Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. certificatemanager
  5. certificatemanager/v1
  6. TrustConfig

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.certificatemanager/v1.TrustConfig

Explore with Pulumi AI

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

Creates a new TrustConfig in a given project and location.

Create TrustConfig Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new TrustConfig(name: string, args: TrustConfigArgs, opts?: CustomResourceOptions);
@overload
def TrustConfig(resource_name: str,
                args: TrustConfigArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def TrustConfig(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                trust_config_id: Optional[str] = None,
                description: Optional[str] = None,
                etag: Optional[str] = None,
                labels: Optional[Mapping[str, str]] = None,
                location: Optional[str] = None,
                name: Optional[str] = None,
                project: Optional[str] = None,
                trust_stores: Optional[Sequence[TrustStoreArgs]] = None)
func NewTrustConfig(ctx *Context, name string, args TrustConfigArgs, opts ...ResourceOption) (*TrustConfig, error)
public TrustConfig(string name, TrustConfigArgs args, CustomResourceOptions? opts = null)
public TrustConfig(String name, TrustConfigArgs args)
public TrustConfig(String name, TrustConfigArgs args, CustomResourceOptions options)

type: google-native:certificatemanager/v1:TrustConfig
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. TrustConfigArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. TrustConfigArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. TrustConfigArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. TrustConfigArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. TrustConfigArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var trustConfigResource = new GoogleNative.CertificateManager.V1.TrustConfig("trustConfigResource", new()
{
    TrustConfigId = "string",
    Description = "string",
    Etag = "string",
    Labels = 
    {
        { "string", "string" },
    },
    Location = "string",
    Name = "string",
    Project = "string",
    TrustStores = new[]
    {
        new GoogleNative.CertificateManager.V1.Inputs.TrustStoreArgs
        {
            IntermediateCas = new[]
            {
                new GoogleNative.CertificateManager.V1.Inputs.IntermediateCAArgs
                {
                    PemCertificate = "string",
                },
            },
            TrustAnchors = new[]
            {
                new GoogleNative.CertificateManager.V1.Inputs.TrustAnchorArgs
                {
                    PemCertificate = "string",
                },
            },
        },
    },
});
Copy
example, err := certificatemanager.NewTrustConfig(ctx, "trustConfigResource", &certificatemanager.TrustConfigArgs{
	TrustConfigId: pulumi.String("string"),
	Description:   pulumi.String("string"),
	Etag:          pulumi.String("string"),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Location: pulumi.String("string"),
	Name:     pulumi.String("string"),
	Project:  pulumi.String("string"),
	TrustStores: certificatemanager.TrustStoreArray{
		&certificatemanager.TrustStoreArgs{
			IntermediateCas: certificatemanager.IntermediateCAArray{
				&certificatemanager.IntermediateCAArgs{
					PemCertificate: pulumi.String("string"),
				},
			},
			TrustAnchors: certificatemanager.TrustAnchorArray{
				&certificatemanager.TrustAnchorArgs{
					PemCertificate: pulumi.String("string"),
				},
			},
		},
	},
})
Copy
var trustConfigResource = new TrustConfig("trustConfigResource", TrustConfigArgs.builder()
    .trustConfigId("string")
    .description("string")
    .etag("string")
    .labels(Map.of("string", "string"))
    .location("string")
    .name("string")
    .project("string")
    .trustStores(TrustStoreArgs.builder()
        .intermediateCas(IntermediateCAArgs.builder()
            .pemCertificate("string")
            .build())
        .trustAnchors(TrustAnchorArgs.builder()
            .pemCertificate("string")
            .build())
        .build())
    .build());
Copy
trust_config_resource = google_native.certificatemanager.v1.TrustConfig("trustConfigResource",
    trust_config_id="string",
    description="string",
    etag="string",
    labels={
        "string": "string",
    },
    location="string",
    name="string",
    project="string",
    trust_stores=[{
        "intermediate_cas": [{
            "pem_certificate": "string",
        }],
        "trust_anchors": [{
            "pem_certificate": "string",
        }],
    }])
Copy
const trustConfigResource = new google_native.certificatemanager.v1.TrustConfig("trustConfigResource", {
    trustConfigId: "string",
    description: "string",
    etag: "string",
    labels: {
        string: "string",
    },
    location: "string",
    name: "string",
    project: "string",
    trustStores: [{
        intermediateCas: [{
            pemCertificate: "string",
        }],
        trustAnchors: [{
            pemCertificate: "string",
        }],
    }],
});
Copy
type: google-native:certificatemanager/v1:TrustConfig
properties:
    description: string
    etag: string
    labels:
        string: string
    location: string
    name: string
    project: string
    trustConfigId: string
    trustStores:
        - intermediateCas:
            - pemCertificate: string
          trustAnchors:
            - pemCertificate: string
Copy

TrustConfig Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The TrustConfig resource accepts the following input properties:

TrustConfigId
This property is required.
Changes to this property will trigger replacement.
string
Required. A user-provided name of the TrustConfig. Must match the regexp [a-z0-9-]{1,63}.
Description string
One or more paragraphs of text description of a TrustConfig.
Etag string
This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
Labels Dictionary<string, string>
Set of labels associated with a TrustConfig.
Location Changes to this property will trigger replacement. string
Name string
A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern projects/*/locations/*/trustConfigs/*.
Project Changes to this property will trigger replacement. string
TrustStores List<Pulumi.GoogleNative.CertificateManager.V1.Inputs.TrustStore>
Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.
TrustConfigId
This property is required.
Changes to this property will trigger replacement.
string
Required. A user-provided name of the TrustConfig. Must match the regexp [a-z0-9-]{1,63}.
Description string
One or more paragraphs of text description of a TrustConfig.
Etag string
This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
Labels map[string]string
Set of labels associated with a TrustConfig.
Location Changes to this property will trigger replacement. string
Name string
A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern projects/*/locations/*/trustConfigs/*.
Project Changes to this property will trigger replacement. string
TrustStores []TrustStoreArgs
Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.
trustConfigId
This property is required.
Changes to this property will trigger replacement.
String
Required. A user-provided name of the TrustConfig. Must match the regexp [a-z0-9-]{1,63}.
description String
One or more paragraphs of text description of a TrustConfig.
etag String
This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
labels Map<String,String>
Set of labels associated with a TrustConfig.
location Changes to this property will trigger replacement. String
name String
A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern projects/*/locations/*/trustConfigs/*.
project Changes to this property will trigger replacement. String
trustStores List<TrustStore>
Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.
trustConfigId
This property is required.
Changes to this property will trigger replacement.
string
Required. A user-provided name of the TrustConfig. Must match the regexp [a-z0-9-]{1,63}.
description string
One or more paragraphs of text description of a TrustConfig.
etag string
This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
labels {[key: string]: string}
Set of labels associated with a TrustConfig.
location Changes to this property will trigger replacement. string
name string
A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern projects/*/locations/*/trustConfigs/*.
project Changes to this property will trigger replacement. string
trustStores TrustStore[]
Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.
trust_config_id
This property is required.
Changes to this property will trigger replacement.
str
Required. A user-provided name of the TrustConfig. Must match the regexp [a-z0-9-]{1,63}.
description str
One or more paragraphs of text description of a TrustConfig.
etag str
This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
labels Mapping[str, str]
Set of labels associated with a TrustConfig.
location Changes to this property will trigger replacement. str
name str
A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern projects/*/locations/*/trustConfigs/*.
project Changes to this property will trigger replacement. str
trust_stores Sequence[TrustStoreArgs]
Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.
trustConfigId
This property is required.
Changes to this property will trigger replacement.
String
Required. A user-provided name of the TrustConfig. Must match the regexp [a-z0-9-]{1,63}.
description String
One or more paragraphs of text description of a TrustConfig.
etag String
This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
labels Map<String>
Set of labels associated with a TrustConfig.
location Changes to this property will trigger replacement. String
name String
A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern projects/*/locations/*/trustConfigs/*.
project Changes to this property will trigger replacement. String
trustStores List<Property Map>
Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.

Outputs

All input properties are implicitly available as output properties. Additionally, the TrustConfig resource produces the following output properties:

CreateTime string
The creation timestamp of a TrustConfig.
Id string
The provider-assigned unique ID for this managed resource.
UpdateTime string
The last update timestamp of a TrustConfig.
CreateTime string
The creation timestamp of a TrustConfig.
Id string
The provider-assigned unique ID for this managed resource.
UpdateTime string
The last update timestamp of a TrustConfig.
createTime String
The creation timestamp of a TrustConfig.
id String
The provider-assigned unique ID for this managed resource.
updateTime String
The last update timestamp of a TrustConfig.
createTime string
The creation timestamp of a TrustConfig.
id string
The provider-assigned unique ID for this managed resource.
updateTime string
The last update timestamp of a TrustConfig.
create_time str
The creation timestamp of a TrustConfig.
id str
The provider-assigned unique ID for this managed resource.
update_time str
The last update timestamp of a TrustConfig.
createTime String
The creation timestamp of a TrustConfig.
id String
The provider-assigned unique ID for this managed resource.
updateTime String
The last update timestamp of a TrustConfig.

Supporting Types

IntermediateCA
, IntermediateCAArgs

PemCertificate string
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
PemCertificate string
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate String
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate string
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
pem_certificate str
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate String
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.

IntermediateCAResponse
, IntermediateCAResponseArgs

PemCertificate This property is required. string
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
PemCertificate This property is required. string
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate This property is required. String
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate This property is required. string
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
pem_certificate This property is required. str
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate This property is required. String
PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB.

TrustAnchor
, TrustAnchorArgs

PemCertificate string
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
PemCertificate string
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate String
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate string
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
pem_certificate str
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate String
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.

TrustAnchorResponse
, TrustAnchorResponseArgs

PemCertificate This property is required. string
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
PemCertificate This property is required. string
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate This property is required. String
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate This property is required. string
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
pem_certificate This property is required. str
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.
pemCertificate This property is required. String
PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB.

TrustStore
, TrustStoreArgs

IntermediateCas List<Pulumi.GoogleNative.CertificateManager.V1.Inputs.IntermediateCA>
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
TrustAnchors List<Pulumi.GoogleNative.CertificateManager.V1.Inputs.TrustAnchor>
List of Trust Anchors to be used while performing validation against a given TrustStore.
IntermediateCas []IntermediateCA
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
TrustAnchors []TrustAnchor
List of Trust Anchors to be used while performing validation against a given TrustStore.
intermediateCas List<IntermediateCA>
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
trustAnchors List<TrustAnchor>
List of Trust Anchors to be used while performing validation against a given TrustStore.
intermediateCas IntermediateCA[]
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
trustAnchors TrustAnchor[]
List of Trust Anchors to be used while performing validation against a given TrustStore.
intermediate_cas Sequence[IntermediateCA]
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
trust_anchors Sequence[TrustAnchor]
List of Trust Anchors to be used while performing validation against a given TrustStore.
intermediateCas List<Property Map>
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
trustAnchors List<Property Map>
List of Trust Anchors to be used while performing validation against a given TrustStore.

TrustStoreResponse
, TrustStoreResponseArgs

IntermediateCas This property is required. List<Pulumi.GoogleNative.CertificateManager.V1.Inputs.IntermediateCAResponse>
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
TrustAnchors This property is required. List<Pulumi.GoogleNative.CertificateManager.V1.Inputs.TrustAnchorResponse>
List of Trust Anchors to be used while performing validation against a given TrustStore.
IntermediateCas This property is required. []IntermediateCAResponse
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
TrustAnchors This property is required. []TrustAnchorResponse
List of Trust Anchors to be used while performing validation against a given TrustStore.
intermediateCas This property is required. List<IntermediateCAResponse>
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
trustAnchors This property is required. List<TrustAnchorResponse>
List of Trust Anchors to be used while performing validation against a given TrustStore.
intermediateCas This property is required. IntermediateCAResponse[]
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
trustAnchors This property is required. TrustAnchorResponse[]
List of Trust Anchors to be used while performing validation against a given TrustStore.
intermediate_cas This property is required. Sequence[IntermediateCAResponse]
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
trust_anchors This property is required. Sequence[TrustAnchorResponse]
List of Trust Anchors to be used while performing validation against a given TrustStore.
intermediateCas This property is required. List<Property Map>
Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature.
trustAnchors This property is required. List<Property Map>
List of Trust Anchors to be used while performing validation against a given TrustStore.

Package Details

Repository
Google Cloud Native pulumi/pulumi-google-native
License
Apache-2.0

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native