certificate_manager library

Certificate Manager — DNS authorization, managed/self-managed certificates, and certificate maps for HTTPS load balancers.

Classes

CertificateManagerCertificateIssuanceConfigCertificateAuthorityConfig

Certificate authority backend for GoogleCertificateManagerCertificateIssuanceConfig.

CertificateManagerCertificateIssuanceConfigCertificateAuthorityServiceConfig

CAS pool reference inside CertificateManagerCertificateIssuanceConfigCertificateAuthorityConfig.

CertificateManagerCertificateManagedProvisioning

Google-managed certificate — auto-provisioned and renewed while DNS authorization remains valid.

CertificateManagerCertificateMapEntryHostname

hostname variant of CertificateManagerCertificateMapEntryMatch.

CertificateManagerCertificateMapEntryMatch

Selects which traffic a GoogleCertificateManagerCertificateMapEntry matches. The provider's exactly_one_of on hostname / matcher is enforced at compile time: pass exactly one variant.

CertificateManagerCertificateMapEntryMatcher

matcher variant of CertificateManagerCertificateMapEntryMatch.

CertificateManagerCertificateProvisioningSource

Provisioning mode for GoogleCertificateManagerCertificate. Sealed so the API managed / self_managed exactly-one constraint is enforced at compile time.

CertificateManagerCertificateSelfManagedProvisioning

User-uploaded PEM certificate + private key.

CertificateManagerTrustConfigAllowlistedCertificate

Allowlisted PEM certificate entry on GoogleCertificateManagerTrustConfig.

CertificateManagerTrustConfigIntermediateCa

Intermediate CA PEM entry inside CertificateManagerTrustConfigTrustStore.

CertificateManagerTrustConfigTrustAnchor

PEM trust anchor entry inside CertificateManagerTrustConfigTrustStore.

CertificateManagerTrustConfigTrustStore

Trust store block on GoogleCertificateManagerTrustConfig.

GoogleCertificateManagerCertificate

Factory wrapper for google_certificate_manager_certificate.

GoogleCertificateManagerCertificateIssuanceConfig

Factory wrapper for google_certificate_manager_certificate_issuance_config.

GoogleCertificateManagerCertificateMap

Factory wrapper for google_certificate_manager_certificate_map.

GoogleCertificateManagerCertificateMapEntry

Factory wrapper for google_certificate_manager_certificate_map_entry.

GoogleCertificateManagerDnsAuthorization

Factory wrapper for google_certificate_manager_dns_authorization.

GoogleCertificateManagerTrustConfig

Factory wrapper for google_certificate_manager_trust_config.

Enums

CertificateManagerCertificateIssuanceConfigKeyAlgorithm

key_algorithm — private key algorithm for issued certificates.

CertificateManagerCertificateScope

scope — where the certificate may be served (default / edge / all regions / client-auth mTLS).

CertificateManagerDnsAuthorizationType

type — DNS authorization record strategy. When unset the API picks FIXED_RECORD for global resources.