Google Cloud Classic v6.57.0, May 30 23
Google Cloud Classic v6.57.0, May 30 23
gcp.networksecurity.ClientTlsPolicy
Explore with Pulumi AI
Import
ClientTlsPolicy can be imported using any of these accepted formats
$ pulumi import gcp:networksecurity/clientTlsPolicy:ClientTlsPolicy default projects/{{project}}/locations/{{location}}/clientTlsPolicies/{{name}}
$ pulumi import gcp:networksecurity/clientTlsPolicy:ClientTlsPolicy default {{project}}/{{location}}/{{name}}
$ pulumi import gcp:networksecurity/clientTlsPolicy:ClientTlsPolicy default {{location}}/{{name}}
Example Usage
Network Security Client Tls Policy Basic
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var @default = new Gcp.NetworkSecurity.ClientTlsPolicy("default", new()
{
Labels =
{
{ "foo", "bar" },
},
Description = "my description",
Sni = "secure.example.com",
}, new CustomResourceOptions
{
Provider = google_beta,
});
});
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/networksecurity"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := networksecurity.NewClientTlsPolicy(ctx, "default", &networksecurity.ClientTlsPolicyArgs{
Labels: pulumi.StringMap{
"foo": pulumi.String("bar"),
},
Description: pulumi.String("my description"),
Sni: pulumi.String("secure.example.com"),
}, pulumi.Provider(google_beta))
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.networksecurity.ClientTlsPolicy;
import com.pulumi.gcp.networksecurity.ClientTlsPolicyArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var default_ = new ClientTlsPolicy("default", ClientTlsPolicyArgs.builder()
.labels(Map.of("foo", "bar"))
.description("my description")
.sni("secure.example.com")
.build(), CustomResourceOptions.builder()
.provider(google_beta)
.build());
}
}
import pulumi
import pulumi_gcp as gcp
default = gcp.networksecurity.ClientTlsPolicy("default",
labels={
"foo": "bar",
},
description="my description",
sni="secure.example.com",
opts=pulumi.ResourceOptions(provider=google_beta))
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const _default = new gcp.networksecurity.ClientTlsPolicy("default", {
labels: {
foo: "bar",
},
description: "my description",
sni: "secure.example.com",
}, {
provider: google_beta,
});
resources:
default:
type: gcp:networksecurity:ClientTlsPolicy
properties:
labels:
foo: bar
description: my description
sni: secure.example.com
options:
provider: ${["google-beta"]}
Network Security Client Tls Policy Advanced
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var @default = new Gcp.NetworkSecurity.ClientTlsPolicy("default", new()
{
Labels =
{
{ "foo", "bar" },
},
Description = "my description",
ClientCertificate = new Gcp.NetworkSecurity.Inputs.ClientTlsPolicyClientCertificateArgs
{
CertificateProviderInstance = new Gcp.NetworkSecurity.Inputs.ClientTlsPolicyClientCertificateCertificateProviderInstanceArgs
{
PluginInstance = "google_cloud_private_spiffe",
},
},
ServerValidationCas = new[]
{
new Gcp.NetworkSecurity.Inputs.ClientTlsPolicyServerValidationCaArgs
{
GrpcEndpoint = new Gcp.NetworkSecurity.Inputs.ClientTlsPolicyServerValidationCaGrpcEndpointArgs
{
TargetUri = "unix:mypath",
},
},
new Gcp.NetworkSecurity.Inputs.ClientTlsPolicyServerValidationCaArgs
{
GrpcEndpoint = new Gcp.NetworkSecurity.Inputs.ClientTlsPolicyServerValidationCaGrpcEndpointArgs
{
TargetUri = "unix:mypath1",
},
},
},
}, new CustomResourceOptions
{
Provider = google_beta,
});
});
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/networksecurity"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := networksecurity.NewClientTlsPolicy(ctx, "default", &networksecurity.ClientTlsPolicyArgs{
Labels: pulumi.StringMap{
"foo": pulumi.String("bar"),
},
Description: pulumi.String("my description"),
ClientCertificate: &networksecurity.ClientTlsPolicyClientCertificateArgs{
CertificateProviderInstance: &networksecurity.ClientTlsPolicyClientCertificateCertificateProviderInstanceArgs{
PluginInstance: pulumi.String("google_cloud_private_spiffe"),
},
},
ServerValidationCas: networksecurity.ClientTlsPolicyServerValidationCaArray{
&networksecurity.ClientTlsPolicyServerValidationCaArgs{
GrpcEndpoint: &networksecurity.ClientTlsPolicyServerValidationCaGrpcEndpointArgs{
TargetUri: pulumi.String("unix:mypath"),
},
},
&networksecurity.ClientTlsPolicyServerValidationCaArgs{
GrpcEndpoint: &networksecurity.ClientTlsPolicyServerValidationCaGrpcEndpointArgs{
TargetUri: pulumi.String("unix:mypath1"),
},
},
},
}, pulumi.Provider(google_beta))
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.networksecurity.ClientTlsPolicy;
import com.pulumi.gcp.networksecurity.ClientTlsPolicyArgs;
import com.pulumi.gcp.networksecurity.inputs.ClientTlsPolicyClientCertificateArgs;
import com.pulumi.gcp.networksecurity.inputs.ClientTlsPolicyClientCertificateCertificateProviderInstanceArgs;
import com.pulumi.gcp.networksecurity.inputs.ClientTlsPolicyServerValidationCaArgs;
import com.pulumi.gcp.networksecurity.inputs.ClientTlsPolicyServerValidationCaGrpcEndpointArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var default_ = new ClientTlsPolicy("default", ClientTlsPolicyArgs.builder()
.labels(Map.of("foo", "bar"))
.description("my description")
.clientCertificate(ClientTlsPolicyClientCertificateArgs.builder()
.certificateProviderInstance(ClientTlsPolicyClientCertificateCertificateProviderInstanceArgs.builder()
.pluginInstance("google_cloud_private_spiffe")
.build())
.build())
.serverValidationCas(
ClientTlsPolicyServerValidationCaArgs.builder()
.grpcEndpoint(ClientTlsPolicyServerValidationCaGrpcEndpointArgs.builder()
.targetUri("unix:mypath")
.build())
.build(),
ClientTlsPolicyServerValidationCaArgs.builder()
.grpcEndpoint(ClientTlsPolicyServerValidationCaGrpcEndpointArgs.builder()
.targetUri("unix:mypath1")
.build())
.build())
.build(), CustomResourceOptions.builder()
.provider(google_beta)
.build());
}
}
import pulumi
import pulumi_gcp as gcp
default = gcp.networksecurity.ClientTlsPolicy("default",
labels={
"foo": "bar",
},
description="my description",
client_certificate=gcp.networksecurity.ClientTlsPolicyClientCertificateArgs(
certificate_provider_instance=gcp.networksecurity.ClientTlsPolicyClientCertificateCertificateProviderInstanceArgs(
plugin_instance="google_cloud_private_spiffe",
),
),
server_validation_cas=[
gcp.networksecurity.ClientTlsPolicyServerValidationCaArgs(
grpc_endpoint=gcp.networksecurity.ClientTlsPolicyServerValidationCaGrpcEndpointArgs(
target_uri="unix:mypath",
),
),
gcp.networksecurity.ClientTlsPolicyServerValidationCaArgs(
grpc_endpoint=gcp.networksecurity.ClientTlsPolicyServerValidationCaGrpcEndpointArgs(
target_uri="unix:mypath1",
),
),
],
opts=pulumi.ResourceOptions(provider=google_beta))
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const _default = new gcp.networksecurity.ClientTlsPolicy("default", {
labels: {
foo: "bar",
},
description: "my description",
clientCertificate: {
certificateProviderInstance: {
pluginInstance: "google_cloud_private_spiffe",
},
},
serverValidationCas: [
{
grpcEndpoint: {
targetUri: "unix:mypath",
},
},
{
grpcEndpoint: {
targetUri: "unix:mypath1",
},
},
],
}, {
provider: google_beta,
});
resources:
default:
type: gcp:networksecurity:ClientTlsPolicy
properties:
labels:
foo: bar
description: my description
clientCertificate:
certificateProviderInstance:
pluginInstance: google_cloud_private_spiffe
serverValidationCas:
- grpcEndpoint:
targetUri: unix:mypath
- grpcEndpoint:
targetUri: unix:mypath1
options:
provider: ${["google-beta"]}
Create ClientTlsPolicy Resource
new ClientTlsPolicy(name: string, args?: ClientTlsPolicyArgs, opts?: CustomResourceOptions);
@overload
def ClientTlsPolicy(resource_name: str,
opts: Optional[ResourceOptions] = None,
client_certificate: Optional[ClientTlsPolicyClientCertificateArgs] = None,
description: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
location: Optional[str] = None,
name: Optional[str] = None,
project: Optional[str] = None,
server_validation_cas: Optional[Sequence[ClientTlsPolicyServerValidationCaArgs]] = None,
sni: Optional[str] = None)
@overload
def ClientTlsPolicy(resource_name: str,
args: Optional[ClientTlsPolicyArgs] = None,
opts: Optional[ResourceOptions] = None)
func NewClientTlsPolicy(ctx *Context, name string, args *ClientTlsPolicyArgs, opts ...ResourceOption) (*ClientTlsPolicy, error)
public ClientTlsPolicy(string name, ClientTlsPolicyArgs? args = null, CustomResourceOptions? opts = null)
public ClientTlsPolicy(String name, ClientTlsPolicyArgs args)
public ClientTlsPolicy(String name, ClientTlsPolicyArgs args, CustomResourceOptions options)
type: gcp:networksecurity:ClientTlsPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ClientTlsPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ClientTlsPolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ClientTlsPolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ClientTlsPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ClientTlsPolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
ClientTlsPolicy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The ClientTlsPolicy resource accepts the following input properties:
- Client
Certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- Description string
A free-text description of the resource. Max length 1024 characters.
- Labels Dictionary<string, string>
Set of label tags associated with the ClientTlsPolicy resource.
- Location string
The location of the client tls policy. The default value is
global
.- Name string
Name of the ClientTlsPolicy resource.
- Project string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Server
Validation List<ClientCas Tls Policy Server Validation Ca Args> Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- Sni string
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- Client
Certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- Description string
A free-text description of the resource. Max length 1024 characters.
- Labels map[string]string
Set of label tags associated with the ClientTlsPolicy resource.
- Location string
The location of the client tls policy. The default value is
global
.- Name string
Name of the ClientTlsPolicy resource.
- Project string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Server
Validation []ClientCas Tls Policy Server Validation Ca Args Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- Sni string
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- client
Certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- description String
A free-text description of the resource. Max length 1024 characters.
- labels Map<String,String>
Set of label tags associated with the ClientTlsPolicy resource.
- location String
The location of the client tls policy. The default value is
global
.- name String
Name of the ClientTlsPolicy resource.
- project String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- server
Validation List<ClientCas Tls Policy Server Validation Ca Args> Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- sni String
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- client
Certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- description string
A free-text description of the resource. Max length 1024 characters.
- labels {[key: string]: string}
Set of label tags associated with the ClientTlsPolicy resource.
- location string
The location of the client tls policy. The default value is
global
.- name string
Name of the ClientTlsPolicy resource.
- project string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- server
Validation ClientCas Tls Policy Server Validation Ca Args[] Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- sni string
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- client_
certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- description str
A free-text description of the resource. Max length 1024 characters.
- labels Mapping[str, str]
Set of label tags associated with the ClientTlsPolicy resource.
- location str
The location of the client tls policy. The default value is
global
.- name str
Name of the ClientTlsPolicy resource.
- project str
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- server_
validation_ Sequence[Clientcas Tls Policy Server Validation Ca Args] Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- sni str
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- client
Certificate Property Map Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- description String
A free-text description of the resource. Max length 1024 characters.
- labels Map<String>
Set of label tags associated with the ClientTlsPolicy resource.
- location String
The location of the client tls policy. The default value is
global
.- name String
Name of the ClientTlsPolicy resource.
- project String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- server
Validation List<Property Map>Cas Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- sni String
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
Outputs
All input properties are implicitly available as output properties. Additionally, the ClientTlsPolicy resource produces the following output properties:
- Create
Time string Time the ClientTlsPolicy was created in UTC.
- Id string
The provider-assigned unique ID for this managed resource.
- Update
Time string Time the ClientTlsPolicy was updated in UTC.
- Create
Time string Time the ClientTlsPolicy was created in UTC.
- Id string
The provider-assigned unique ID for this managed resource.
- Update
Time string Time the ClientTlsPolicy was updated in UTC.
- create
Time String Time the ClientTlsPolicy was created in UTC.
- id String
The provider-assigned unique ID for this managed resource.
- update
Time String Time the ClientTlsPolicy was updated in UTC.
- create
Time string Time the ClientTlsPolicy was created in UTC.
- id string
The provider-assigned unique ID for this managed resource.
- update
Time string Time the ClientTlsPolicy was updated in UTC.
- create_
time str Time the ClientTlsPolicy was created in UTC.
- id str
The provider-assigned unique ID for this managed resource.
- update_
time str Time the ClientTlsPolicy was updated in UTC.
- create
Time String Time the ClientTlsPolicy was created in UTC.
- id String
The provider-assigned unique ID for this managed resource.
- update
Time String Time the ClientTlsPolicy was updated in UTC.
Look up Existing ClientTlsPolicy Resource
Get an existing ClientTlsPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ClientTlsPolicyState, opts?: CustomResourceOptions): ClientTlsPolicy
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
client_certificate: Optional[ClientTlsPolicyClientCertificateArgs] = None,
create_time: Optional[str] = None,
description: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
location: Optional[str] = None,
name: Optional[str] = None,
project: Optional[str] = None,
server_validation_cas: Optional[Sequence[ClientTlsPolicyServerValidationCaArgs]] = None,
sni: Optional[str] = None,
update_time: Optional[str] = None) -> ClientTlsPolicy
func GetClientTlsPolicy(ctx *Context, name string, id IDInput, state *ClientTlsPolicyState, opts ...ResourceOption) (*ClientTlsPolicy, error)
public static ClientTlsPolicy Get(string name, Input<string> id, ClientTlsPolicyState? state, CustomResourceOptions? opts = null)
public static ClientTlsPolicy get(String name, Output<String> id, ClientTlsPolicyState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Client
Certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- Create
Time string Time the ClientTlsPolicy was created in UTC.
- Description string
A free-text description of the resource. Max length 1024 characters.
- Labels Dictionary<string, string>
Set of label tags associated with the ClientTlsPolicy resource.
- Location string
The location of the client tls policy. The default value is
global
.- Name string
Name of the ClientTlsPolicy resource.
- Project string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Server
Validation List<ClientCas Tls Policy Server Validation Ca Args> Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- Sni string
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- Update
Time string Time the ClientTlsPolicy was updated in UTC.
- Client
Certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- Create
Time string Time the ClientTlsPolicy was created in UTC.
- Description string
A free-text description of the resource. Max length 1024 characters.
- Labels map[string]string
Set of label tags associated with the ClientTlsPolicy resource.
- Location string
The location of the client tls policy. The default value is
global
.- Name string
Name of the ClientTlsPolicy resource.
- Project string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Server
Validation []ClientCas Tls Policy Server Validation Ca Args Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- Sni string
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- Update
Time string Time the ClientTlsPolicy was updated in UTC.
- client
Certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- create
Time String Time the ClientTlsPolicy was created in UTC.
- description String
A free-text description of the resource. Max length 1024 characters.
- labels Map<String,String>
Set of label tags associated with the ClientTlsPolicy resource.
- location String
The location of the client tls policy. The default value is
global
.- name String
Name of the ClientTlsPolicy resource.
- project String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- server
Validation List<ClientCas Tls Policy Server Validation Ca Args> Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- sni String
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- update
Time String Time the ClientTlsPolicy was updated in UTC.
- client
Certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- create
Time string Time the ClientTlsPolicy was created in UTC.
- description string
A free-text description of the resource. Max length 1024 characters.
- labels {[key: string]: string}
Set of label tags associated with the ClientTlsPolicy resource.
- location string
The location of the client tls policy. The default value is
global
.- name string
Name of the ClientTlsPolicy resource.
- project string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- server
Validation ClientCas Tls Policy Server Validation Ca Args[] Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- sni string
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- update
Time string Time the ClientTlsPolicy was updated in UTC.
- client_
certificate ClientTls Policy Client Certificate Args Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- create_
time str Time the ClientTlsPolicy was created in UTC.
- description str
A free-text description of the resource. Max length 1024 characters.
- labels Mapping[str, str]
Set of label tags associated with the ClientTlsPolicy resource.
- location str
The location of the client tls policy. The default value is
global
.- name str
Name of the ClientTlsPolicy resource.
- project str
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- server_
validation_ Sequence[Clientcas Tls Policy Server Validation Ca Args] Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- sni str
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- update_
time str Time the ClientTlsPolicy was updated in UTC.
- client
Certificate Property Map Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.
- create
Time String Time the ClientTlsPolicy was created in UTC.
- description String
A free-text description of the resource. Max length 1024 characters.
- labels Map<String>
Set of label tags associated with the ClientTlsPolicy resource.
- location String
The location of the client tls policy. The default value is
global
.- name String
Name of the ClientTlsPolicy resource.
- project String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- server
Validation List<Property Map>Cas Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.
- sni String
Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- update
Time String Time the ClientTlsPolicy was updated in UTC.
Supporting Types
ClientTlsPolicyClientCertificate
- Certificate
Provider ClientInstance Tls Policy Client Certificate Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- Grpc
Endpoint ClientTls Policy Client Certificate Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- Certificate
Provider ClientInstance Tls Policy Client Certificate Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- Grpc
Endpoint ClientTls Policy Client Certificate Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- certificate
Provider ClientInstance Tls Policy Client Certificate Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- grpc
Endpoint ClientTls Policy Client Certificate Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- certificate
Provider ClientInstance Tls Policy Client Certificate Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- grpc
Endpoint ClientTls Policy Client Certificate Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- certificate_
provider_ Clientinstance Tls Policy Client Certificate Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- grpc_
endpoint ClientTls Policy Client Certificate Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- certificate
Provider Property MapInstance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- grpc
Endpoint Property Map gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
ClientTlsPolicyClientCertificateCertificateProviderInstance
- Plugin
Instance string Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- Plugin
Instance string Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- plugin
Instance String Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- plugin
Instance string Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- plugin_
instance str Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- plugin
Instance String Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
ClientTlsPolicyClientCertificateGrpcEndpoint
- Target
Uri string The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- Target
Uri string The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- target
Uri String The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- target
Uri string The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- target_
uri str The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- target
Uri String The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
ClientTlsPolicyServerValidationCa
- Certificate
Provider ClientInstance Tls Policy Server Validation Ca Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- Grpc
Endpoint ClientTls Policy Server Validation Ca Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- Certificate
Provider ClientInstance Tls Policy Server Validation Ca Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- Grpc
Endpoint ClientTls Policy Server Validation Ca Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- certificate
Provider ClientInstance Tls Policy Server Validation Ca Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- grpc
Endpoint ClientTls Policy Server Validation Ca Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- certificate
Provider ClientInstance Tls Policy Server Validation Ca Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- grpc
Endpoint ClientTls Policy Server Validation Ca Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- certificate_
provider_ Clientinstance Tls Policy Server Validation Ca Certificate Provider Instance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- grpc_
endpoint ClientTls Policy Server Validation Ca Grpc Endpoint gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
- certificate
Provider Property MapInstance The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. Structure is documented below.
- grpc
Endpoint Property Map gRPC specific configuration to access the gRPC server to obtain the cert and private key. Structure is documented below.
ClientTlsPolicyServerValidationCaCertificateProviderInstance
- Plugin
Instance string Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- Plugin
Instance string Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- plugin
Instance String Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- plugin
Instance string Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- plugin_
instance str Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- plugin
Instance String Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
ClientTlsPolicyServerValidationCaGrpcEndpoint
- Target
Uri string The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- Target
Uri string The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- target
Uri String The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- target
Uri string The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- target_
uri str The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- target
Uri String The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
google-beta
Terraform Provider.