pulumi-gcp 7.26.0__py3-none-any.whl → 7.26.0a1717544115__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +0 -56
- pulumi_gcp/alloydb/_inputs.py +0 -92
- pulumi_gcp/alloydb/backup.py +4 -12
- pulumi_gcp/alloydb/cluster.py +6 -72
- pulumi_gcp/alloydb/instance.py +2 -60
- pulumi_gcp/alloydb/outputs.py +0 -114
- pulumi_gcp/artifactregistry/get_repository_iam_policy.py +2 -6
- pulumi_gcp/artifactregistry/repository_iam_binding.py +7 -21
- pulumi_gcp/artifactregistry/repository_iam_member.py +7 -21
- pulumi_gcp/artifactregistry/repository_iam_policy.py +7 -21
- pulumi_gcp/bigquery/connection_iam_binding.py +7 -21
- pulumi_gcp/bigquery/connection_iam_member.py +7 -21
- pulumi_gcp/bigquery/connection_iam_policy.py +7 -21
- pulumi_gcp/bigquery/data_transfer_config.py +7 -14
- pulumi_gcp/bigquery/get_connection_iam_policy.py +2 -6
- pulumi_gcp/bigqueryanalyticshub/data_exchange_iam_binding.py +7 -21
- pulumi_gcp/bigqueryanalyticshub/data_exchange_iam_member.py +7 -21
- pulumi_gcp/bigqueryanalyticshub/data_exchange_iam_policy.py +7 -21
- pulumi_gcp/bigqueryanalyticshub/get_data_exchange_iam_policy.py +2 -6
- pulumi_gcp/bigqueryanalyticshub/get_listing_iam_policy.py +2 -6
- pulumi_gcp/bigqueryanalyticshub/listing_iam_binding.py +7 -21
- pulumi_gcp/bigqueryanalyticshub/listing_iam_member.py +7 -21
- pulumi_gcp/bigqueryanalyticshub/listing_iam_policy.py +7 -21
- pulumi_gcp/bigquerydatapolicy/data_policy_iam_binding.py +7 -21
- pulumi_gcp/bigquerydatapolicy/data_policy_iam_member.py +7 -21
- pulumi_gcp/bigquerydatapolicy/data_policy_iam_policy.py +7 -21
- pulumi_gcp/bigquerydatapolicy/get_iam_policy.py +2 -6
- pulumi_gcp/certificateauthority/_inputs.py +4 -20
- pulumi_gcp/certificateauthority/ca_pool_iam_binding.py +7 -21
- pulumi_gcp/certificateauthority/ca_pool_iam_member.py +7 -21
- pulumi_gcp/certificateauthority/ca_pool_iam_policy.py +7 -21
- pulumi_gcp/certificateauthority/certificate_template.py +173 -157
- pulumi_gcp/certificateauthority/certificate_template_iam_binding.py +0 -27
- pulumi_gcp/certificateauthority/certificate_template_iam_member.py +0 -27
- pulumi_gcp/certificateauthority/certificate_template_iam_policy.py +0 -27
- pulumi_gcp/certificateauthority/get_ca_pool_iam_policy.py +2 -6
- pulumi_gcp/certificateauthority/get_certificate_template_iam_policy.py +0 -6
- pulumi_gcp/certificateauthority/outputs.py +4 -20
- pulumi_gcp/cloudbuildv2/connection_iam_binding.py +7 -21
- pulumi_gcp/cloudbuildv2/connection_iam_member.py +7 -21
- pulumi_gcp/cloudbuildv2/connection_iam_policy.py +7 -21
- pulumi_gcp/cloudbuildv2/get_connection_iam_policy.py +2 -6
- pulumi_gcp/clouddeploy/get_custom_target_type_iam_policy.py +2 -6
- pulumi_gcp/cloudfunctionsv2/function_iam_binding.py +7 -21
- pulumi_gcp/cloudfunctionsv2/function_iam_member.py +7 -21
- pulumi_gcp/cloudfunctionsv2/function_iam_policy.py +7 -21
- pulumi_gcp/cloudfunctionsv2/get_function_iam_policy.py +2 -6
- pulumi_gcp/cloudrun/get_service_iam_policy.py +2 -6
- pulumi_gcp/cloudrun/iam_binding.py +7 -21
- pulumi_gcp/cloudrun/iam_member.py +7 -21
- pulumi_gcp/cloudrun/iam_policy.py +7 -21
- pulumi_gcp/cloudrunv2/get_job_iam_policy.py +2 -6
- pulumi_gcp/cloudrunv2/get_service.py +1 -11
- pulumi_gcp/cloudrunv2/get_service_iam_policy.py +2 -6
- pulumi_gcp/cloudrunv2/job_iam_binding.py +7 -21
- pulumi_gcp/cloudrunv2/job_iam_member.py +7 -21
- pulumi_gcp/cloudrunv2/job_iam_policy.py +7 -21
- pulumi_gcp/cloudrunv2/service.py +0 -47
- pulumi_gcp/cloudrunv2/service_iam_binding.py +7 -21
- pulumi_gcp/cloudrunv2/service_iam_member.py +7 -21
- pulumi_gcp/cloudrunv2/service_iam_policy.py +7 -21
- pulumi_gcp/cloudtasks/get_queue_iam_policy.py +2 -6
- pulumi_gcp/cloudtasks/queue_iam_binding.py +7 -21
- pulumi_gcp/cloudtasks/queue_iam_member.py +7 -21
- pulumi_gcp/cloudtasks/queue_iam_policy.py +7 -21
- pulumi_gcp/compute/_inputs.py +18 -18
- pulumi_gcp/compute/outputs.py +20 -20
- pulumi_gcp/dataplex/__init__.py +0 -5
- pulumi_gcp/dataplex/_inputs.py +0 -104
- pulumi_gcp/dataplex/aspect_type_iam_binding.py +7 -21
- pulumi_gcp/dataplex/aspect_type_iam_member.py +7 -21
- pulumi_gcp/dataplex/aspect_type_iam_policy.py +7 -21
- pulumi_gcp/dataplex/datascan_iam_binding.py +7 -21
- pulumi_gcp/dataplex/datascan_iam_member.py +7 -21
- pulumi_gcp/dataplex/datascan_iam_policy.py +7 -21
- pulumi_gcp/dataplex/entry_group_iam_binding.py +7 -21
- pulumi_gcp/dataplex/entry_group_iam_member.py +7 -21
- pulumi_gcp/dataplex/entry_group_iam_policy.py +7 -21
- pulumi_gcp/dataplex/get_aspect_type_iam_policy.py +2 -6
- pulumi_gcp/dataplex/get_datascan_iam_policy.py +2 -6
- pulumi_gcp/dataplex/get_entry_group_iam_policy.py +2 -6
- pulumi_gcp/dataplex/get_task_iam_policy.py +2 -6
- pulumi_gcp/dataplex/outputs.py +0 -76
- pulumi_gcp/dataplex/task.py +16 -16
- pulumi_gcp/dataplex/task_iam_binding.py +7 -21
- pulumi_gcp/dataplex/task_iam_member.py +7 -21
- pulumi_gcp/dataplex/task_iam_policy.py +7 -21
- pulumi_gcp/dataproc/autoscaling_policy_iam_binding.py +7 -21
- pulumi_gcp/dataproc/autoscaling_policy_iam_member.py +7 -21
- pulumi_gcp/dataproc/autoscaling_policy_iam_policy.py +7 -21
- pulumi_gcp/dataproc/get_autoscaling_policy_iam_policy.py +2 -6
- pulumi_gcp/dataproc/get_metastore_federation_iam_policy.py +2 -6
- pulumi_gcp/dataproc/get_metastore_service_iam_policy.py +2 -6
- pulumi_gcp/dataproc/metastore_federation_iam_binding.py +7 -21
- pulumi_gcp/dataproc/metastore_federation_iam_member.py +7 -21
- pulumi_gcp/dataproc/metastore_federation_iam_policy.py +7 -21
- pulumi_gcp/dataproc/metastore_service_iam_binding.py +7 -21
- pulumi_gcp/dataproc/metastore_service_iam_member.py +7 -21
- pulumi_gcp/dataproc/metastore_service_iam_policy.py +7 -21
- pulumi_gcp/firestore/field.py +4 -4
- pulumi_gcp/gkebackup/backup_plan_iam_binding.py +7 -21
- pulumi_gcp/gkebackup/backup_plan_iam_member.py +7 -21
- pulumi_gcp/gkebackup/backup_plan_iam_policy.py +7 -21
- pulumi_gcp/gkebackup/get_backup_plan_iam_policy.py +2 -6
- pulumi_gcp/gkebackup/get_restore_plan_iam_policy.py +2 -6
- pulumi_gcp/gkehub/feature_iam_binding.py +7 -21
- pulumi_gcp/gkehub/feature_iam_member.py +7 -21
- pulumi_gcp/gkehub/feature_iam_policy.py +7 -21
- pulumi_gcp/gkehub/get_feature_iam_policy.py +2 -6
- pulumi_gcp/gkehub/get_membership_iam_policy.py +2 -6
- pulumi_gcp/gkehub/membership_binding.py +6 -6
- pulumi_gcp/gkehub/membership_iam_binding.py +7 -21
- pulumi_gcp/gkehub/membership_iam_member.py +7 -21
- pulumi_gcp/gkehub/membership_iam_policy.py +7 -21
- pulumi_gcp/gkehub/membership_rbac_role_binding.py +4 -4
- pulumi_gcp/gkehub/namespace.py +4 -4
- pulumi_gcp/gkehub/scope_rbac_role_binding.py +4 -4
- pulumi_gcp/iap/tunnel_dest_group.py +2 -2
- pulumi_gcp/integrationconnectors/managed_zone.py +8 -8
- pulumi_gcp/logging/__init__.py +0 -4
- pulumi_gcp/logging/_inputs.py +0 -100
- pulumi_gcp/logging/outputs.py +0 -76
- pulumi_gcp/netapp/storage_pool.py +9 -9
- pulumi_gcp/networksecurity/address_group_iam_policy.py +7 -21
- pulumi_gcp/networksecurity/get_address_group_iam_policy.py +2 -6
- pulumi_gcp/notebooks/get_instance_iam_policy.py +2 -6
- pulumi_gcp/notebooks/get_runtime_iam_policy.py +2 -6
- pulumi_gcp/notebooks/instance_iam_binding.py +7 -21
- pulumi_gcp/notebooks/instance_iam_member.py +7 -21
- pulumi_gcp/notebooks/instance_iam_policy.py +7 -21
- pulumi_gcp/notebooks/runtime_iam_binding.py +7 -21
- pulumi_gcp/notebooks/runtime_iam_member.py +7 -21
- pulumi_gcp/notebooks/runtime_iam_policy.py +7 -21
- pulumi_gcp/orgpolicy/policy.py +2 -2
- pulumi_gcp/privilegedaccessmanager/entitlement.py +7 -7
- pulumi_gcp/pubsub/subscription.py +4 -4
- pulumi_gcp/pulumi-plugin.json +1 -1
- pulumi_gcp/securesourcemanager/get_instance_iam_policy.py +2 -6
- pulumi_gcp/sql/_inputs.py +4 -2
- pulumi_gcp/sql/outputs.py +8 -6
- pulumi_gcp/storage/_inputs.py +0 -48
- pulumi_gcp/storage/outputs.py +0 -75
- pulumi_gcp/vertex/get_ai_endpoint_iam_policy.py +2 -6
- pulumi_gcp/workbench/get_instance_iam_policy.py +2 -6
- pulumi_gcp/workstations/get_workstation_config_iam_policy.py +2 -6
- pulumi_gcp/workstations/get_workstation_iam_policy.py +2 -6
- pulumi_gcp/workstations/workstation_config_iam_binding.py +7 -21
- pulumi_gcp/workstations/workstation_config_iam_member.py +7 -21
- pulumi_gcp/workstations/workstation_config_iam_policy.py +7 -21
- pulumi_gcp/workstations/workstation_iam_binding.py +7 -21
- pulumi_gcp/workstations/workstation_iam_member.py +7 -21
- pulumi_gcp/workstations/workstation_iam_policy.py +7 -21
- {pulumi_gcp-7.26.0.dist-info → pulumi_gcp-7.26.0a1717544115.dist-info}/METADATA +1 -1
- {pulumi_gcp-7.26.0.dist-info → pulumi_gcp-7.26.0a1717544115.dist-info}/RECORD +156 -165
- pulumi_gcp/dataplex/entry_type.py +0 -963
- pulumi_gcp/dataplex/entry_type_iam_binding.py +0 -779
- pulumi_gcp/dataplex/entry_type_iam_member.py +0 -779
- pulumi_gcp/dataplex/entry_type_iam_policy.py +0 -618
- pulumi_gcp/dataplex/get_entry_type_iam_policy.py +0 -168
- pulumi_gcp/logging/get_log_view_iam_policy.py +0 -157
- pulumi_gcp/logging/log_view_iam_binding.py +0 -630
- pulumi_gcp/logging/log_view_iam_member.py +0 -630
- pulumi_gcp/logging/log_view_iam_policy.py +0 -449
- {pulumi_gcp-7.26.0.dist-info → pulumi_gcp-7.26.0a1717544115.dist-info}/WHEEL +0 -0
- {pulumi_gcp-7.26.0.dist-info → pulumi_gcp-7.26.0a1717544115.dist-info}/top_level.txt +0 -0
@@ -28,23 +28,27 @@ class CertificateTemplateArgs:
|
|
28
28
|
"""
|
29
29
|
The set of arguments for constructing a CertificateTemplate resource.
|
30
30
|
:param pulumi.Input[str] location: The location for the resource
|
31
|
-
|
32
|
-
|
33
|
-
- - -
|
34
31
|
:param pulumi.Input[str] description: Optional. A human-readable description of scenarios this template is intended for.
|
35
|
-
:param pulumi.Input['CertificateTemplateIdentityConstraintsArgs'] identity_constraints: Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
36
|
-
|
37
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Optional. Labels with user-defined metadata.
|
38
|
-
|
39
|
-
|
40
|
-
:param pulumi.Input[str] maximum_lifetime: Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
32
|
+
:param pulumi.Input['CertificateTemplateIdentityConstraintsArgs'] identity_constraints: Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
33
|
+
omitted, then this template will not add restrictions on a certificate's identity.
|
34
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
|
35
|
+
present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
|
36
|
+
resource.
|
37
|
+
:param pulumi.Input[str] maximum_lifetime: Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
38
|
+
IssuancePolicy specifies a maximum lifetime the minimum of the two durations will be the maximum lifetime for issued.
|
39
|
+
Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective
|
40
|
+
lifetime will be explicitly truncated to match it.
|
41
41
|
:param pulumi.Input[str] name: The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
|
42
|
-
:param pulumi.Input['CertificateTemplatePassthroughExtensionsArgs'] passthrough_extensions: Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
43
|
-
|
44
|
-
|
45
|
-
|
46
|
-
|
47
|
-
|
42
|
+
:param pulumi.Input['CertificateTemplatePassthroughExtensionsArgs'] passthrough_extensions: Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
43
|
+
If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
|
44
|
+
dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
|
45
|
+
request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
|
46
|
+
These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
|
47
|
+
:param pulumi.Input['CertificateTemplatePredefinedValuesArgs'] predefined_values: Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
48
|
+
certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
|
49
|
+
here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
|
50
|
+
certificate issuance request will fail.
|
51
|
+
:param pulumi.Input[str] project: The project for the resource
|
48
52
|
"""
|
49
53
|
pulumi.set(__self__, "location", location)
|
50
54
|
if description is not None:
|
@@ -69,9 +73,6 @@ class CertificateTemplateArgs:
|
|
69
73
|
def location(self) -> pulumi.Input[str]:
|
70
74
|
"""
|
71
75
|
The location for the resource
|
72
|
-
|
73
|
-
|
74
|
-
- - -
|
75
76
|
"""
|
76
77
|
return pulumi.get(self, "location")
|
77
78
|
|
@@ -95,8 +96,8 @@ class CertificateTemplateArgs:
|
|
95
96
|
@pulumi.getter(name="identityConstraints")
|
96
97
|
def identity_constraints(self) -> Optional[pulumi.Input['CertificateTemplateIdentityConstraintsArgs']]:
|
97
98
|
"""
|
98
|
-
Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
99
|
-
|
99
|
+
Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
100
|
+
omitted, then this template will not add restrictions on a certificate's identity.
|
100
101
|
"""
|
101
102
|
return pulumi.get(self, "identity_constraints")
|
102
103
|
|
@@ -108,9 +109,9 @@ class CertificateTemplateArgs:
|
|
108
109
|
@pulumi.getter
|
109
110
|
def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
|
110
111
|
"""
|
111
|
-
Optional. Labels with user-defined metadata.
|
112
|
-
|
113
|
-
|
112
|
+
Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
|
113
|
+
present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
|
114
|
+
resource.
|
114
115
|
"""
|
115
116
|
return pulumi.get(self, "labels")
|
116
117
|
|
@@ -122,7 +123,10 @@ class CertificateTemplateArgs:
|
|
122
123
|
@pulumi.getter(name="maximumLifetime")
|
123
124
|
def maximum_lifetime(self) -> Optional[pulumi.Input[str]]:
|
124
125
|
"""
|
125
|
-
Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
126
|
+
Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
127
|
+
IssuancePolicy specifies a maximum lifetime the minimum of the two durations will be the maximum lifetime for issued.
|
128
|
+
Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective
|
129
|
+
lifetime will be explicitly truncated to match it.
|
126
130
|
"""
|
127
131
|
return pulumi.get(self, "maximum_lifetime")
|
128
132
|
|
@@ -146,8 +150,11 @@ class CertificateTemplateArgs:
|
|
146
150
|
@pulumi.getter(name="passthroughExtensions")
|
147
151
|
def passthrough_extensions(self) -> Optional[pulumi.Input['CertificateTemplatePassthroughExtensionsArgs']]:
|
148
152
|
"""
|
149
|
-
Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
150
|
-
|
153
|
+
Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
154
|
+
If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
|
155
|
+
dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
|
156
|
+
request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
|
157
|
+
These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
|
151
158
|
"""
|
152
159
|
return pulumi.get(self, "passthrough_extensions")
|
153
160
|
|
@@ -159,8 +166,10 @@ class CertificateTemplateArgs:
|
|
159
166
|
@pulumi.getter(name="predefinedValues")
|
160
167
|
def predefined_values(self) -> Optional[pulumi.Input['CertificateTemplatePredefinedValuesArgs']]:
|
161
168
|
"""
|
162
|
-
Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
163
|
-
|
169
|
+
Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
170
|
+
certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
|
171
|
+
here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
|
172
|
+
certificate issuance request will fail.
|
164
173
|
"""
|
165
174
|
return pulumi.get(self, "predefined_values")
|
166
175
|
|
@@ -172,8 +181,7 @@ class CertificateTemplateArgs:
|
|
172
181
|
@pulumi.getter
|
173
182
|
def project(self) -> Optional[pulumi.Input[str]]:
|
174
183
|
"""
|
175
|
-
The
|
176
|
-
If it is not provided, the provider project is used.
|
184
|
+
The project for the resource
|
177
185
|
"""
|
178
186
|
return pulumi.get(self, "project")
|
179
187
|
|
@@ -187,7 +195,7 @@ class _CertificateTemplateState:
|
|
187
195
|
def __init__(__self__, *,
|
188
196
|
create_time: Optional[pulumi.Input[str]] = None,
|
189
197
|
description: Optional[pulumi.Input[str]] = None,
|
190
|
-
effective_labels: Optional[pulumi.Input[Mapping[str,
|
198
|
+
effective_labels: Optional[pulumi.Input[Mapping[str, Any]]] = None,
|
191
199
|
identity_constraints: Optional[pulumi.Input['CertificateTemplateIdentityConstraintsArgs']] = None,
|
192
200
|
labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
193
201
|
location: Optional[pulumi.Input[str]] = None,
|
@@ -196,32 +204,35 @@ class _CertificateTemplateState:
|
|
196
204
|
passthrough_extensions: Optional[pulumi.Input['CertificateTemplatePassthroughExtensionsArgs']] = None,
|
197
205
|
predefined_values: Optional[pulumi.Input['CertificateTemplatePredefinedValuesArgs']] = None,
|
198
206
|
project: Optional[pulumi.Input[str]] = None,
|
199
|
-
pulumi_labels: Optional[pulumi.Input[Mapping[str,
|
207
|
+
pulumi_labels: Optional[pulumi.Input[Mapping[str, Any]]] = None,
|
200
208
|
update_time: Optional[pulumi.Input[str]] = None):
|
201
209
|
"""
|
202
210
|
Input properties used for looking up and filtering CertificateTemplate resources.
|
203
211
|
:param pulumi.Input[str] create_time: Output only. The time at which this CertificateTemplate was created.
|
204
212
|
:param pulumi.Input[str] description: Optional. A human-readable description of scenarios this template is intended for.
|
205
|
-
:param pulumi.Input[Mapping[str,
|
206
|
-
:param pulumi.Input['CertificateTemplateIdentityConstraintsArgs'] identity_constraints: Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
207
|
-
|
208
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Optional. Labels with user-defined metadata.
|
209
|
-
|
210
|
-
|
213
|
+
:param pulumi.Input[Mapping[str, Any]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
|
214
|
+
:param pulumi.Input['CertificateTemplateIdentityConstraintsArgs'] identity_constraints: Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
215
|
+
omitted, then this template will not add restrictions on a certificate's identity.
|
216
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
|
217
|
+
present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
|
218
|
+
resource.
|
211
219
|
:param pulumi.Input[str] location: The location for the resource
|
212
|
-
|
213
|
-
|
214
|
-
|
215
|
-
|
220
|
+
:param pulumi.Input[str] maximum_lifetime: Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
221
|
+
IssuancePolicy specifies a maximum lifetime the minimum of the two durations will be the maximum lifetime for issued.
|
222
|
+
Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective
|
223
|
+
lifetime will be explicitly truncated to match it.
|
216
224
|
:param pulumi.Input[str] name: The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
|
217
|
-
:param pulumi.Input['CertificateTemplatePassthroughExtensionsArgs'] passthrough_extensions: Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
218
|
-
|
219
|
-
|
220
|
-
|
221
|
-
|
222
|
-
|
223
|
-
|
224
|
-
|
225
|
+
:param pulumi.Input['CertificateTemplatePassthroughExtensionsArgs'] passthrough_extensions: Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
226
|
+
If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
|
227
|
+
dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
|
228
|
+
request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
|
229
|
+
These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
|
230
|
+
:param pulumi.Input['CertificateTemplatePredefinedValuesArgs'] predefined_values: Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
231
|
+
certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
|
232
|
+
here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
|
233
|
+
certificate issuance request will fail.
|
234
|
+
:param pulumi.Input[str] project: The project for the resource
|
235
|
+
:param pulumi.Input[Mapping[str, Any]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
|
225
236
|
:param pulumi.Input[str] update_time: Output only. The time at which this CertificateTemplate was updated.
|
226
237
|
"""
|
227
238
|
if create_time is not None:
|
@@ -277,22 +288,22 @@ class _CertificateTemplateState:
|
|
277
288
|
|
278
289
|
@property
|
279
290
|
@pulumi.getter(name="effectiveLabels")
|
280
|
-
def effective_labels(self) -> Optional[pulumi.Input[Mapping[str,
|
291
|
+
def effective_labels(self) -> Optional[pulumi.Input[Mapping[str, Any]]]:
|
281
292
|
"""
|
282
293
|
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
|
283
294
|
"""
|
284
295
|
return pulumi.get(self, "effective_labels")
|
285
296
|
|
286
297
|
@effective_labels.setter
|
287
|
-
def effective_labels(self, value: Optional[pulumi.Input[Mapping[str,
|
298
|
+
def effective_labels(self, value: Optional[pulumi.Input[Mapping[str, Any]]]):
|
288
299
|
pulumi.set(self, "effective_labels", value)
|
289
300
|
|
290
301
|
@property
|
291
302
|
@pulumi.getter(name="identityConstraints")
|
292
303
|
def identity_constraints(self) -> Optional[pulumi.Input['CertificateTemplateIdentityConstraintsArgs']]:
|
293
304
|
"""
|
294
|
-
Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
295
|
-
|
305
|
+
Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
306
|
+
omitted, then this template will not add restrictions on a certificate's identity.
|
296
307
|
"""
|
297
308
|
return pulumi.get(self, "identity_constraints")
|
298
309
|
|
@@ -304,9 +315,9 @@ class _CertificateTemplateState:
|
|
304
315
|
@pulumi.getter
|
305
316
|
def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
|
306
317
|
"""
|
307
|
-
Optional. Labels with user-defined metadata.
|
308
|
-
|
309
|
-
|
318
|
+
Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
|
319
|
+
present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
|
320
|
+
resource.
|
310
321
|
"""
|
311
322
|
return pulumi.get(self, "labels")
|
312
323
|
|
@@ -319,9 +330,6 @@ class _CertificateTemplateState:
|
|
319
330
|
def location(self) -> Optional[pulumi.Input[str]]:
|
320
331
|
"""
|
321
332
|
The location for the resource
|
322
|
-
|
323
|
-
|
324
|
-
- - -
|
325
333
|
"""
|
326
334
|
return pulumi.get(self, "location")
|
327
335
|
|
@@ -333,7 +341,10 @@ class _CertificateTemplateState:
|
|
333
341
|
@pulumi.getter(name="maximumLifetime")
|
334
342
|
def maximum_lifetime(self) -> Optional[pulumi.Input[str]]:
|
335
343
|
"""
|
336
|
-
Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
344
|
+
Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
345
|
+
IssuancePolicy specifies a maximum lifetime the minimum of the two durations will be the maximum lifetime for issued.
|
346
|
+
Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective
|
347
|
+
lifetime will be explicitly truncated to match it.
|
337
348
|
"""
|
338
349
|
return pulumi.get(self, "maximum_lifetime")
|
339
350
|
|
@@ -357,8 +368,11 @@ class _CertificateTemplateState:
|
|
357
368
|
@pulumi.getter(name="passthroughExtensions")
|
358
369
|
def passthrough_extensions(self) -> Optional[pulumi.Input['CertificateTemplatePassthroughExtensionsArgs']]:
|
359
370
|
"""
|
360
|
-
Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
361
|
-
|
371
|
+
Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
372
|
+
If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
|
373
|
+
dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
|
374
|
+
request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
|
375
|
+
These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
|
362
376
|
"""
|
363
377
|
return pulumi.get(self, "passthrough_extensions")
|
364
378
|
|
@@ -370,8 +384,10 @@ class _CertificateTemplateState:
|
|
370
384
|
@pulumi.getter(name="predefinedValues")
|
371
385
|
def predefined_values(self) -> Optional[pulumi.Input['CertificateTemplatePredefinedValuesArgs']]:
|
372
386
|
"""
|
373
|
-
Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
374
|
-
|
387
|
+
Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
388
|
+
certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
|
389
|
+
here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
|
390
|
+
certificate issuance request will fail.
|
375
391
|
"""
|
376
392
|
return pulumi.get(self, "predefined_values")
|
377
393
|
|
@@ -383,8 +399,7 @@ class _CertificateTemplateState:
|
|
383
399
|
@pulumi.getter
|
384
400
|
def project(self) -> Optional[pulumi.Input[str]]:
|
385
401
|
"""
|
386
|
-
The
|
387
|
-
If it is not provided, the provider project is used.
|
402
|
+
The project for the resource
|
388
403
|
"""
|
389
404
|
return pulumi.get(self, "project")
|
390
405
|
|
@@ -394,15 +409,14 @@ class _CertificateTemplateState:
|
|
394
409
|
|
395
410
|
@property
|
396
411
|
@pulumi.getter(name="pulumiLabels")
|
397
|
-
def pulumi_labels(self) -> Optional[pulumi.Input[Mapping[str,
|
412
|
+
def pulumi_labels(self) -> Optional[pulumi.Input[Mapping[str, Any]]]:
|
398
413
|
"""
|
399
|
-
The combination of labels configured directly on the resource
|
400
|
-
and default labels configured on the provider.
|
414
|
+
The combination of labels configured directly on the resource and default labels configured on the provider.
|
401
415
|
"""
|
402
416
|
return pulumi.get(self, "pulumi_labels")
|
403
417
|
|
404
418
|
@pulumi_labels.setter
|
405
|
-
def pulumi_labels(self, value: Optional[pulumi.Input[Mapping[str,
|
419
|
+
def pulumi_labels(self, value: Optional[pulumi.Input[Mapping[str, Any]]]):
|
406
420
|
pulumi.set(self, "pulumi_labels", value)
|
407
421
|
|
408
422
|
@property
|
@@ -434,28 +448,23 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
434
448
|
project: Optional[pulumi.Input[str]] = None,
|
435
449
|
__props__=None):
|
436
450
|
"""
|
437
|
-
Certificate Authority Service provides reusable and parameterized templates that you can use for common certificate issuance scenarios. A certificate template represents a relatively static and well-defined certificate issuance schema within an organization.
|
438
|
-
|
439
|
-
To get more information about CertificateTemplate, see:
|
440
|
-
|
441
|
-
* [API documentation](https://cloud.google.com/certificate-authority-service/docs/reference/rest)
|
442
|
-
* How-to Guides
|
443
|
-
* [Official Documentation](https://cloud.google.com/certificate-authority-service)
|
444
|
-
* [Understanding Certificate Templates](https://cloud.google.com/certificate-authority-service/docs/certificate-template)
|
445
|
-
* [Common configurations and Certificate Profiles](https://cloud.google.com/certificate-authority-service/docs/certificate-profile)
|
451
|
+
Certificate Authority Service provides reusable and parameterized templates that you can use for common certificate issuance scenarios. A certificate template represents a relatively static and well-defined certificate issuance schema within an organization. A certificate template can essentially become a full-fledged vertical certificate issuance framework.
|
446
452
|
|
453
|
+
For more information, see:
|
454
|
+
* [Understanding Certificate Templates](https://cloud.google.com/certificate-authority-service/docs/certificate-template)
|
455
|
+
* [Common configurations and Certificate Profiles](https://cloud.google.com/certificate-authority-service/docs/certificate-profile)
|
447
456
|
## Example Usage
|
448
457
|
|
449
|
-
###
|
450
|
-
|
458
|
+
### Basic_certificate_template
|
459
|
+
An example of a basic privateca certificate template
|
451
460
|
```python
|
452
461
|
import pulumi
|
453
462
|
import pulumi_gcp as gcp
|
454
463
|
|
455
|
-
|
456
|
-
|
457
|
-
|
458
|
-
description="
|
464
|
+
primary = gcp.certificateauthority.CertificateTemplate("primary",
|
465
|
+
location="us-west1",
|
466
|
+
name="template",
|
467
|
+
description="An updated sample certificate template",
|
459
468
|
identity_constraints=gcp.certificateauthority.CertificateTemplateIdentityConstraintsArgs(
|
460
469
|
allow_subject_alt_names_passthrough=True,
|
461
470
|
allow_subject_passthrough=True,
|
@@ -526,8 +535,9 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
526
535
|
],
|
527
536
|
)],
|
528
537
|
),
|
538
|
+
project="my-project-name",
|
529
539
|
labels={
|
530
|
-
"label-
|
540
|
+
"label-two": "value-two",
|
531
541
|
})
|
532
542
|
```
|
533
543
|
|
@@ -558,23 +568,27 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
558
568
|
:param str resource_name: The name of the resource.
|
559
569
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
560
570
|
:param pulumi.Input[str] description: Optional. A human-readable description of scenarios this template is intended for.
|
561
|
-
:param pulumi.Input[pulumi.InputType['CertificateTemplateIdentityConstraintsArgs']] identity_constraints: Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
562
|
-
|
563
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Optional. Labels with user-defined metadata.
|
564
|
-
|
565
|
-
|
571
|
+
:param pulumi.Input[pulumi.InputType['CertificateTemplateIdentityConstraintsArgs']] identity_constraints: Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
572
|
+
omitted, then this template will not add restrictions on a certificate's identity.
|
573
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
|
574
|
+
present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
|
575
|
+
resource.
|
566
576
|
:param pulumi.Input[str] location: The location for the resource
|
567
|
-
|
568
|
-
|
569
|
-
|
570
|
-
|
577
|
+
:param pulumi.Input[str] maximum_lifetime: Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
578
|
+
IssuancePolicy specifies a maximum lifetime the minimum of the two durations will be the maximum lifetime for issued.
|
579
|
+
Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective
|
580
|
+
lifetime will be explicitly truncated to match it.
|
571
581
|
:param pulumi.Input[str] name: The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
|
572
|
-
:param pulumi.Input[pulumi.InputType['CertificateTemplatePassthroughExtensionsArgs']] passthrough_extensions: Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
573
|
-
|
574
|
-
|
575
|
-
|
576
|
-
|
577
|
-
|
582
|
+
:param pulumi.Input[pulumi.InputType['CertificateTemplatePassthroughExtensionsArgs']] passthrough_extensions: Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
583
|
+
If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
|
584
|
+
dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
|
585
|
+
request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
|
586
|
+
These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
|
587
|
+
:param pulumi.Input[pulumi.InputType['CertificateTemplatePredefinedValuesArgs']] predefined_values: Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
588
|
+
certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
|
589
|
+
here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
|
590
|
+
certificate issuance request will fail.
|
591
|
+
:param pulumi.Input[str] project: The project for the resource
|
578
592
|
"""
|
579
593
|
...
|
580
594
|
@overload
|
@@ -583,28 +597,23 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
583
597
|
args: CertificateTemplateArgs,
|
584
598
|
opts: Optional[pulumi.ResourceOptions] = None):
|
585
599
|
"""
|
586
|
-
Certificate Authority Service provides reusable and parameterized templates that you can use for common certificate issuance scenarios. A certificate template represents a relatively static and well-defined certificate issuance schema within an organization.
|
587
|
-
|
588
|
-
To get more information about CertificateTemplate, see:
|
589
|
-
|
590
|
-
* [API documentation](https://cloud.google.com/certificate-authority-service/docs/reference/rest)
|
591
|
-
* How-to Guides
|
592
|
-
* [Official Documentation](https://cloud.google.com/certificate-authority-service)
|
593
|
-
* [Understanding Certificate Templates](https://cloud.google.com/certificate-authority-service/docs/certificate-template)
|
594
|
-
* [Common configurations and Certificate Profiles](https://cloud.google.com/certificate-authority-service/docs/certificate-profile)
|
600
|
+
Certificate Authority Service provides reusable and parameterized templates that you can use for common certificate issuance scenarios. A certificate template represents a relatively static and well-defined certificate issuance schema within an organization. A certificate template can essentially become a full-fledged vertical certificate issuance framework.
|
595
601
|
|
602
|
+
For more information, see:
|
603
|
+
* [Understanding Certificate Templates](https://cloud.google.com/certificate-authority-service/docs/certificate-template)
|
604
|
+
* [Common configurations and Certificate Profiles](https://cloud.google.com/certificate-authority-service/docs/certificate-profile)
|
596
605
|
## Example Usage
|
597
606
|
|
598
|
-
###
|
599
|
-
|
607
|
+
### Basic_certificate_template
|
608
|
+
An example of a basic privateca certificate template
|
600
609
|
```python
|
601
610
|
import pulumi
|
602
611
|
import pulumi_gcp as gcp
|
603
612
|
|
604
|
-
|
605
|
-
|
606
|
-
|
607
|
-
description="
|
613
|
+
primary = gcp.certificateauthority.CertificateTemplate("primary",
|
614
|
+
location="us-west1",
|
615
|
+
name="template",
|
616
|
+
description="An updated sample certificate template",
|
608
617
|
identity_constraints=gcp.certificateauthority.CertificateTemplateIdentityConstraintsArgs(
|
609
618
|
allow_subject_alt_names_passthrough=True,
|
610
619
|
allow_subject_passthrough=True,
|
@@ -675,8 +684,9 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
675
684
|
],
|
676
685
|
)],
|
677
686
|
),
|
687
|
+
project="my-project-name",
|
678
688
|
labels={
|
679
|
-
"label-
|
689
|
+
"label-two": "value-two",
|
680
690
|
})
|
681
691
|
```
|
682
692
|
|
@@ -766,7 +776,7 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
766
776
|
opts: Optional[pulumi.ResourceOptions] = None,
|
767
777
|
create_time: Optional[pulumi.Input[str]] = None,
|
768
778
|
description: Optional[pulumi.Input[str]] = None,
|
769
|
-
effective_labels: Optional[pulumi.Input[Mapping[str,
|
779
|
+
effective_labels: Optional[pulumi.Input[Mapping[str, Any]]] = None,
|
770
780
|
identity_constraints: Optional[pulumi.Input[pulumi.InputType['CertificateTemplateIdentityConstraintsArgs']]] = None,
|
771
781
|
labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
772
782
|
location: Optional[pulumi.Input[str]] = None,
|
@@ -775,7 +785,7 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
775
785
|
passthrough_extensions: Optional[pulumi.Input[pulumi.InputType['CertificateTemplatePassthroughExtensionsArgs']]] = None,
|
776
786
|
predefined_values: Optional[pulumi.Input[pulumi.InputType['CertificateTemplatePredefinedValuesArgs']]] = None,
|
777
787
|
project: Optional[pulumi.Input[str]] = None,
|
778
|
-
pulumi_labels: Optional[pulumi.Input[Mapping[str,
|
788
|
+
pulumi_labels: Optional[pulumi.Input[Mapping[str, Any]]] = None,
|
779
789
|
update_time: Optional[pulumi.Input[str]] = None) -> 'CertificateTemplate':
|
780
790
|
"""
|
781
791
|
Get an existing CertificateTemplate resource's state with the given name, id, and optional extra
|
@@ -786,26 +796,29 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
786
796
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
787
797
|
:param pulumi.Input[str] create_time: Output only. The time at which this CertificateTemplate was created.
|
788
798
|
:param pulumi.Input[str] description: Optional. A human-readable description of scenarios this template is intended for.
|
789
|
-
:param pulumi.Input[Mapping[str,
|
790
|
-
:param pulumi.Input[pulumi.InputType['CertificateTemplateIdentityConstraintsArgs']] identity_constraints: Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
791
|
-
|
792
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Optional. Labels with user-defined metadata.
|
793
|
-
|
794
|
-
|
799
|
+
:param pulumi.Input[Mapping[str, Any]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
|
800
|
+
:param pulumi.Input[pulumi.InputType['CertificateTemplateIdentityConstraintsArgs']] identity_constraints: Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
801
|
+
omitted, then this template will not add restrictions on a certificate's identity.
|
802
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
|
803
|
+
present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
|
804
|
+
resource.
|
795
805
|
:param pulumi.Input[str] location: The location for the resource
|
796
|
-
|
797
|
-
|
798
|
-
|
799
|
-
|
806
|
+
:param pulumi.Input[str] maximum_lifetime: Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
807
|
+
IssuancePolicy specifies a maximum lifetime the minimum of the two durations will be the maximum lifetime for issued.
|
808
|
+
Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective
|
809
|
+
lifetime will be explicitly truncated to match it.
|
800
810
|
:param pulumi.Input[str] name: The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
|
801
|
-
:param pulumi.Input[pulumi.InputType['CertificateTemplatePassthroughExtensionsArgs']] passthrough_extensions: Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
802
|
-
|
803
|
-
|
804
|
-
|
805
|
-
|
806
|
-
|
807
|
-
|
808
|
-
|
811
|
+
:param pulumi.Input[pulumi.InputType['CertificateTemplatePassthroughExtensionsArgs']] passthrough_extensions: Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
812
|
+
If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
|
813
|
+
dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
|
814
|
+
request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
|
815
|
+
These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
|
816
|
+
:param pulumi.Input[pulumi.InputType['CertificateTemplatePredefinedValuesArgs']] predefined_values: Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
817
|
+
certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
|
818
|
+
here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
|
819
|
+
certificate issuance request will fail.
|
820
|
+
:param pulumi.Input[str] project: The project for the resource
|
821
|
+
:param pulumi.Input[Mapping[str, Any]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
|
809
822
|
:param pulumi.Input[str] update_time: Output only. The time at which this CertificateTemplate was updated.
|
810
823
|
"""
|
811
824
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
@@ -845,7 +858,7 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
845
858
|
|
846
859
|
@property
|
847
860
|
@pulumi.getter(name="effectiveLabels")
|
848
|
-
def effective_labels(self) -> pulumi.Output[Mapping[str,
|
861
|
+
def effective_labels(self) -> pulumi.Output[Mapping[str, Any]]:
|
849
862
|
"""
|
850
863
|
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
|
851
864
|
"""
|
@@ -855,8 +868,8 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
855
868
|
@pulumi.getter(name="identityConstraints")
|
856
869
|
def identity_constraints(self) -> pulumi.Output[Optional['outputs.CertificateTemplateIdentityConstraints']]:
|
857
870
|
"""
|
858
|
-
Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
859
|
-
|
871
|
+
Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is
|
872
|
+
omitted, then this template will not add restrictions on a certificate's identity.
|
860
873
|
"""
|
861
874
|
return pulumi.get(self, "identity_constraints")
|
862
875
|
|
@@ -864,9 +877,9 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
864
877
|
@pulumi.getter
|
865
878
|
def labels(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
|
866
879
|
"""
|
867
|
-
Optional. Labels with user-defined metadata.
|
868
|
-
|
869
|
-
|
880
|
+
Optional. Labels with user-defined metadata. **Note**: This field is non-authoritative, and will only manage the labels
|
881
|
+
present in your configuration. Please refer to the field `effective_labels` for all of the labels present on the
|
882
|
+
resource.
|
870
883
|
"""
|
871
884
|
return pulumi.get(self, "labels")
|
872
885
|
|
@@ -875,9 +888,6 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
875
888
|
def location(self) -> pulumi.Output[str]:
|
876
889
|
"""
|
877
890
|
The location for the resource
|
878
|
-
|
879
|
-
|
880
|
-
- - -
|
881
891
|
"""
|
882
892
|
return pulumi.get(self, "location")
|
883
893
|
|
@@ -885,7 +895,10 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
885
895
|
@pulumi.getter(name="maximumLifetime")
|
886
896
|
def maximum_lifetime(self) -> pulumi.Output[Optional[str]]:
|
887
897
|
"""
|
888
|
-
Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
898
|
+
Optional. The maximum lifetime allowed for all issued certificates that use this template. If the issuing CaPool's
|
899
|
+
IssuancePolicy specifies a maximum lifetime the minimum of the two durations will be the maximum lifetime for issued.
|
900
|
+
Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective
|
901
|
+
lifetime will be explicitly truncated to match it.
|
889
902
|
"""
|
890
903
|
return pulumi.get(self, "maximum_lifetime")
|
891
904
|
|
@@ -901,8 +914,11 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
901
914
|
@pulumi.getter(name="passthroughExtensions")
|
902
915
|
def passthrough_extensions(self) -> pulumi.Output[Optional['outputs.CertificateTemplatePassthroughExtensions']]:
|
903
916
|
"""
|
904
|
-
Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
905
|
-
|
917
|
+
Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate.
|
918
|
+
If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be
|
919
|
+
dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance
|
920
|
+
request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions.
|
921
|
+
These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
|
906
922
|
"""
|
907
923
|
return pulumi.get(self, "passthrough_extensions")
|
908
924
|
|
@@ -910,8 +926,10 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
910
926
|
@pulumi.getter(name="predefinedValues")
|
911
927
|
def predefined_values(self) -> pulumi.Output[Optional['outputs.CertificateTemplatePredefinedValues']]:
|
912
928
|
"""
|
913
|
-
Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
914
|
-
|
929
|
+
Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the
|
930
|
+
certificate request includes conflicting values for the same properties, they will be overwritten by the values defined
|
931
|
+
here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the
|
932
|
+
certificate issuance request will fail.
|
915
933
|
"""
|
916
934
|
return pulumi.get(self, "predefined_values")
|
917
935
|
|
@@ -919,17 +937,15 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
919
937
|
@pulumi.getter
|
920
938
|
def project(self) -> pulumi.Output[str]:
|
921
939
|
"""
|
922
|
-
The
|
923
|
-
If it is not provided, the provider project is used.
|
940
|
+
The project for the resource
|
924
941
|
"""
|
925
942
|
return pulumi.get(self, "project")
|
926
943
|
|
927
944
|
@property
|
928
945
|
@pulumi.getter(name="pulumiLabels")
|
929
|
-
def pulumi_labels(self) -> pulumi.Output[Mapping[str,
|
946
|
+
def pulumi_labels(self) -> pulumi.Output[Mapping[str, Any]]:
|
930
947
|
"""
|
931
|
-
The combination of labels configured directly on the resource
|
932
|
-
and default labels configured on the provider.
|
948
|
+
The combination of labels configured directly on the resource and default labels configured on the provider.
|
933
949
|
"""
|
934
950
|
return pulumi.get(self, "pulumi_labels")
|
935
951
|
|