToProviderProxyOutputWithContext(context.Context) ProviderProxyOutput
}

ProviderProxyInput is an input type that accepts ProviderProxyArgs and ProviderProxyOutput values. You can construct a concrete instance of `ProviderProxyInput` via:

ProviderProxyArgs{...}

type ProviderProxyOutput added in v4.3.0

type ProviderProxyOutput struct{ *pulumi.OutputState }

func (ProviderProxyOutput) ElementType added in v4.3.0

func (ProviderProxyOutput) ElementType() reflect.Type

func (ProviderProxyOutput) FromEnv added in v4.3.0

func (ProviderProxyOutput) Password added in v4.3.0

func (ProviderProxyOutput) ToOutput added in v4.11.0

func (ProviderProxyOutput) ToProviderProxyOutput added in v4.3.0

func (o ProviderProxyOutput) ToProviderProxyOutput() ProviderProxyOutput

func (ProviderProxyOutput) ToProviderProxyOutputWithContext added in v4.3.0

func (o ProviderProxyOutput) ToProviderProxyOutputWithContext(ctx context.Context) ProviderProxyOutput

func (ProviderProxyOutput) ToProviderProxyPtrOutput added in v4.3.0

func (o ProviderProxyOutput) ToProviderProxyPtrOutput() ProviderProxyPtrOutput

func (ProviderProxyOutput) ToProviderProxyPtrOutputWithContext added in v4.3.0

func (o ProviderProxyOutput) ToProviderProxyPtrOutputWithContext(ctx context.Context) ProviderProxyPtrOutput

func (ProviderProxyOutput) Url added in v4.3.0

func (ProviderProxyOutput) Username added in v4.3.0

type ProviderProxyPtrInput added in v4.3.0

type ProviderProxyPtrInput interface {
	pulumi.Input

	ToProviderProxyPtrOutput() ProviderProxyPtrOutput
	ToProviderProxyPtrOutputWithContext(context.Context) ProviderProxyPtrOutput
}

ProviderProxyPtrInput is an input type that accepts ProviderProxyArgs, ProviderProxyPtr and ProviderProxyPtrOutput values. You can construct a concrete instance of `ProviderProxyPtrInput` via:

        ProviderProxyArgs{...}

or:

        nil

func ProviderProxyPtr added in v4.3.0

func ProviderProxyPtr(v *ProviderProxyArgs) ProviderProxyPtrInput

type ProviderProxyPtrOutput added in v4.3.0

type ProviderProxyPtrOutput struct{ *pulumi.OutputState }

func (ProviderProxyPtrOutput) Elem added in v4.3.0

func (ProviderProxyPtrOutput) ElementType added in v4.3.0

func (ProviderProxyPtrOutput) ElementType() reflect.Type

func (ProviderProxyPtrOutput) FromEnv added in v4.3.0

func (ProviderProxyPtrOutput) Password added in v4.3.0

func (ProviderProxyPtrOutput) ToOutput added in v4.11.0

func (ProviderProxyPtrOutput) ToProviderProxyPtrOutput added in v4.3.0

func (o ProviderProxyPtrOutput) ToProviderProxyPtrOutput() ProviderProxyPtrOutput

func (ProviderProxyPtrOutput) ToProviderProxyPtrOutputWithContext added in v4.3.0

func (o ProviderProxyPtrOutput) ToProviderProxyPtrOutputWithContext(ctx context.Context) ProviderProxyPtrOutput

func (ProviderProxyPtrOutput) Url added in v4.3.0

func (ProviderProxyPtrOutput) Username added in v4.3.0

type SelfSignedCert

type SelfSignedCert struct {
	pulumi.CustomResourceState

	// List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `anyExtended`, `certSigning`, `clientAuth`, `codeSigning`, `contentCommitment`, `crlSigning`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `emailProtection`, `encipherOnly`, `ipsecEndSystem`, `ipsecTunnel`, `ipsecUser`, `keyAgreement`, `keyEncipherment`, `microsoftCommercialCodeSigning`, `microsoftKernelCodeSigning`, `microsoftServerGatedCrypto`, `netscapeServerGatedCrypto`, `ocspSigning`, `serverAuth`, `timestamping`.
	AllowedUses pulumi.StringArrayOutput `pulumi:"allowedUses"`
	// Certificate data in PEM (RFC 1421).
	CertPem pulumi.StringOutput `pulumi:"certPem"`
	// List of DNS names for which a certificate is being requested (i.e. certificate subjects).
	DnsNames pulumi.StringArrayOutput `pulumi:"dnsNames"`
	// The resource will consider the certificate to have expired the given number of hours before its actual expiry time. This
	// can be useful to deploy an updated certificate in advance of the expiration of the current certificate. However, the old
	// certificate remains valid until its true expiration time, since this resource does not (and cannot) support certificate
	// revocation. Also, this advance update can only be performed should the Terraform configuration be applied during the
	// early renewal period. (default: `0`)
	EarlyRenewalHours pulumi.IntPtrOutput `pulumi:"earlyRenewalHours"`
	// List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
	IpAddresses pulumi.StringArrayOutput `pulumi:"ipAddresses"`
	// Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
	IsCaCertificate pulumi.BoolPtrOutput `pulumi:"isCaCertificate"`
	// Name of the algorithm used when generating the private key provided in `privateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.
	//
	// Deprecated: This is now ignored, as the key algorithm is inferred from the `private_key_pem`.
	KeyAlgorithm pulumi.StringOutput `pulumi:"keyAlgorithm"`
	// Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong
	// to. This can be read from a separate file using the [`file`](https://www.terraform.io/language/functions/file)
	// interpolation function. Only an irreversible secure hash of the private key will be stored in the Terraform state.
	PrivateKeyPem pulumi.StringOutput `pulumi:"privateKeyPem"`
	// Is the certificate either expired (i.e. beyond the `validityPeriodHours`) or ready for an early renewal (i.e. within the `earlyRenewalHours`)?
	ReadyForRenewal pulumi.BoolOutput `pulumi:"readyForRenewal"`
	// Should the generated certificate include an [authority key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
	SetAuthorityKeyId pulumi.BoolPtrOutput `pulumi:"setAuthorityKeyId"`
	// Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
	SetSubjectKeyId pulumi.BoolPtrOutput `pulumi:"setSubjectKeyId"`
	// The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
	Subject SelfSignedCertSubjectPtrOutput `pulumi:"subject"`
	// List of URIs for which a certificate is being requested (i.e. certificate subjects).
	Uris pulumi.StringArrayOutput `pulumi:"uris"`
	// The time until which the certificate is invalid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	ValidityEndTime pulumi.StringOutput `pulumi:"validityEndTime"`
	// Number of hours, after initial issuing, that the certificate will remain valid for.
	ValidityPeriodHours pulumi.IntOutput `pulumi:"validityPeriodHours"`
	// The time after which the certificate is valid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	ValidityStartTime pulumi.StringOutput `pulumi:"validityStartTime"`
}

func GetSelfSignedCert

func GetSelfSignedCert(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SelfSignedCertState, opts ...pulumi.ResourceOption) (*SelfSignedCert, error)

GetSelfSignedCert gets an existing SelfSignedCert resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSelfSignedCert

func NewSelfSignedCert(ctx *pulumi.Context,
	name string, args *SelfSignedCertArgs, opts ...pulumi.ResourceOption) (*SelfSignedCert, error)

NewSelfSignedCert registers a new resource with the given unique name, arguments, and options.

func (*SelfSignedCert) ElementType

func (*SelfSignedCert) ElementType() reflect.Type

func (*SelfSignedCert) ToOutput added in v4.11.0

func (*SelfSignedCert) ToSelfSignedCertOutput

func (i *SelfSignedCert) ToSelfSignedCertOutput() SelfSignedCertOutput

func (*SelfSignedCert) ToSelfSignedCertOutputWithContext

func (i *SelfSignedCert) ToSelfSignedCertOutputWithContext(ctx context.Context) SelfSignedCertOutput

type SelfSignedCertArgs

type SelfSignedCertArgs struct {
	// List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `anyExtended`, `certSigning`, `clientAuth`, `codeSigning`, `contentCommitment`, `crlSigning`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `emailProtection`, `encipherOnly`, `ipsecEndSystem`, `ipsecTunnel`, `ipsecUser`, `keyAgreement`, `keyEncipherment`, `microsoftCommercialCodeSigning`, `microsoftKernelCodeSigning`, `microsoftServerGatedCrypto`, `netscapeServerGatedCrypto`, `ocspSigning`, `serverAuth`, `timestamping`.
	AllowedUses pulumi.StringArrayInput
	// List of DNS names for which a certificate is being requested (i.e. certificate subjects).
	DnsNames pulumi.StringArrayInput
	// The resource will consider the certificate to have expired the given number of hours before its actual expiry time. This
	// can be useful to deploy an updated certificate in advance of the expiration of the current certificate. However, the old
	// certificate remains valid until its true expiration time, since this resource does not (and cannot) support certificate
	// revocation. Also, this advance update can only be performed should the Terraform configuration be applied during the
	// early renewal period. (default: `0`)
	EarlyRenewalHours pulumi.IntPtrInput
	// List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
	IpAddresses pulumi.StringArrayInput
	// Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
	IsCaCertificate pulumi.BoolPtrInput
	// Name of the algorithm used when generating the private key provided in `privateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.
	//
	// Deprecated: This is now ignored, as the key algorithm is inferred from the `private_key_pem`.
	KeyAlgorithm pulumi.StringPtrInput
	// Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong
	// to. This can be read from a separate file using the [`file`](https://www.terraform.io/language/functions/file)
	// interpolation function. Only an irreversible secure hash of the private key will be stored in the Terraform state.
	PrivateKeyPem pulumi.StringInput
	// Should the generated certificate include an [authority key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
	SetAuthorityKeyId pulumi.BoolPtrInput
	// Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
	SetSubjectKeyId pulumi.BoolPtrInput
	// The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
	Subject SelfSignedCertSubjectPtrInput
	// List of URIs for which a certificate is being requested (i.e. certificate subjects).
	Uris pulumi.StringArrayInput
	// Number of hours, after initial issuing, that the certificate will remain valid for.
	ValidityPeriodHours pulumi.IntInput
}

The set of arguments for constructing a SelfSignedCert resource.

func (SelfSignedCertArgs) ElementType

func (SelfSignedCertArgs) ElementType() reflect.Type

type SelfSignedCertArray

type SelfSignedCertArray []SelfSignedCertInput

func (SelfSignedCertArray) ElementType

func (SelfSignedCertArray) ElementType() reflect.Type

func (SelfSignedCertArray) ToOutput added in v4.11.0

func (SelfSignedCertArray) ToSelfSignedCertArrayOutput

func (i SelfSignedCertArray) ToSelfSignedCertArrayOutput() SelfSignedCertArrayOutput

func (SelfSignedCertArray) ToSelfSignedCertArrayOutputWithContext

func (i SelfSignedCertArray) ToSelfSignedCertArrayOutputWithContext(ctx context.Context) SelfSignedCertArrayOutput

type SelfSignedCertArrayInput

type SelfSignedCertArrayInput interface {
	pulumi.Input

	ToSelfSignedCertArrayOutput() SelfSignedCertArrayOutput
	ToSelfSignedCertArrayOutputWithContext(context.Context) SelfSignedCertArrayOutput
}

SelfSignedCertArrayInput is an input type that accepts SelfSignedCertArray and SelfSignedCertArrayOutput values. You can construct a concrete instance of `SelfSignedCertArrayInput` via:

SelfSignedCertArray{ SelfSignedCertArgs{...} }

type SelfSignedCertArrayOutput

type SelfSignedCertArrayOutput struct{ *pulumi.OutputState }

func (SelfSignedCertArrayOutput) ElementType

func (SelfSignedCertArrayOutput) ElementType() reflect.Type

func (SelfSignedCertArrayOutput) Index

func (SelfSignedCertArrayOutput) ToOutput added in v4.11.0

func (SelfSignedCertArrayOutput) ToSelfSignedCertArrayOutput

func (o SelfSignedCertArrayOutput) ToSelfSignedCertArrayOutput() SelfSignedCertArrayOutput

func (SelfSignedCertArrayOutput) ToSelfSignedCertArrayOutputWithContext

func (o SelfSignedCertArrayOutput) ToSelfSignedCertArrayOutputWithContext(ctx context.Context) SelfSignedCertArrayOutput

type SelfSignedCertInput

type SelfSignedCertInput interface {
	pulumi.Input

	ToSelfSignedCertOutput() SelfSignedCertOutput
	ToSelfSignedCertOutputWithContext(ctx context.Context) SelfSignedCertOutput
}

type SelfSignedCertMap

type SelfSignedCertMap map[string]SelfSignedCertInput

func (SelfSignedCertMap) ElementType

func (SelfSignedCertMap) ElementType() reflect.Type

func (SelfSignedCertMap) ToOutput added in v4.11.0

func (SelfSignedCertMap) ToSelfSignedCertMapOutput

func (i SelfSignedCertMap) ToSelfSignedCertMapOutput() SelfSignedCertMapOutput

func (SelfSignedCertMap) ToSelfSignedCertMapOutputWithContext

func (i SelfSignedCertMap) ToSelfSignedCertMapOutputWithContext(ctx context.Context) SelfSignedCertMapOutput

type SelfSignedCertMapInput

type SelfSignedCertMapInput interface {
	pulumi.Input

	ToSelfSignedCertMapOutput() SelfSignedCertMapOutput
	ToSelfSignedCertMapOutputWithContext(context.Context) SelfSignedCertMapOutput
}

SelfSignedCertMapInput is an input type that accepts SelfSignedCertMap and SelfSignedCertMapOutput values. You can construct a concrete instance of `SelfSignedCertMapInput` via:

SelfSignedCertMap{ "key": SelfSignedCertArgs{...} }

type SelfSignedCertMapOutput

type SelfSignedCertMapOutput struct{ *pulumi.OutputState }

func (SelfSignedCertMapOutput) ElementType

func (SelfSignedCertMapOutput) ElementType() reflect.Type

func (SelfSignedCertMapOutput) MapIndex

func (SelfSignedCertMapOutput) ToOutput added in v4.11.0

func (SelfSignedCertMapOutput) ToSelfSignedCertMapOutput

func (o SelfSignedCertMapOutput) ToSelfSignedCertMapOutput() SelfSignedCertMapOutput

func (SelfSignedCertMapOutput) ToSelfSignedCertMapOutputWithContext

func (o SelfSignedCertMapOutput) ToSelfSignedCertMapOutputWithContext(ctx context.Context) SelfSignedCertMapOutput

type SelfSignedCertOutput

type SelfSignedCertOutput struct{ *pulumi.OutputState }

func (SelfSignedCertOutput) AllowedUses added in v4.4.0

List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `anyExtended`, `certSigning`, `clientAuth`, `codeSigning`, `contentCommitment`, `crlSigning`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `emailProtection`, `encipherOnly`, `ipsecEndSystem`, `ipsecTunnel`, `ipsecUser`, `keyAgreement`, `keyEncipherment`, `microsoftCommercialCodeSigning`, `microsoftKernelCodeSigning`, `microsoftServerGatedCrypto`, `netscapeServerGatedCrypto`, `ocspSigning`, `serverAuth`, `timestamping`.

func (SelfSignedCertOutput) CertPem added in v4.4.0

Certificate data in PEM (RFC 1421).

func (SelfSignedCertOutput) DnsNames added in v4.4.0

List of DNS names for which a certificate is being requested (i.e. certificate subjects).

func (SelfSignedCertOutput) EarlyRenewalHours added in v4.4.0

func (o SelfSignedCertOutput) EarlyRenewalHours() pulumi.IntPtrOutput

The resource will consider the certificate to have expired the given number of hours before its actual expiry time. This can be useful to deploy an updated certificate in advance of the expiration of the current certificate. However, the old certificate remains valid until its true expiration time, since this resource does not (and cannot) support certificate revocation. Also, this advance update can only be performed should the Terraform configuration be applied during the early renewal period. (default: `0`)

func (SelfSignedCertOutput) ElementType

func (SelfSignedCertOutput) ElementType() reflect.Type

func (SelfSignedCertOutput) IpAddresses added in v4.4.0

List of IP addresses for which a certificate is being requested (i.e. certificate subjects).

func (SelfSignedCertOutput) IsCaCertificate added in v4.4.0

func (o SelfSignedCertOutput) IsCaCertificate() pulumi.BoolPtrOutput

Is the generated certificate representing a Certificate Authority (CA) (default: `false`).

func (SelfSignedCertOutput) KeyAlgorithm deprecated added in v4.4.0

func (o SelfSignedCertOutput) KeyAlgorithm() pulumi.StringOutput

Name of the algorithm used when generating the private key provided in `privateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.

Deprecated: This is now ignored, as the key algorithm is inferred from the `private_key_pem`.

func (SelfSignedCertOutput) PrivateKeyPem added in v4.4.0

func (o SelfSignedCertOutput) PrivateKeyPem() pulumi.StringOutput

Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the [`file`](https://www.terraform.io/language/functions/file) interpolation function. Only an irreversible secure hash of the private key will be stored in the Terraform state.

func (SelfSignedCertOutput) ReadyForRenewal added in v4.4.0

func (o SelfSignedCertOutput) ReadyForRenewal() pulumi.BoolOutput

Is the certificate either expired (i.e. beyond the `validityPeriodHours`) or ready for an early renewal (i.e. within the `earlyRenewalHours`)?

func (SelfSignedCertOutput) SetAuthorityKeyId added in v4.5.0

func (o SelfSignedCertOutput) SetAuthorityKeyId() pulumi.BoolPtrOutput

Should the generated certificate include an [authority key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).

func (SelfSignedCertOutput) SetSubjectKeyId added in v4.4.0

func (o SelfSignedCertOutput) SetSubjectKeyId() pulumi.BoolPtrOutput

Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).

func (SelfSignedCertOutput) Subject added in v4.5.0

The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.

func (SelfSignedCertOutput) ToOutput added in v4.11.0

func (SelfSignedCertOutput) ToSelfSignedCertOutput

func (o SelfSignedCertOutput) ToSelfSignedCertOutput() SelfSignedCertOutput

func (SelfSignedCertOutput) ToSelfSignedCertOutputWithContext

func (o SelfSignedCertOutput) ToSelfSignedCertOutputWithContext(ctx context.Context) SelfSignedCertOutput

func (SelfSignedCertOutput) Uris added in v4.4.0

List of URIs for which a certificate is being requested (i.e. certificate subjects).

func (SelfSignedCertOutput) ValidityEndTime added in v4.4.0

func (o SelfSignedCertOutput) ValidityEndTime() pulumi.StringOutput

The time until which the certificate is invalid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.

func (SelfSignedCertOutput) ValidityPeriodHours added in v4.4.0

func (o SelfSignedCertOutput) ValidityPeriodHours() pulumi.IntOutput

Number of hours, after initial issuing, that the certificate will remain valid for.

func (SelfSignedCertOutput) ValidityStartTime added in v4.4.0

func (o SelfSignedCertOutput) ValidityStartTime() pulumi.StringOutput

The time after which the certificate is valid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.

type SelfSignedCertState

type SelfSignedCertState struct {
	// List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `anyExtended`, `certSigning`, `clientAuth`, `codeSigning`, `contentCommitment`, `crlSigning`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `emailProtection`, `encipherOnly`, `ipsecEndSystem`, `ipsecTunnel`, `ipsecUser`, `keyAgreement`, `keyEncipherment`, `microsoftCommercialCodeSigning`, `microsoftKernelCodeSigning`, `microsoftServerGatedCrypto`, `netscapeServerGatedCrypto`, `ocspSigning`, `serverAuth`, `timestamping`.
	AllowedUses pulumi.StringArrayInput
	// Certificate data in PEM (RFC 1421).
	CertPem pulumi.StringPtrInput
	// List of DNS names for which a certificate is being requested (i.e. certificate subjects).
	DnsNames pulumi.StringArrayInput
	// The resource will consider the certificate to have expired the given number of hours before its actual expiry time. This
	// can be useful to deploy an updated certificate in advance of the expiration of the current certificate. However, the old
	// certificate remains valid until its true expiration time, since this resource does not (and cannot) support certificate
	// revocation. Also, this advance update can only be performed should the Terraform configuration be applied during the
	// early renewal period. (default: `0`)
	EarlyRenewalHours pulumi.IntPtrInput
	// List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
	IpAddresses pulumi.StringArrayInput
	// Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
	IsCaCertificate pulumi.BoolPtrInput
	// Name of the algorithm used when generating the private key provided in `privateKeyPem`. **NOTE**: this is deprecated and ignored, as the key algorithm is now inferred from the key.
	//
	// Deprecated: This is now ignored, as the key algorithm is inferred from the `private_key_pem`.
	KeyAlgorithm pulumi.StringPtrInput
	// Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong
	// to. This can be read from a separate file using the [`file`](https://www.terraform.io/language/functions/file)
	// interpolation function. Only an irreversible secure hash of the private key will be stored in the Terraform state.
	PrivateKeyPem pulumi.StringPtrInput
	// Is the certificate either expired (i.e. beyond the `validityPeriodHours`) or ready for an early renewal (i.e. within the `earlyRenewalHours`)?
	ReadyForRenewal pulumi.BoolPtrInput
	// Should the generated certificate include an [authority key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
	SetAuthorityKeyId pulumi.BoolPtrInput
	// Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
	SetSubjectKeyId pulumi.BoolPtrInput
	// The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
	Subject SelfSignedCertSubjectPtrInput
	// List of URIs for which a certificate is being requested (i.e. certificate subjects).
	Uris pulumi.StringArrayInput
	// The time until which the certificate is invalid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	ValidityEndTime pulumi.StringPtrInput
	// Number of hours, after initial issuing, that the certificate will remain valid for.
	ValidityPeriodHours pulumi.IntPtrInput
	// The time after which the certificate is valid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
	ValidityStartTime pulumi.StringPtrInput
}

func (SelfSignedCertState) ElementType

func (SelfSignedCertState) ElementType() reflect.Type

type SelfSignedCertSubject

type SelfSignedCertSubject struct {
	// Distinguished name: `CN`
	CommonName *string `pulumi:"commonName"`
	// Distinguished name: `C`
	Country *string `pulumi:"country"`
	// Distinguished name: `L`
	Locality *string `pulumi:"locality"`
	// Distinguished name: `O`
	Organization *string `pulumi:"organization"`
	// Distinguished name: `OU`
	OrganizationalUnit *string `pulumi:"organizationalUnit"`
	// Distinguished name: `PC`
	PostalCode *string `pulumi:"postalCode"`
	// Distinguished name: `ST`
	Province *string `pulumi:"province"`
	// Distinguished name: `SERIALNUMBER`
	SerialNumber *string `pulumi:"serialNumber"`
	// Distinguished name: `STREET`
	StreetAddresses []string `pulumi:"streetAddresses"`
}

type SelfSignedCertSubjectArgs

type SelfSignedCertSubjectArgs struct {
	// Distinguished name: `CN`
	CommonName pulumi.StringPtrInput `pulumi:"commonName"`
	// Distinguished name: `C`
	Country pulumi.StringPtrInput `pulumi:"country"`
	// Distinguished name: `L`
	Locality pulumi.StringPtrInput `pulumi:"locality"`
	// Distinguished name: `O`
	Organization pulumi.StringPtrInput `pulumi:"organization"`
	// Distinguished name: `OU`
	OrganizationalUnit pulumi.StringPtrInput `pulumi:"organizationalUnit"`
	// Distinguished name: `PC`
	PostalCode pulumi.StringPtrInput `pulumi:"postalCode"`
	// Distinguished name: `ST`
	Province pulumi.StringPtrInput `pulumi:"province"`
	// Distinguished name: `SERIALNUMBER`
	SerialNumber pulumi.StringPtrInput `pulumi:"serialNumber"`
	// Distinguished name: `STREET`
	StreetAddresses pulumi.StringArrayInput `pulumi:"streetAddresses"`
}

func (SelfSignedCertSubjectArgs) ElementType

func (SelfSignedCertSubjectArgs) ElementType() reflect.Type

func (SelfSignedCertSubjectArgs) ToOutput added in v4.11.0

func (SelfSignedCertSubjectArgs) ToSelfSignedCertSubjectOutput

func (i SelfSignedCertSubjectArgs) ToSelfSignedCertSubjectOutput() SelfSignedCertSubjectOutput

func (SelfSignedCertSubjectArgs) ToSelfSignedCertSubjectOutputWithContext

func (i SelfSignedCertSubjectArgs) ToSelfSignedCertSubjectOutputWithContext(ctx context.Context) SelfSignedCertSubjectOutput

func (SelfSignedCertSubjectArgs) ToSelfSignedCertSubjectPtrOutput added in v4.5.0

func (i SelfSignedCertSubjectArgs) ToSelfSignedCertSubjectPtrOutput() SelfSignedCertSubjectPtrOutput

func (SelfSignedCertSubjectArgs) ToSelfSignedCertSubjectPtrOutputWithContext added in v4.5.0

func (i SelfSignedCertSubjectArgs) ToSelfSignedCertSubjectPtrOutputWithContext(ctx context.Context) SelfSignedCertSubjectPtrOutput

type SelfSignedCertSubjectInput

type SelfSignedCertSubjectInput interface {
	pulumi.Input

	ToSelfSignedCertSubjectOutput() SelfSignedCertSubjectOutput
	ToSelfSignedCertSubjectOutputWithContext(context.Context) SelfSignedCertSubjectOutput
}

SelfSignedCertSubjectInput is an input type that accepts SelfSignedCertSubjectArgs and SelfSignedCertSubjectOutput values. You can construct a concrete instance of `SelfSignedCertSubjectInput` via:

SelfSignedCertSubjectArgs{...}

type SelfSignedCertSubjectOutput

type SelfSignedCertSubjectOutput struct{ *pulumi.OutputState }

func (SelfSignedCertSubjectOutput) CommonName

Distinguished name: `CN`

func (SelfSignedCertSubjectOutput) Country

Distinguished name: `C`

func (SelfSignedCertSubjectOutput) ElementType

func (SelfSignedCertSubjectOutput) Locality

Distinguished name: `L`

func (SelfSignedCertSubjectOutput) Organization

Distinguished name: `O`

func (SelfSignedCertSubjectOutput) OrganizationalUnit

func (o SelfSignedCertSubjectOutput) OrganizationalUnit() pulumi.StringPtrOutput

Distinguished name: `OU`

func (SelfSignedCertSubjectOutput) PostalCode

Distinguished name: `PC`

func (SelfSignedCertSubjectOutput) Province

Distinguished name: `ST`

func (SelfSignedCertSubjectOutput) SerialNumber

Distinguished name: `SERIALNUMBER`

func (SelfSignedCertSubjectOutput) StreetAddresses

Distinguished name: `STREET`

func (SelfSignedCertSubjectOutput) ToOutput added in v4.11.0

func (SelfSignedCertSubjectOutput) ToSelfSignedCertSubjectOutput

func (o SelfSignedCertSubjectOutput) ToSelfSignedCertSubjectOutput() SelfSignedCertSubjectOutput

func (SelfSignedCertSubjectOutput) ToSelfSignedCertSubjectOutputWithContext

func (o SelfSignedCertSubjectOutput) ToSelfSignedCertSubjectOutputWithContext(ctx context.Context) SelfSignedCertSubjectOutput

func (SelfSignedCertSubjectOutput) ToSelfSignedCertSubjectPtrOutput added in v4.5.0

func (o SelfSignedCertSubjectOutput) ToSelfSignedCertSubjectPtrOutput() SelfSignedCertSubjectPtrOutput

func (SelfSignedCertSubjectOutput) ToSelfSignedCertSubjectPtrOutputWithContext added in v4.5.0

func (o SelfSignedCertSubjectOutput) ToSelfSignedCertSubjectPtrOutputWithContext(ctx context.Context) SelfSignedCertSubjectPtrOutput

type SelfSignedCertSubjectPtrInput added in v4.5.0

type SelfSignedCertSubjectPtrInput interface {
	pulumi.Input

	ToSelfSignedCertSubjectPtrOutput() SelfSignedCertSubjectPtrOutput
	ToSelfSignedCertSubjectPtrOutputWithContext(context.Context) SelfSignedCertSubjectPtrOutput
}

SelfSignedCertSubjectPtrInput is an input type that accepts SelfSignedCertSubjectArgs, SelfSignedCertSubjectPtr and SelfSignedCertSubjectPtrOutput values. You can construct a concrete instance of `SelfSignedCertSubjectPtrInput` via:

        SelfSignedCertSubjectArgs{...}

or:

        nil

func SelfSignedCertSubjectPtr added in v4.5.0

func SelfSignedCertSubjectPtr(v *SelfSignedCertSubjectArgs) SelfSignedCertSubjectPtrInput

type SelfSignedCertSubjectPtrOutput added in v4.5.0

type SelfSignedCertSubjectPtrOutput struct{ *pulumi.OutputState }

func (SelfSignedCertSubjectPtrOutput) CommonName added in v4.5.0

Distinguished name: `CN`

func (SelfSignedCertSubjectPtrOutput) Country added in v4.5.0

Distinguished name: `C`

func (SelfSignedCertSubjectPtrOutput) Elem added in v4.5.0

func (SelfSignedCertSubjectPtrOutput) ElementType added in v4.5.0

func (SelfSignedCertSubjectPtrOutput) Locality added in v4.5.0

Distinguished name: `L`

func (SelfSignedCertSubjectPtrOutput) Organization added in v4.5.0

Distinguished name: `O`

func (SelfSignedCertSubjectPtrOutput) OrganizationalUnit added in v4.5.0

func (o SelfSignedCertSubjectPtrOutput) OrganizationalUnit() pulumi.StringPtrOutput

Distinguished name: `OU`

func (SelfSignedCertSubjectPtrOutput) PostalCode added in v4.5.0

Distinguished name: `PC`

func (SelfSignedCertSubjectPtrOutput) Province added in v4.5.0

Distinguished name: `ST`

func (SelfSignedCertSubjectPtrOutput) SerialNumber added in v4.5.0

Distinguished name: `SERIALNUMBER`

func (SelfSignedCertSubjectPtrOutput) StreetAddresses added in v4.5.0

Distinguished name: `STREET`

func (SelfSignedCertSubjectPtrOutput) ToOutput added in v4.11.0

func (SelfSignedCertSubjectPtrOutput) ToSelfSignedCertSubjectPtrOutput added in v4.5.0

func (o SelfSignedCertSubjectPtrOutput) ToSelfSignedCertSubjectPtrOutput() SelfSignedCertSubjectPtrOutput

func (SelfSignedCertSubjectPtrOutput) ToSelfSignedCertSubjectPtrOutputWithContext added in v4.5.0

func (o SelfSignedCertSubjectPtrOutput) ToSelfSignedCertSubjectPtrOutputWithContext(ctx context.Context) SelfSignedCertSubjectPtrOutput

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL