Google Cloud Native v0.31.1, Jul 20 23

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.31.1 published on Thursday, Jul 20, 2023 by Pulumi

pulumi/pulumi-google-native

google-native.networksecurity/v1.getClientTlsPolicy

Explore with Pulumi AI

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.31.1 published on Thursday, Jul 20, 2023 by Pulumi

pulumi/pulumi-google-native

Using getClientTlsPolicy

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getClientTlsPolicy(args: GetClientTlsPolicyArgs, opts?: InvokeOptions): Promise<GetClientTlsPolicyResult>
function getClientTlsPolicyOutput(args: GetClientTlsPolicyOutputArgs, opts?: InvokeOptions): Output<GetClientTlsPolicyResult>

def get_client_tls_policy(client_tls_policy_id: Optional[str] = None,
                          location: Optional[str] = None,
                          project: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetClientTlsPolicyResult
def get_client_tls_policy_output(client_tls_policy_id: Optional[pulumi.Input[str]] = None,
                          location: Optional[pulumi.Input[str]] = None,
                          project: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetClientTlsPolicyResult]

func LookupClientTlsPolicy(ctx *Context, args *LookupClientTlsPolicyArgs, opts ...InvokeOption) (*LookupClientTlsPolicyResult, error)
func LookupClientTlsPolicyOutput(ctx *Context, args *LookupClientTlsPolicyOutputArgs, opts ...InvokeOption) LookupClientTlsPolicyResultOutput

> Note: This function is named LookupClientTlsPolicy in the Go SDK.

public static class GetClientTlsPolicy 
{
    public static Task<GetClientTlsPolicyResult> InvokeAsync(GetClientTlsPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetClientTlsPolicyResult> Invoke(GetClientTlsPolicyInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetClientTlsPolicyResult> getClientTlsPolicy(GetClientTlsPolicyArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet

fn::invoke:
  function: google-native:networksecurity/v1:getClientTlsPolicy
  arguments:
    # arguments dictionary

The following arguments are supported:

ClientTlsPolicyId string
Location string
Project string

ClientTlsPolicyId string
Location string
Project string

clientTlsPolicyId String
location String
project String

clientTlsPolicyId string
location string
project string

client_tls_policy_id str
location str
project str

clientTlsPolicyId String
location String
project String

getClientTlsPolicy Result

The following output properties are available:

ClientCertificate Pulumi.GoogleNative.NetworkSecurity.V1.Outputs.GoogleCloudNetworksecurityV1CertificateProviderResponse: Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
CreateTime string: The timestamp when the resource was created.
Description string: Optional. Free-text description of the resource.
Labels Dictionary<string, string>: Optional. Set of label tags associated with the resource.
Name string: Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
ServerValidationCa List<Pulumi.GoogleNative.NetworkSecurity.V1.Outputs.ValidationCAResponse>: Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
Sni string: Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
UpdateTime string: The timestamp when the resource was updated.

ClientCertificate GoogleCloudNetworksecurityV1CertificateProviderResponse: Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
CreateTime string: The timestamp when the resource was created.
Description string: Optional. Free-text description of the resource.
Labels map[string]string: Optional. Set of label tags associated with the resource.
Name string: Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
ServerValidationCa []ValidationCAResponse: Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
Sni string: Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
UpdateTime string: The timestamp when the resource was updated.

clientCertificate GoogleCloudNetworksecurityV1CertificateProviderResponse: Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
createTime String: The timestamp when the resource was created.
description String: Optional. Free-text description of the resource.
labels Map<String,String>: Optional. Set of label tags associated with the resource.
name String: Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
serverValidationCa List<ValidationCAResponse>: Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
sni String: Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
updateTime String: The timestamp when the resource was updated.

clientCertificate GoogleCloudNetworksecurityV1CertificateProviderResponse: Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
createTime string: The timestamp when the resource was created.
description string: Optional. Free-text description of the resource.
labels {[key: string]: string}: Optional. Set of label tags associated with the resource.
name string: Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
serverValidationCa ValidationCAResponse[]: Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
sni string: Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
updateTime string: The timestamp when the resource was updated.

client_certificate GoogleCloudNetworksecurityV1CertificateProviderResponse: Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
create_time str: The timestamp when the resource was created.
description str: Optional. Free-text description of the resource.
labels Mapping[str, str]: Optional. Set of label tags associated with the resource.
name str: Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
server_validation_ca Sequence[ValidationCAResponse]: Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
sni str: Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
update_time str: The timestamp when the resource was updated.

clientCertificate Property Map: Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
createTime String: The timestamp when the resource was created.
description String: Optional. Free-text description of the resource.
labels Map<String>: Optional. Set of label tags associated with the resource.
name String: Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
serverValidationCa List<Property Map>: Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
sni String: Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
updateTime String: The timestamp when the resource was updated.

Supporting Types

CertificateProviderInstanceResponse

PluginInstance string: Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.

PluginInstance string: Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.

pluginInstance String: Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.

pluginInstance string: Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.

plugin_instance str: Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.

pluginInstance String: Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.

GoogleCloudNetworksecurityV1CertificateProviderResponse

CertificateProviderInstance Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
GrpcEndpoint Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the cert and private key.

CertificateProviderInstance CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
GrpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the cert and private key.

certificateProviderInstance CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the cert and private key.

certificateProviderInstance CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the cert and private key.

certificate_provider_instance CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpc_endpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the cert and private key.

certificateProviderInstance Property Map: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint Property Map: gRPC specific configuration to access the gRPC server to obtain the cert and private key.

GoogleCloudNetworksecurityV1GrpcEndpointResponse

TargetUri string: The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".

TargetUri string: The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".

targetUri String: The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".

targetUri string: The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".

target_uri str: The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".

targetUri String: The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".

ValidationCAResponse

CertificateProviderInstance Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
GrpcEndpoint Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the CA certificate.

CertificateProviderInstance CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
GrpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the CA certificate.

certificateProviderInstance CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the CA certificate.

certificateProviderInstance CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the CA certificate.

certificate_provider_instance CertificateProviderInstanceResponse: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpc_endpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse: gRPC specific configuration to access the gRPC server to obtain the CA certificate.

certificateProviderInstance Property Map: The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint Property Map: gRPC specific configuration to access the gRPC server to obtain the CA certificate.

Package Details

Repository: Google Cloud Native pulumi/pulumi-google-native
License: Apache-2.0

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.31.1 published on Thursday, Jul 20, 2023 by Pulumi

pulumi/pulumi-google-native

google-native.networksecurity/v1.getClientTlsPolicy

On this page

On this page

Using getClientTlsPolicy

getClientTlsPolicy Result

Supporting Types

CertificateProviderInstanceResponse

GoogleCloudNetworksecurityV1CertificateProviderResponse

GoogleCloudNetworksecurityV1GrpcEndpointResponse

ValidationCAResponse

Package Details

On this page

On this page