Package com.pulumi.gcp.certificateauthority.inputs

Class AuthorityState

  • public final class AuthorityState
extends com.pulumi.resources.ResourceArgs

    • Nested Class Summary

      Nested Classes 
      Modifier and Type Class Description
      static class  AuthorityState.Builder  

      • Nested classes/interfaces inherited from class com.pulumi.resources.InputArgs

        com.pulumi.resources.InputArgs.InputArgsInternal

    • Method Detail

      • accessUrls

        public java.util.Optional<com.pulumi.core.Output<java.util.List<AuthorityAccessUrlArgs>>> accessUrls()
        Returns:
        URLs for accessing content published by this CA, such as the CA certificate and CRLs. Structure is documented below.

      • certificateAuthorityId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> certificateAuthorityId()
        Returns:
        The user provided Resource ID for this Certificate Authority.

      • config

        public java.util.Optional<com.pulumi.core.Output<AuthorityConfigArgs>> config()
        Returns:
        The config used to create a self-signed X.509 certificate or CSR. Structure is documented below.

      • createTime

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> createTime()
        Returns:
        The time at which this CertificateAuthority was created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

      • deletionProtection

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> deletionProtection()
        Returns:
        Whether or not to allow Terraform to destroy the CertificateAuthority. Unless this field is set to false in Terraform state, a 'terraform destroy' or 'terraform apply' that would delete the instance will fail.

      • desiredState

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> desiredState()
        Returns:
        Desired state of the CertificateAuthority. Set this field to `STAGED` to create a `STAGED` root CA.

      • gcsBucket

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> gcsBucket()
        Returns:
        The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and CRLs. This must be a bucket name, without any prefixes (such as `gs://`) or suffixes (such as `.googleapis.com`). For example, to use a bucket named my-bucket, you would simply specify `my-bucket`. If not specified, a managed bucket will be created.

      • ignoreActiveCertificatesOnDeletion

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> ignoreActiveCertificatesOnDeletion()
        Returns:
        This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs. Use with care. Defaults to `false`.

      • keySpec

        public java.util.Optional<com.pulumi.core.Output<AuthorityKeySpecArgs>> keySpec()
        Returns:
        Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA certificate. Otherwise, it is used to sign a CSR. Structure is documented below.

      • labels

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> labels()
        Returns:
        Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.

      • lifetime

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> lifetime()
        Returns:
        The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".

      • location

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> location()
        Returns:
        Location of the CertificateAuthority. A full list of valid locations can be found by running `gcloud privateca locations list`.

      • name

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> name()
        Returns:
        The resource name for this CertificateAuthority in the format projects/*/locations/*/certificateAuthorities/*.

      • pemCaCertificate

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> pemCaCertificate()
        Returns:
        The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with a third party issuer.

      • pemCaCertificates

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> pemCaCertificates()
        Returns:
        This CertificateAuthority's certificate chain, including the current CertificateAuthority's certificate. Ordered such that the root issuer is the final element (consistent with RFC 5246). For a self-signed CA, this will only list the current CertificateAuthority's certificate.

      • pool

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> pool()
        Returns:
        The name of the CaPool this Certificate Authority belongs to.

      • project

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> project()
        Returns:
        The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

      • skipGracePeriod

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> skipGracePeriod()
        Returns:
        If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to `false`.

      • state

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> state()
        Returns:
        The State for this CertificateAuthority.

      • subordinateConfig

        public java.util.Optional<com.pulumi.core.Output<AuthoritySubordinateConfigArgs>> subordinateConfig()
        Returns:
        If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which describes its issuers. Structure is documented below.

      • type

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> type()
        Returns:
        The Type of this CertificateAuthority. > **Note:** For `SUBORDINATE` Certificate Authorities, they need to be activated before they can issue certificates. Default value is `SELF_SIGNED`. Possible values are: `SELF_SIGNED`, `SUBORDINATE`.

      • updateTime

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> updateTime()
        Returns:
        The time at which this CertificateAuthority was updated. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".