1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. getKeylessCertificate
Viewing docs for Cloudflare v6.13.0
published on Wednesday, Jan 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.getKeylessCertificate

cloudflare logo
Viewing docs for Cloudflare v6.13.0
published on Wednesday, Jan 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleKeylessCertificate = cloudflare.getKeylessCertificate({
    zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
    keylessCertificateId: "023e105f4ecef8ad9ca31a8372d0c353",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_keyless_certificate = cloudflare.get_keyless_certificate(zone_id="023e105f4ecef8ad9ca31a8372d0c353",
    keyless_certificate_id="023e105f4ecef8ad9ca31a8372d0c353")

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.LookupKeylessCertificate(ctx, &cloudflare.LookupKeylessCertificateArgs{
			ZoneId:               "023e105f4ecef8ad9ca31a8372d0c353",
			KeylessCertificateId: "023e105f4ecef8ad9ca31a8372d0c353",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleKeylessCertificate = Cloudflare.GetKeylessCertificate.Invoke(new()
    {
        ZoneId = "023e105f4ecef8ad9ca31a8372d0c353",
        KeylessCertificateId = "023e105f4ecef8ad9ca31a8372d0c353",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetKeylessCertificateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleKeylessCertificate = CloudflareFunctions.getKeylessCertificate(GetKeylessCertificateArgs.builder()
            .zoneId("023e105f4ecef8ad9ca31a8372d0c353")
            .keylessCertificateId("023e105f4ecef8ad9ca31a8372d0c353")
            .build());

    }
}

    variables:
  exampleKeylessCertificate:
    fn::invoke:
      function: cloudflare:getKeylessCertificate
      arguments:
        zoneId: 023e105f4ecef8ad9ca31a8372d0c353
        keylessCertificateId: 023e105f4ecef8ad9ca31a8372d0c353

    Using getKeylessCertificate

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getKeylessCertificate(args: GetKeylessCertificateArgs, opts?: InvokeOptions): Promise<GetKeylessCertificateResult>
function getKeylessCertificateOutput(args: GetKeylessCertificateOutputArgs, opts?: InvokeOptions): Output<GetKeylessCertificateResult>
    def get_keyless_certificate(keyless_certificate_id: Optional[str] = None,
                            zone_id: Optional[str] = None,
                            opts: Optional[InvokeOptions] = None) -> GetKeylessCertificateResult
def get_keyless_certificate_output(keyless_certificate_id: Optional[pulumi.Input[str]] = None,
                            zone_id: Optional[pulumi.Input[str]] = None,
                            opts: Optional[InvokeOptions] = None) -> Output[GetKeylessCertificateResult]
    func LookupKeylessCertificate(ctx *Context, args *LookupKeylessCertificateArgs, opts ...InvokeOption) (*LookupKeylessCertificateResult, error)
func LookupKeylessCertificateOutput(ctx *Context, args *LookupKeylessCertificateOutputArgs, opts ...InvokeOption) LookupKeylessCertificateResultOutput

    > Note: This function is named LookupKeylessCertificate in the Go SDK.

    public static class GetKeylessCertificate 
{
    public static Task<GetKeylessCertificateResult> InvokeAsync(GetKeylessCertificateArgs args, InvokeOptions? opts = null)
    public static Output<GetKeylessCertificateResult> Invoke(GetKeylessCertificateInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetKeylessCertificateResult> getKeylessCertificate(GetKeylessCertificateArgs args, InvokeOptions options)
public static Output<GetKeylessCertificateResult> getKeylessCertificate(GetKeylessCertificateArgs args, InvokeOptions options)

    fn::invoke:
  function: cloudflare:index/getKeylessCertificate:getKeylessCertificate
  arguments:
    # arguments dictionary

    The following arguments are supported:

    KeylessCertificateId string
    Identifier.
    ZoneId string
    Identifier.
    KeylessCertificateId string
    Identifier.
    ZoneId string
    Identifier.
    keylessCertificateId String
    Identifier.
    zoneId String
    Identifier.
    keylessCertificateId string
    Identifier.
    zoneId string
    Identifier.
    keyless_certificate_id str
    Identifier.
    zone_id str
    Identifier.
    keylessCertificateId String
    Identifier.
    zoneId String
    Identifier.

    getKeylessCertificate Result

    The following output properties are available:

    CreatedOn string
    When the Keyless SSL was created.
    Enabled bool
    Whether or not the Keyless SSL is on or off.
    Host string
    The keyless SSL name.
    Id string
    Identifier.
    KeylessCertificateId string
    Identifier.
    ModifiedOn string
    When the Keyless SSL was last modified.
    Name string
    The keyless SSL name.
    Permissions List<string>
    Available permissions for the Keyless SSL for the current user requesting the item.
    Port double
    The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
    Status string
    Status of the Keyless SSL. Available values: "active", "deleted".
    Tunnel GetKeylessCertificateTunnel
    Configuration for using Keyless SSL through a Cloudflare Tunnel
    ZoneId string
    Identifier.
    CreatedOn string
    When the Keyless SSL was created.
    Enabled bool
    Whether or not the Keyless SSL is on or off.
    Host string
    The keyless SSL name.
    Id string
    Identifier.
    KeylessCertificateId string
    Identifier.
    ModifiedOn string
    When the Keyless SSL was last modified.
    Name string
    The keyless SSL name.
    Permissions []string
    Available permissions for the Keyless SSL for the current user requesting the item.
    Port float64
    The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
    Status string
    Status of the Keyless SSL. Available values: "active", "deleted".
    Tunnel GetKeylessCertificateTunnel
    Configuration for using Keyless SSL through a Cloudflare Tunnel
    ZoneId string
    Identifier.
    createdOn String
    When the Keyless SSL was created.
    enabled Boolean
    Whether or not the Keyless SSL is on or off.
    host String
    The keyless SSL name.
    id String
    Identifier.
    keylessCertificateId String
    Identifier.
    modifiedOn String
    When the Keyless SSL was last modified.
    name String
    The keyless SSL name.
    permissions List<String>
    Available permissions for the Keyless SSL for the current user requesting the item.
    port Double
    The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
    status String
    Status of the Keyless SSL. Available values: "active", "deleted".
    tunnel GetKeylessCertificateTunnel
    Configuration for using Keyless SSL through a Cloudflare Tunnel
    zoneId String
    Identifier.
    createdOn string
    When the Keyless SSL was created.
    enabled boolean
    Whether or not the Keyless SSL is on or off.
    host string
    The keyless SSL name.
    id string
    Identifier.
    keylessCertificateId string
    Identifier.
    modifiedOn string
    When the Keyless SSL was last modified.
    name string
    The keyless SSL name.
    permissions string[]
    Available permissions for the Keyless SSL for the current user requesting the item.
    port number
    The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
    status string
    Status of the Keyless SSL. Available values: "active", "deleted".
    tunnel GetKeylessCertificateTunnel
    Configuration for using Keyless SSL through a Cloudflare Tunnel
    zoneId string
    Identifier.
    created_on str
    When the Keyless SSL was created.
    enabled bool
    Whether or not the Keyless SSL is on or off.
    host str
    The keyless SSL name.
    id str
    Identifier.
    keyless_certificate_id str
    Identifier.
    modified_on str
    When the Keyless SSL was last modified.
    name str
    The keyless SSL name.
    permissions Sequence[str]
    Available permissions for the Keyless SSL for the current user requesting the item.
    port float
    The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
    status str
    Status of the Keyless SSL. Available values: "active", "deleted".
    tunnel GetKeylessCertificateTunnel
    Configuration for using Keyless SSL through a Cloudflare Tunnel
    zone_id str
    Identifier.
    createdOn String
    When the Keyless SSL was created.
    enabled Boolean
    Whether or not the Keyless SSL is on or off.
    host String
    The keyless SSL name.
    id String
    Identifier.
    keylessCertificateId String
    Identifier.
    modifiedOn String
    When the Keyless SSL was last modified.
    name String
    The keyless SSL name.
    permissions List<String>
    Available permissions for the Keyless SSL for the current user requesting the item.
    port Number
    The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
    status String
    Status of the Keyless SSL. Available values: "active", "deleted".
    tunnel Property Map
    Configuration for using Keyless SSL through a Cloudflare Tunnel
    zoneId String
    Identifier.

    Supporting Types

    GetKeylessCertificateTunnel

    PrivateIp string
    Private IP of the Key Server Host
    VnetId string
    Cloudflare Tunnel Virtual Network ID
    PrivateIp string
    Private IP of the Key Server Host
    VnetId string
    Cloudflare Tunnel Virtual Network ID
    privateIp String
    Private IP of the Key Server Host
    vnetId String
    Cloudflare Tunnel Virtual Network ID
    privateIp string
    Private IP of the Key Server Host
    vnetId string
    Cloudflare Tunnel Virtual Network ID
    private_ip str
    Private IP of the Key Server Host
    vnet_id str
    Cloudflare Tunnel Virtual Network ID
    privateIp String
    Private IP of the Key Server Host
    vnetId String
    Cloudflare Tunnel Virtual Network ID

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Viewing docs for Cloudflare v6.13.0
    published on Wednesday, Jan 21, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare
      Try Pulumi Cloud free. Your team will thank you.