Cloudflare v6.10.1, Oct 22 25

Cloudflare v6.10.1 published on Wednesday, Oct 22, 2025 by Pulumi

cloudflare.getCustomSsls

Cloudflare v6.10.1 published on Wednesday, Oct 22, 2025 by Pulumi

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleCustomSsls = cloudflare.getCustomSsls({
    zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
    status: "active",
});

import pulumi
import pulumi_cloudflare as cloudflare

example_custom_ssls = cloudflare.get_custom_ssls(zone_id="023e105f4ecef8ad9ca31a8372d0c353",
    status="active")

package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.LookupCustomSsls(ctx, &cloudflare.LookupCustomSslsArgs{
			ZoneId: "023e105f4ecef8ad9ca31a8372d0c353",
			Status: pulumi.StringRef("active"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleCustomSsls = Cloudflare.GetCustomSsls.Invoke(new()
    {
        ZoneId = "023e105f4ecef8ad9ca31a8372d0c353",
        Status = "active",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetCustomSslsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleCustomSsls = CloudflareFunctions.getCustomSsls(GetCustomSslsArgs.builder()
            .zoneId("023e105f4ecef8ad9ca31a8372d0c353")
            .status("active")
            .build());

    }
}

variables:
  exampleCustomSsls:
    fn::invoke:
      function: cloudflare:getCustomSsls
      arguments:
        zoneId: 023e105f4ecef8ad9ca31a8372d0c353
        status: active

Using getCustomSsls

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getCustomSsls(args: GetCustomSslsArgs, opts?: InvokeOptions): Promise<GetCustomSslsResult>
function getCustomSslsOutput(args: GetCustomSslsOutputArgs, opts?: InvokeOptions): Output<GetCustomSslsResult>

def get_custom_ssls(match: Optional[str] = None,
                    max_items: Optional[int] = None,
                    status: Optional[str] = None,
                    zone_id: Optional[str] = None,
                    opts: Optional[InvokeOptions] = None) -> GetCustomSslsResult
def get_custom_ssls_output(match: Optional[pulumi.Input[str]] = None,
                    max_items: Optional[pulumi.Input[int]] = None,
                    status: Optional[pulumi.Input[str]] = None,
                    zone_id: Optional[pulumi.Input[str]] = None,
                    opts: Optional[InvokeOptions] = None) -> Output[GetCustomSslsResult]

func LookupCustomSsls(ctx *Context, args *LookupCustomSslsArgs, opts ...InvokeOption) (*LookupCustomSslsResult, error)
func LookupCustomSslsOutput(ctx *Context, args *LookupCustomSslsOutputArgs, opts ...InvokeOption) LookupCustomSslsResultOutput

> Note: This function is named LookupCustomSsls in the Go SDK.

public static class GetCustomSsls 
{
    public static Task<GetCustomSslsResult> InvokeAsync(GetCustomSslsArgs args, InvokeOptions? opts = null)
    public static Output<GetCustomSslsResult> Invoke(GetCustomSslsInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetCustomSslsResult> getCustomSsls(GetCustomSslsArgs args, InvokeOptions options)
public static Output<GetCustomSslsResult> getCustomSsls(GetCustomSslsArgs args, InvokeOptions options)

fn::invoke:
  function: cloudflare:index/getCustomSsls:getCustomSsls
  arguments:
    # arguments dictionary

The following arguments are supported:

ZoneId string: Identifier.
Match string: Whether to match all search requirements or at least one (any). Available values: "any", "all".
MaxItems int: Max items to fetch, default: 1000
Status string: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

ZoneId string: Identifier.
Match string: Whether to match all search requirements or at least one (any). Available values: "any", "all".
MaxItems int: Max items to fetch, default: 1000
Status string: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

zoneId String: Identifier.
match String: Whether to match all search requirements or at least one (any). Available values: "any", "all".
maxItems Integer: Max items to fetch, default: 1000
status String: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

zoneId string: Identifier.
match string: Whether to match all search requirements or at least one (any). Available values: "any", "all".
maxItems number: Max items to fetch, default: 1000
status string: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

zone_id str: Identifier.
match str: Whether to match all search requirements or at least one (any). Available values: "any", "all".
max_items int: Max items to fetch, default: 1000
status str: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

zoneId String: Identifier.
match String: Whether to match all search requirements or at least one (any). Available values: "any", "all".
maxItems Number: Max items to fetch, default: 1000
status String: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

getCustomSsls Result

The following output properties are available:

Id string: The provider-assigned unique ID for this managed resource.
Match string: Whether to match all search requirements or at least one (any). Available values: "any", "all".
Results List<GetCustomSslsResult>: The items returned by the data source
ZoneId string: Identifier.
MaxItems int: Max items to fetch, default: 1000
Status string: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

Id string: The provider-assigned unique ID for this managed resource.
Match string: Whether to match all search requirements or at least one (any). Available values: "any", "all".
Results []GetCustomSslsResult: The items returned by the data source
ZoneId string: Identifier.
MaxItems int: Max items to fetch, default: 1000
Status string: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

id String: The provider-assigned unique ID for this managed resource.
match String: Whether to match all search requirements or at least one (any). Available values: "any", "all".
results List<GetCustomSslsResult>: The items returned by the data source
zoneId String: Identifier.
maxItems Integer: Max items to fetch, default: 1000
status String: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

id string: The provider-assigned unique ID for this managed resource.
match string: Whether to match all search requirements or at least one (any). Available values: "any", "all".
results GetCustomSslsResult[]: The items returned by the data source
zoneId string: Identifier.
maxItems number: Max items to fetch, default: 1000
status string: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

id str: The provider-assigned unique ID for this managed resource.
match str: Whether to match all search requirements or at least one (any). Available values: "any", "all".
results Sequence[GetCustomSslsResult]: The items returned by the data source
zone_id str: Identifier.
max_items int: Max items to fetch, default: 1000
status str: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

id String: The provider-assigned unique ID for this managed resource.
match String: Whether to match all search requirements or at least one (any). Available values: "any", "all".
results List<Property Map>: The items returned by the data source
zoneId String: Identifier.
maxItems Number: Max items to fetch, default: 1000
status String: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".

Supporting Types

GetCustomSslsResult

BundleMethod string: A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
ExpiresOn string: When the certificate from the authority expires.
GeoRestrictions GetCustomSslsResultGeoRestrictions: Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
Hosts List<string>
Id string: Identifier.
Issuer string: The certificate authority that issued the certificate.
KeylessServer GetCustomSslsResultKeylessServer
ModifiedOn string: When the certificate was last modified.
Policy string: Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
Priority double: The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
Signature string: The type of hash used for the certificate.
Status string: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
UploadedOn string: When the certificate was uploaded to Cloudflare.
ZoneId string: Identifier.

BundleMethod string: A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
ExpiresOn string: When the certificate from the authority expires.
GeoRestrictions GetCustomSslsResultGeoRestrictions: Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
Hosts []string
Id string: Identifier.
Issuer string: The certificate authority that issued the certificate.
KeylessServer GetCustomSslsResultKeylessServer
ModifiedOn string: When the certificate was last modified.
Policy string: Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
Priority float64: The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
Signature string: The type of hash used for the certificate.
Status string: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
UploadedOn string: When the certificate was uploaded to Cloudflare.
ZoneId string: Identifier.

bundleMethod String: A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
expiresOn String: When the certificate from the authority expires.
geoRestrictions GetCustomSslsResultGeoRestrictions: Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
hosts List<String>
id String: Identifier.
issuer String: The certificate authority that issued the certificate.
keylessServer GetCustomSslsResultKeylessServer
modifiedOn String: When the certificate was last modified.
policy String: Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
priority Double: The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
signature String: The type of hash used for the certificate.
status String: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
uploadedOn String: When the certificate was uploaded to Cloudflare.
zoneId String: Identifier.

bundleMethod string: A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
expiresOn string: When the certificate from the authority expires.
geoRestrictions GetCustomSslsResultGeoRestrictions: Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
hosts string[]
id string: Identifier.
issuer string: The certificate authority that issued the certificate.
keylessServer GetCustomSslsResultKeylessServer
modifiedOn string: When the certificate was last modified.
policy string: Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
priority number: The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
signature string: The type of hash used for the certificate.
status string: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
uploadedOn string: When the certificate was uploaded to Cloudflare.
zoneId string: Identifier.

bundle_method str: A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
expires_on str: When the certificate from the authority expires.
geo_restrictions GetCustomSslsResultGeoRestrictions: Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
hosts Sequence[str]
id str: Identifier.
issuer str: The certificate authority that issued the certificate.
keyless_server GetCustomSslsResultKeylessServer
modified_on str: When the certificate was last modified.
policy str: Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
priority float: The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
signature str: The type of hash used for the certificate.
status str: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
uploaded_on str: When the certificate was uploaded to Cloudflare.
zone_id str: Identifier.

bundleMethod String: A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
expiresOn String: When the certificate from the authority expires.
geoRestrictions Property Map: Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
hosts List<String>
id String: Identifier.
issuer String: The certificate authority that issued the certificate.
keylessServer Property Map
modifiedOn String: When the certificate was last modified.
policy String: Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
priority Number: The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
signature String: The type of hash used for the certificate.
status String: Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
uploadedOn String: When the certificate was uploaded to Cloudflare.
zoneId String: Identifier.

GetCustomSslsResultGeoRestrictions

Label string: Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".

Label string: Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".

label String: Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".

label string: Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".

label str: Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".

label String: Available values: "us", "eu", <span pulumi-lang-nodejs=""highestSecurity"" pulumi-lang-dotnet=""HighestSecurity"" pulumi-lang-go=""highestSecurity"" pulumi-lang-python=""highest_security"" pulumi-lang-yaml=""highestSecurity"" pulumi-lang-java=""highestSecurity"">"highest_security".

GetCustomSslsResultKeylessServer

CreatedOn string: When the Keyless SSL was created.
Enabled bool: Whether or not the Keyless SSL is on or off.
Host string: The keyless SSL name.
Id string: Keyless certificate identifier tag.
ModifiedOn string: When the Keyless SSL was last modified.
Name string: The keyless SSL name.
Permissions List<string>: Available permissions for the Keyless SSL for the current user requesting the item.
Port double: The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
Status string: Status of the Keyless SSL. Available values: "active", "deleted".
Tunnel GetCustomSslsResultKeylessServerTunnel: Configuration for using Keyless SSL through a Cloudflare Tunnel

CreatedOn string: When the Keyless SSL was created.
Enabled bool: Whether or not the Keyless SSL is on or off.
Host string: The keyless SSL name.
Id string: Keyless certificate identifier tag.
ModifiedOn string: When the Keyless SSL was last modified.
Name string: The keyless SSL name.
Permissions []string: Available permissions for the Keyless SSL for the current user requesting the item.
Port float64: The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
Status string: Status of the Keyless SSL. Available values: "active", "deleted".
Tunnel GetCustomSslsResultKeylessServerTunnel: Configuration for using Keyless SSL through a Cloudflare Tunnel

createdOn String: When the Keyless SSL was created.
enabled Boolean: Whether or not the Keyless SSL is on or off.
host String: The keyless SSL name.
id String: Keyless certificate identifier tag.
modifiedOn String: When the Keyless SSL was last modified.
name String: The keyless SSL name.
permissions List<String>: Available permissions for the Keyless SSL for the current user requesting the item.
port Double: The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
status String: Status of the Keyless SSL. Available values: "active", "deleted".
tunnel GetCustomSslsResultKeylessServerTunnel: Configuration for using Keyless SSL through a Cloudflare Tunnel

createdOn string: When the Keyless SSL was created.
enabled boolean: Whether or not the Keyless SSL is on or off.
host string: The keyless SSL name.
id string: Keyless certificate identifier tag.
modifiedOn string: When the Keyless SSL was last modified.
name string: The keyless SSL name.
permissions string[]: Available permissions for the Keyless SSL for the current user requesting the item.
port number: The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
status string: Status of the Keyless SSL. Available values: "active", "deleted".
tunnel GetCustomSslsResultKeylessServerTunnel: Configuration for using Keyless SSL through a Cloudflare Tunnel

created_on str: When the Keyless SSL was created.
enabled bool: Whether or not the Keyless SSL is on or off.
host str: The keyless SSL name.
id str: Keyless certificate identifier tag.
modified_on str: When the Keyless SSL was last modified.
name str: The keyless SSL name.
permissions Sequence[str]: Available permissions for the Keyless SSL for the current user requesting the item.
port float: The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
status str: Status of the Keyless SSL. Available values: "active", "deleted".
tunnel GetCustomSslsResultKeylessServerTunnel: Configuration for using Keyless SSL through a Cloudflare Tunnel

createdOn String: When the Keyless SSL was created.
enabled Boolean: Whether or not the Keyless SSL is on or off.
host String: The keyless SSL name.
id String: Keyless certificate identifier tag.
modifiedOn String: When the Keyless SSL was last modified.
name String: The keyless SSL name.
permissions List<String>: Available permissions for the Keyless SSL for the current user requesting the item.
port Number: The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
status String: Status of the Keyless SSL. Available values: "active", "deleted".
tunnel Property Map: Configuration for using Keyless SSL through a Cloudflare Tunnel

GetCustomSslsResultKeylessServerTunnel

PrivateIp string: Private IP of the Key Server Host
VnetId string: Cloudflare Tunnel Virtual Network ID

PrivateIp string: Private IP of the Key Server Host
VnetId string: Cloudflare Tunnel Virtual Network ID

privateIp String: Private IP of the Key Server Host
vnetId String: Cloudflare Tunnel Virtual Network ID

privateIp string: Private IP of the Key Server Host
vnetId string: Cloudflare Tunnel Virtual Network ID

private_ip str: Private IP of the Key Server Host
vnet_id str: Cloudflare Tunnel Virtual Network ID

privateIp String: Private IP of the Key Server Host
vnetId String: Cloudflare Tunnel Virtual Network ID

Package Details

Repository: Cloudflare pulumi/pulumi-cloudflare
License: Apache-2.0
Notes: This Pulumi package is based on the cloudflare Terraform Provider.

Cloudflare v6.10.1 published on Wednesday, Oct 22, 2025 by Pulumi

pulumi/pulumi-cloudflare

cloudflare.getCustomSsls

On this page

On this page

Example Usage

Using getCustomSsls

getCustomSsls Result

Supporting Types

GetCustomSslsResult

GetCustomSslsResultGeoRestrictions

GetCustomSslsResultKeylessServer

GetCustomSslsResultKeylessServerTunnel

Package Details

On this page

On this page