@pulumi/digitalocean 4.7.0-alpha.1633346817

package/cdn.d.ts

@@ -0,0 +1,169 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Provides a DigitalOcean CDN Endpoint resource for use with Spaces.
+ *
+ * ## Example Usage
+ * ### Basic Example
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ *
+ * // Create a new Spaces Bucket
+ * const mybucket = new digitalocean.SpacesBucket("mybucket", {
+ *     region: "sfo2",
+ *     acl: "public-read",
+ * });
+ * // Add a CDN endpoint to the Spaces Bucket
+ * const mycdn = new digitalocean.Cdn("mycdn", {origin: mybucket.bucketDomainName});
+ * export const fqdn = mycdn.endpoint;
+ * ```
+ * ### Custom Sub-Domain Example
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ *
+ * // Create a new Spaces Bucket
+ * const mybucket = new digitalocean.SpacesBucket("mybucket", {
+ *     region: "sfo2",
+ *     acl: "public-read",
+ * });
+ * // Create a DigitalOcean managed Let's Encrypt Certificate
+ * const cert = new digitalocean.Certificate("cert", {
+ *     type: "lets_encrypt",
+ *     domains: ["static.example.com"],
+ * });
+ * // Add a CDN endpoint with a custom sub-domain to the Spaces Bucket
+ * const mycdn = new digitalocean.Cdn("mycdn", {
+ *     origin: mybucket.bucketDomainName,
+ *     customDomain: "static.example.com",
+ *     certificateName: cert.name,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * CDN Endpoints can be imported using the CDN `id`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import digitalocean:index/cdn:Cdn mycdn fb06ad00-351f-45c8-b5eb-13523c438661
+ * ```
+ */
+export declare class Cdn extends pulumi.CustomResource {
+    /**
+     * Get an existing Cdn resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CdnState, opts?: pulumi.CustomResourceOptions): Cdn;
+    /**
+     * Returns true if the given object is an instance of Cdn.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Cdn;
+    /**
+     * **Deprecated** The ID of a DigitalOcean managed TLS certificate used for SSL when a custom subdomain is provided.
+     *
+     * @deprecated Certificate IDs may change, for example when a Let's Encrypt certificate is auto-renewed. Please specify 'certificate_name' instead.
+     */
+    readonly certificateId: pulumi.Output<string>;
+    /**
+     * The unique name of a DigitalOcean managed TLS certificate used for SSL when a custom subdomain is provided.
+     */
+    readonly certificateName: pulumi.Output<string>;
+    /**
+     * The date and time when the CDN Endpoint was created.
+     */
+    readonly createdAt: pulumi.Output<string>;
+    /**
+     * The fully qualified domain name (FQDN) of the custom subdomain used with the CDN Endpoint.
+     */
+    readonly customDomain: pulumi.Output<string | undefined>;
+    /**
+     * The fully qualified domain name (FQDN) from which the CDN-backed content is served.
+     */
+    readonly endpoint: pulumi.Output<string>;
+    /**
+     * The fully qualified domain name, (FQDN) for a Space.
+     */
+    readonly origin: pulumi.Output<string>;
+    /**
+     * The time to live for the CDN Endpoint, in seconds. Default is 3600 seconds.
+     */
+    readonly ttl: pulumi.Output<number>;
+    /**
+     * Create a Cdn resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: CdnArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Cdn resources.
+ */
+export interface CdnState {
+    /**
+     * **Deprecated** The ID of a DigitalOcean managed TLS certificate used for SSL when a custom subdomain is provided.
+     *
+     * @deprecated Certificate IDs may change, for example when a Let's Encrypt certificate is auto-renewed. Please specify 'certificate_name' instead.
+     */
+    certificateId?: pulumi.Input<string>;
+    /**
+     * The unique name of a DigitalOcean managed TLS certificate used for SSL when a custom subdomain is provided.
+     */
+    certificateName?: pulumi.Input<string>;
+    /**
+     * The date and time when the CDN Endpoint was created.
+     */
+    createdAt?: pulumi.Input<string>;
+    /**
+     * The fully qualified domain name (FQDN) of the custom subdomain used with the CDN Endpoint.
+     */
+    customDomain?: pulumi.Input<string>;
+    /**
+     * The fully qualified domain name (FQDN) from which the CDN-backed content is served.
+     */
+    endpoint?: pulumi.Input<string>;
+    /**
+     * The fully qualified domain name, (FQDN) for a Space.
+     */
+    origin?: pulumi.Input<string>;
+    /**
+     * The time to live for the CDN Endpoint, in seconds. Default is 3600 seconds.
+     */
+    ttl?: pulumi.Input<number>;
+}
+/**
+ * The set of arguments for constructing a Cdn resource.
+ */
+export interface CdnArgs {
+    /**
+     * **Deprecated** The ID of a DigitalOcean managed TLS certificate used for SSL when a custom subdomain is provided.
+     *
+     * @deprecated Certificate IDs may change, for example when a Let's Encrypt certificate is auto-renewed. Please specify 'certificate_name' instead.
+     */
+    certificateId?: pulumi.Input<string>;
+    /**
+     * The unique name of a DigitalOcean managed TLS certificate used for SSL when a custom subdomain is provided.
+     */
+    certificateName?: pulumi.Input<string>;
+    /**
+     * The fully qualified domain name (FQDN) of the custom subdomain used with the CDN Endpoint.
+     */
+    customDomain?: pulumi.Input<string>;
+    /**
+     * The fully qualified domain name, (FQDN) for a Space.
+     */
+    origin: pulumi.Input<string>;
+    /**
+     * The time to live for the CDN Endpoint, in seconds. Default is 3600 seconds.
+     */
+    ttl?: pulumi.Input<number>;
+}

package/cdn.js

@@ -0,0 +1,116 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Provides a DigitalOcean CDN Endpoint resource for use with Spaces.
+ *
+ * ## Example Usage
+ * ### Basic Example
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ *
+ * // Create a new Spaces Bucket
+ * const mybucket = new digitalocean.SpacesBucket("mybucket", {
+ *     region: "sfo2",
+ *     acl: "public-read",
+ * });
+ * // Add a CDN endpoint to the Spaces Bucket
+ * const mycdn = new digitalocean.Cdn("mycdn", {origin: mybucket.bucketDomainName});
+ * export const fqdn = mycdn.endpoint;
+ * ```
+ * ### Custom Sub-Domain Example
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ *
+ * // Create a new Spaces Bucket
+ * const mybucket = new digitalocean.SpacesBucket("mybucket", {
+ *     region: "sfo2",
+ *     acl: "public-read",
+ * });
+ * // Create a DigitalOcean managed Let's Encrypt Certificate
+ * const cert = new digitalocean.Certificate("cert", {
+ *     type: "lets_encrypt",
+ *     domains: ["static.example.com"],
+ * });
+ * // Add a CDN endpoint with a custom sub-domain to the Spaces Bucket
+ * const mycdn = new digitalocean.Cdn("mycdn", {
+ *     origin: mybucket.bucketDomainName,
+ *     customDomain: "static.example.com",
+ *     certificateName: cert.name,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * CDN Endpoints can be imported using the CDN `id`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import digitalocean:index/cdn:Cdn mycdn fb06ad00-351f-45c8-b5eb-13523c438661
+ * ```
+ */
+class Cdn extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            inputs["certificateId"] = state ? state.certificateId : undefined;
+            inputs["certificateName"] = state ? state.certificateName : undefined;
+            inputs["createdAt"] = state ? state.createdAt : undefined;
+            inputs["customDomain"] = state ? state.customDomain : undefined;
+            inputs["endpoint"] = state ? state.endpoint : undefined;
+            inputs["origin"] = state ? state.origin : undefined;
+            inputs["ttl"] = state ? state.ttl : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.origin === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'origin'");
+            }
+            inputs["certificateId"] = args ? args.certificateId : undefined;
+            inputs["certificateName"] = args ? args.certificateName : undefined;
+            inputs["customDomain"] = args ? args.customDomain : undefined;
+            inputs["origin"] = args ? args.origin : undefined;
+            inputs["ttl"] = args ? args.ttl : undefined;
+            inputs["createdAt"] = undefined /*out*/;
+            inputs["endpoint"] = undefined /*out*/;
+        }
+        if (!opts.version) {
+            opts = pulumi.mergeOptions(opts, { version: utilities.getVersion() });
+        }
+        super(Cdn.__pulumiType, name, inputs, opts);
+    }
+    /**
+     * Get an existing Cdn resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Cdn(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Cdn.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Cdn.__pulumiType;
+    }
+}
+exports.Cdn = Cdn;
+/** @internal */
+Cdn.__pulumiType = 'digitalocean:index/cdn:Cdn';
+//# sourceMappingURL=cdn.js.map

package/cdn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdn.js","sourceRoot":"","sources":["../cdn.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAa,GAAI,SAAQ,MAAM,CAAC,cAAc;IAmE1C,YAAY,IAAY,EAAE,WAAgC,EAAE,IAAmC;QAC3F,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmC,CAAC;YAClD,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;SACjD;aAAM;YACH,MAAM,IAAI,GAAG,WAAkC,CAAC;YAChD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACxC,MAAM,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC1C;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IA/FD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgB,EAAE,IAAmC;QAC9G,OAAO,IAAI,GAAG,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC;IACpD,CAAC;;AA1BL,kBAiGC;AAnFG,gBAAgB;AACO,gBAAY,GAAG,4BAA4B,CAAC"}

package/certificate.d.ts

@@ -0,0 +1,225 @@
+import * as pulumi from "@pulumi/pulumi";
+import { enums } from "./types";
+/**
+ * Provides a DigitalOcean Certificate resource that allows you to manage
+ * certificates for configuring TLS termination in Load Balancers.
+ * Certificates created with this resource can be referenced in your
+ * Load Balancer configuration via their ID. The certificate can either
+ * be a custom one provided by you or automatically generated one with
+ * Let's Encrypt.
+ *
+ * ## Example Usage
+ * ### Custom Certificate
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ * import * from "fs";
+ *
+ * const cert = new digitalocean.Certificate("cert", {
+ *     type: "custom",
+ *     privateKey: fs.readFileSync("/Users/myuser/certs/privkey.pem"),
+ *     leafCertificate: fs.readFileSync("/Users/myuser/certs/cert.pem"),
+ *     certificateChain: fs.readFileSync("/Users/myuser/certs/fullchain.pem"),
+ * });
+ * ```
+ * ### Let's Encrypt Certificate
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ *
+ * const cert = new digitalocean.Certificate("cert", {
+ *     domains: ["example.com"],
+ *     type: "lets_encrypt",
+ * });
+ * ```
+ * ### Use with Other Resources
+ *
+ * Both custom and Let's Encrypt certificates can be used with other resources
+ * including the `digitalocean.LoadBalancer` and `digitalocean.Cdn` resources.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ *
+ * const cert = new digitalocean.Certificate("cert", {
+ *     type: "lets_encrypt",
+ *     domains: ["example.com"],
+ * });
+ * // Create a new Load Balancer with TLS termination
+ * const _public = new digitalocean.LoadBalancer("public", {
+ *     region: "nyc3",
+ *     dropletTag: "backend",
+ *     forwardingRules: [{
+ *         entryPort: 443,
+ *         entryProtocol: "https",
+ *         targetPort: 80,
+ *         targetProtocol: "http",
+ *         certificateName: cert.name,
+ *     }],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Certificates can be imported using the certificate `name`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import digitalocean:index/certificate:Certificate mycertificate cert-01
+ * ```
+ */
+export declare class Certificate extends pulumi.CustomResource {
+    /**
+     * Get an existing Certificate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CertificateState, opts?: pulumi.CustomResourceOptions): Certificate;
+    /**
+     * Returns true if the given object is an instance of Certificate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Certificate;
+    /**
+     * The full PEM-formatted trust chain
+     * between the certificate authority's certificate and your domain's TLS
+     * certificate. Only valid when type is `custom`.
+     */
+    readonly certificateChain: pulumi.Output<string | undefined>;
+    /**
+     * List of fully qualified domain names (FQDNs) for
+     * which the certificate will be issued. The domains must be managed using
+     * DigitalOcean's DNS. Only valid when type is `letsEncrypt`.
+     */
+    readonly domains: pulumi.Output<string[] | undefined>;
+    /**
+     * The contents of a PEM-formatted public
+     * TLS certificate. Only valid when type is `custom`.
+     */
+    readonly leafCertificate: pulumi.Output<string | undefined>;
+    /**
+     * The name of the certificate for identification.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The expiration date of the certificate
+     */
+    readonly notAfter: pulumi.Output<string>;
+    /**
+     * The contents of a PEM-formatted private-key
+     * corresponding to the SSL certificate. Only valid when type is `custom`.
+     */
+    readonly privateKey: pulumi.Output<string | undefined>;
+    /**
+     * The SHA-1 fingerprint of the certificate
+     */
+    readonly sha1Fingerprint: pulumi.Output<string>;
+    readonly state: pulumi.Output<string>;
+    /**
+     * The type of certificate to provision. Can be either
+     * `custom` or `letsEncrypt`. Defaults to `custom`.
+     */
+    readonly type: pulumi.Output<string | undefined>;
+    /**
+     * The UUID of the certificate
+     */
+    readonly uuid: pulumi.Output<string>;
+    /**
+     * Create a Certificate resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: CertificateArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Certificate resources.
+ */
+export interface CertificateState {
+    /**
+     * The full PEM-formatted trust chain
+     * between the certificate authority's certificate and your domain's TLS
+     * certificate. Only valid when type is `custom`.
+     */
+    certificateChain?: pulumi.Input<string>;
+    /**
+     * List of fully qualified domain names (FQDNs) for
+     * which the certificate will be issued. The domains must be managed using
+     * DigitalOcean's DNS. Only valid when type is `letsEncrypt`.
+     */
+    domains?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The contents of a PEM-formatted public
+     * TLS certificate. Only valid when type is `custom`.
+     */
+    leafCertificate?: pulumi.Input<string>;
+    /**
+     * The name of the certificate for identification.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The expiration date of the certificate
+     */
+    notAfter?: pulumi.Input<string>;
+    /**
+     * The contents of a PEM-formatted private-key
+     * corresponding to the SSL certificate. Only valid when type is `custom`.
+     */
+    privateKey?: pulumi.Input<string>;
+    /**
+     * The SHA-1 fingerprint of the certificate
+     */
+    sha1Fingerprint?: pulumi.Input<string>;
+    state?: pulumi.Input<string>;
+    /**
+     * The type of certificate to provision. Can be either
+     * `custom` or `letsEncrypt`. Defaults to `custom`.
+     */
+    type?: pulumi.Input<string | enums.CertificateType>;
+    /**
+     * The UUID of the certificate
+     */
+    uuid?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a Certificate resource.
+ */
+export interface CertificateArgs {
+    /**
+     * The full PEM-formatted trust chain
+     * between the certificate authority's certificate and your domain's TLS
+     * certificate. Only valid when type is `custom`.
+     */
+    certificateChain?: pulumi.Input<string>;
+    /**
+     * List of fully qualified domain names (FQDNs) for
+     * which the certificate will be issued. The domains must be managed using
+     * DigitalOcean's DNS. Only valid when type is `letsEncrypt`.
+     */
+    domains?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The contents of a PEM-formatted public
+     * TLS certificate. Only valid when type is `custom`.
+     */
+    leafCertificate?: pulumi.Input<string>;
+    /**
+     * The name of the certificate for identification.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The contents of a PEM-formatted private-key
+     * corresponding to the SSL certificate. Only valid when type is `custom`.
+     */
+    privateKey?: pulumi.Input<string>;
+    /**
+     * The type of certificate to provision. Can be either
+     * `custom` or `letsEncrypt`. Defaults to `custom`.
+     */
+    type?: pulumi.Input<string | enums.CertificateType>;
+}

package/certificate.js

@@ -0,0 +1,137 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Provides a DigitalOcean Certificate resource that allows you to manage
+ * certificates for configuring TLS termination in Load Balancers.
+ * Certificates created with this resource can be referenced in your
+ * Load Balancer configuration via their ID. The certificate can either
+ * be a custom one provided by you or automatically generated one with
+ * Let's Encrypt.
+ *
+ * ## Example Usage
+ * ### Custom Certificate
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ * import * from "fs";
+ *
+ * const cert = new digitalocean.Certificate("cert", {
+ *     type: "custom",
+ *     privateKey: fs.readFileSync("/Users/myuser/certs/privkey.pem"),
+ *     leafCertificate: fs.readFileSync("/Users/myuser/certs/cert.pem"),
+ *     certificateChain: fs.readFileSync("/Users/myuser/certs/fullchain.pem"),
+ * });
+ * ```
+ * ### Let's Encrypt Certificate
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ *
+ * const cert = new digitalocean.Certificate("cert", {
+ *     domains: ["example.com"],
+ *     type: "lets_encrypt",
+ * });
+ * ```
+ * ### Use with Other Resources
+ *
+ * Both custom and Let's Encrypt certificates can be used with other resources
+ * including the `digitalocean.LoadBalancer` and `digitalocean.Cdn` resources.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as digitalocean from "@pulumi/digitalocean";
+ *
+ * const cert = new digitalocean.Certificate("cert", {
+ *     type: "lets_encrypt",
+ *     domains: ["example.com"],
+ * });
+ * // Create a new Load Balancer with TLS termination
+ * const _public = new digitalocean.LoadBalancer("public", {
+ *     region: "nyc3",
+ *     dropletTag: "backend",
+ *     forwardingRules: [{
+ *         entryPort: 443,
+ *         entryProtocol: "https",
+ *         targetPort: 80,
+ *         targetProtocol: "http",
+ *         certificateName: cert.name,
+ *     }],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Certificates can be imported using the certificate `name`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import digitalocean:index/certificate:Certificate mycertificate cert-01
+ * ```
+ */
+class Certificate extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            inputs["certificateChain"] = state ? state.certificateChain : undefined;
+            inputs["domains"] = state ? state.domains : undefined;
+            inputs["leafCertificate"] = state ? state.leafCertificate : undefined;
+            inputs["name"] = state ? state.name : undefined;
+            inputs["notAfter"] = state ? state.notAfter : undefined;
+            inputs["privateKey"] = state ? state.privateKey : undefined;
+            inputs["sha1Fingerprint"] = state ? state.sha1Fingerprint : undefined;
+            inputs["state"] = state ? state.state : undefined;
+            inputs["type"] = state ? state.type : undefined;
+            inputs["uuid"] = state ? state.uuid : undefined;
+        }
+        else {
+            const args = argsOrState;
+            inputs["certificateChain"] = args ? args.certificateChain : undefined;
+            inputs["domains"] = args ? args.domains : undefined;
+            inputs["leafCertificate"] = args ? args.leafCertificate : undefined;
+            inputs["name"] = args ? args.name : undefined;
+            inputs["privateKey"] = args ? args.privateKey : undefined;
+            inputs["type"] = args ? args.type : undefined;
+            inputs["notAfter"] = undefined /*out*/;
+            inputs["sha1Fingerprint"] = undefined /*out*/;
+            inputs["state"] = undefined /*out*/;
+            inputs["uuid"] = undefined /*out*/;
+        }
+        if (!opts.version) {
+            opts = pulumi.mergeOptions(opts, { version: utilities.getVersion() });
+        }
+        super(Certificate.__pulumiType, name, inputs, opts);
+    }
+    /**
+     * Get an existing Certificate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Certificate(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Certificate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Certificate.__pulumiType;
+    }
+}
+exports.Certificate = Certificate;
+/** @internal */
+Certificate.__pulumiType = 'digitalocean:index/certificate:Certificate';
+//# sourceMappingURL=certificate.js.map

package/certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.js","sourceRoot":"","sources":["../certificate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAiFlD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,MAAM,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACnD;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,MAAM,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACtC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAhHD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;;AA1BL,kCAkHC;AApGG,gBAAgB;AACO,wBAAY,GAAG,4CAA4C,CAAC"}

package/config/index.d.ts

@@ -0,0 +1 @@
+export * from "./vars";

package/config/index.js

@@ -0,0 +1,10 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+function __export(m) {
+    for (var p in m) if (!exports.hasOwnProperty(p)) exports[p] = m[p];
+}
+Object.defineProperty(exports, "__esModule", { value: true });
+// Export members:
+__export(require("./vars"));
+//# sourceMappingURL=index.js.map

package/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../config/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;;;AAEjF,kBAAkB;AAClB,4BAAuB"}