WorkloadIdentityPoolInlineCertificateIssuanceConfig class
Properties
-
caPools
→ Input<Map<String, String>?>?
-
A required mapping of a cloud region to the CA pool resource located in that region used
for certificate issuance, adhering to these constraints:
final
-
hashCode
→ int
-
The hash code for this object.
no setterinherited
-
keyAlgorithm
→ Input<String?>?
-
Key algorithm to use when generating the key pair. This key pair will be used to create
the certificate. If unspecified, this will default to
ECDSA_P256.
final
-
lifetime
→ Input<String?>?
-
Lifetime of the workload certificates issued by the CA pool in seconds. Must be between
86400s (24 hours) to 2592000s (30 days), ends in the suffix "s" (indicating seconds)
and is preceded by the number of seconds. If unspecified, this will be defaulted to
86400s (24 hours).
final
-
rotationWindowPercentage
→ Input<int?>?
-
Rotation window percentage indicating when certificate rotation should be initiated based
on remaining lifetime. Must be between
50 - 80. If unspecified, this will be defaulted
to 50.
final
-
runtimeType
→ Type
-
A representation of the runtime type of the object.
no setterinherited
-
useDefaultSharedCa
→ Input<bool?>?
-
If set to true, the trust domain will utilize the GCP-provisioned default CA. A default
CA in the same region as the workload will be selected to issue the certificate. Enabling
this will clear any existing
caPools configuration to provision the certificates.
> Note This field is mutually exclusive with caPools. If this flag is enabled,
certificates will be automatically provisioned from the default shared CAs. This flag should
not be set if you want to use your own CA pools to provision the certificates.
final
