Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Hsdp Provider
  3. API Docs
  4. PkiCert
hsdp 0.65.3 published on Tuesday, Apr 15, 2025 by philips-software
philips-software/terraform-provider-hsdp

hsdp.PkiCert

Explore with Pulumi AI

hsdp logo
hsdp 0.65.3 published on Tuesday, Apr 15, 2025 by philips-software
philips-software/terraform-provider-hsdp

    Create and manage HSDP PKI leaf certificates

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as hsdp from "@pulumi/hsdp";

const cert = new hsdp.PkiCert("cert", {
    tenantId: hsdp_pki_tenant.tenant.id,
    role: "ec384",
    commonName: "myapp.com",
    altNames: "myapp.io,www.myapp.io",
    ipSans: [],
    uriSans: [],
    otherSans: [],
    ttl: "720h",
    excludeCnFromSans: false,
});

    import pulumi
import pulumi_hsdp as hsdp

cert = hsdp.PkiCert("cert",
    tenant_id=hsdp_pki_tenant["tenant"]["id"],
    role="ec384",
    common_name="myapp.com",
    alt_names="myapp.io,www.myapp.io",
    ip_sans=[],
    uri_sans=[],
    other_sans=[],
    ttl="720h",
    exclude_cn_from_sans=False)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/hsdp/hsdp"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := hsdp.NewPkiCert(ctx, "cert", &hsdp.PkiCertArgs{
			TenantId:          pulumi.Any(hsdp_pki_tenant.Tenant.Id),
			Role:              pulumi.String("ec384"),
			CommonName:        pulumi.String("myapp.com"),
			AltNames:          pulumi.String("myapp.io,www.myapp.io"),
			IpSans:            pulumi.StringArray{},
			UriSans:           pulumi.StringArray{},
			OtherSans:         pulumi.StringArray{},
			Ttl:               pulumi.String("720h"),
			ExcludeCnFromSans: pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Hsdp = Pulumi.Hsdp;

return await Deployment.RunAsync(() => 
{
    var cert = new Hsdp.PkiCert("cert", new()
    {
        TenantId = hsdp_pki_tenant.Tenant.Id,
        Role = "ec384",
        CommonName = "myapp.com",
        AltNames = "myapp.io,www.myapp.io",
        IpSans = new[] {},
        UriSans = new[] {},
        OtherSans = new[] {},
        Ttl = "720h",
        ExcludeCnFromSans = false,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.hsdp.PkiCert;
import com.pulumi.hsdp.PkiCertArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var cert = new PkiCert("cert", PkiCertArgs.builder()
            .tenantId(hsdp_pki_tenant.tenant().id())
            .role("ec384")
            .commonName("myapp.com")
            .altNames("myapp.io,www.myapp.io")
            .ipSans()
            .uriSans()
            .otherSans()
            .ttl("720h")
            .excludeCnFromSans(false)
            .build());

    }
}

    resources:
  cert:
    type: hsdp:PkiCert
    properties:
      tenantId: ${hsdp_pki_tenant.tenant.id}
      role: ec384
      commonName: myapp.com
      altNames: myapp.io,www.myapp.io
      ipSans: []
      uriSans: []
      otherSans: []
      ttl: 720h
      excludeCnFromSans: false

    The next example will refresh the certificate every quarter. You’ll need to run the apply step occasionally

    import * as pulumi from "@pulumi/pulumi";
import * as hsdp from "@pulumi/hsdp";

const pki = hsdp.getConfig({
    service: "pki",
});
const autoRefreshCert = new hsdp.PkiCert("autoRefreshCert", {
    triggers: {
        refresh: pki.then(pki => pki.slidingExpiresOn),
    },
    tenantId: hsdp_pki_tenant.tenant.id,
    role: "ec384",
    commonName: "myapp.com",
    altNames: "myapp.io,www.myapp.io",
    ipSans: [],
    uriSans: [],
    otherSans: [],
    ttl: "720h",
    excludeCnFromSans: false,
});

    import pulumi
import pulumi_hsdp as hsdp

pki = hsdp.get_config(service="pki")
auto_refresh_cert = hsdp.PkiCert("autoRefreshCert",
    triggers={
        "refresh": pki.sliding_expires_on,
    },
    tenant_id=hsdp_pki_tenant["tenant"]["id"],
    role="ec384",
    common_name="myapp.com",
    alt_names="myapp.io,www.myapp.io",
    ip_sans=[],
    uri_sans=[],
    other_sans=[],
    ttl="720h",
    exclude_cn_from_sans=False)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/hsdp/hsdp"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		pki, err := hsdp.GetConfig(ctx, &hsdp.GetConfigArgs{
			Service: "pki",
		}, nil)
		if err != nil {
			return err
		}
		_, err = hsdp.NewPkiCert(ctx, "autoRefreshCert", &hsdp.PkiCertArgs{
			Triggers: pulumi.StringMap{
				"refresh": pulumi.String(pki.SlidingExpiresOn),
			},
			TenantId:          pulumi.Any(hsdp_pki_tenant.Tenant.Id),
			Role:              pulumi.String("ec384"),
			CommonName:        pulumi.String("myapp.com"),
			AltNames:          pulumi.String("myapp.io,www.myapp.io"),
			IpSans:            pulumi.StringArray{},
			UriSans:           pulumi.StringArray{},
			OtherSans:         pulumi.StringArray{},
			Ttl:               pulumi.String("720h"),
			ExcludeCnFromSans: pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Hsdp = Pulumi.Hsdp;

return await Deployment.RunAsync(() => 
{
    var pki = Hsdp.GetConfig.Invoke(new()
    {
        Service = "pki",
    });

    var autoRefreshCert = new Hsdp.PkiCert("autoRefreshCert", new()
    {
        Triggers = 
        {
            { "refresh", pki.Apply(getConfigResult => getConfigResult.SlidingExpiresOn) },
        },
        TenantId = hsdp_pki_tenant.Tenant.Id,
        Role = "ec384",
        CommonName = "myapp.com",
        AltNames = "myapp.io,www.myapp.io",
        IpSans = new[] {},
        UriSans = new[] {},
        OtherSans = new[] {},
        Ttl = "720h",
        ExcludeCnFromSans = false,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.hsdp.HsdpFunctions;
import com.pulumi.hsdp.inputs.GetConfigArgs;
import com.pulumi.hsdp.PkiCert;
import com.pulumi.hsdp.PkiCertArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var pki = HsdpFunctions.getConfig(GetConfigArgs.builder()
            .service("pki")
            .build());

        var autoRefreshCert = new PkiCert("autoRefreshCert", PkiCertArgs.builder()
            .triggers(Map.of("refresh", pki.applyValue(getConfigResult -> getConfigResult.slidingExpiresOn())))
            .tenantId(hsdp_pki_tenant.tenant().id())
            .role("ec384")
            .commonName("myapp.com")
            .altNames("myapp.io,www.myapp.io")
            .ipSans()
            .uriSans()
            .otherSans()
            .ttl("720h")
            .excludeCnFromSans(false)
            .build());

    }
}

    resources:
  autoRefreshCert:
    type: hsdp:PkiCert
    properties:
      triggers:
        refresh: ${pki.slidingExpiresOn}
      tenantId: ${hsdp_pki_tenant.tenant.id}
      role: ec384
      commonName: myapp.com
      altNames: myapp.io,www.myapp.io
      ipSans: []
      uriSans: []
      otherSans: []
      ttl: 720h
      excludeCnFromSans: false
variables:
  pki:
    fn::invoke:
      function: hsdp:getConfig
      arguments:
        service: pki

    Create PkiCert Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new PkiCert(name: string, args: PkiCertArgs, opts?: CustomResourceOptions);
    @overload
def PkiCert(resource_name: str,
            args: PkiCertArgs,
            opts: Optional[ResourceOptions] = None)

@overload
def PkiCert(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            common_name: Optional[str] = None,
            role: Optional[str] = None,
            tenant_id: Optional[str] = None,
            alt_name: Optional[str] = None,
            alt_names: Optional[str] = None,
            exclude_cn_from_sans: Optional[bool] = None,
            ip_sans: Optional[Sequence[str]] = None,
            other_sans: Optional[Sequence[str]] = None,
            pki_cert_id: Optional[str] = None,
            triggers: Optional[Mapping[str, str]] = None,
            ttl: Optional[str] = None,
            uri_sans: Optional[Sequence[str]] = None)
    func NewPkiCert(ctx *Context, name string, args PkiCertArgs, opts ...ResourceOption) (*PkiCert, error)
    public PkiCert(string name, PkiCertArgs args, CustomResourceOptions? opts = null)
    public PkiCert(String name, PkiCertArgs args)
public PkiCert(String name, PkiCertArgs args, CustomResourceOptions options)

    type: hsdp:PkiCert
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args PkiCertArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PkiCertArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PkiCertArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PkiCertArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PkiCertArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var pkiCertResource = new Hsdp.PkiCert("pkiCertResource", new()
{
    CommonName = "string",
    Role = "string",
    TenantId = "string",
    AltNames = "string",
    ExcludeCnFromSans = false,
    IpSans = new[]
    {
        "string",
    },
    OtherSans = new[]
    {
        "string",
    },
    PkiCertId = "string",
    Triggers = 
    {
        { "string", "string" },
    },
    Ttl = "string",
    UriSans = new[]
    {
        "string",
    },
});

    example, err := hsdp.NewPkiCert(ctx, "pkiCertResource", &hsdp.PkiCertArgs{
	CommonName:        pulumi.String("string"),
	Role:              pulumi.String("string"),
	TenantId:          pulumi.String("string"),
	AltNames:          pulumi.String("string"),
	ExcludeCnFromSans: pulumi.Bool(false),
	IpSans: pulumi.StringArray{
		pulumi.String("string"),
	},
	OtherSans: pulumi.StringArray{
		pulumi.String("string"),
	},
	PkiCertId: pulumi.String("string"),
	Triggers: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Ttl: pulumi.String("string"),
	UriSans: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var pkiCertResource = new PkiCert("pkiCertResource", PkiCertArgs.builder()
    .commonName("string")
    .role("string")
    .tenantId("string")
    .altNames("string")
    .excludeCnFromSans(false)
    .ipSans("string")
    .otherSans("string")
    .pkiCertId("string")
    .triggers(Map.of("string", "string"))
    .ttl("string")
    .uriSans("string")
    .build());

    pki_cert_resource = hsdp.PkiCert("pkiCertResource",
    common_name="string",
    role="string",
    tenant_id="string",
    alt_names="string",
    exclude_cn_from_sans=False,
    ip_sans=["string"],
    other_sans=["string"],
    pki_cert_id="string",
    triggers={
        "string": "string",
    },
    ttl="string",
    uri_sans=["string"])

    const pkiCertResource = new hsdp.PkiCert("pkiCertResource", {
    commonName: "string",
    role: "string",
    tenantId: "string",
    altNames: "string",
    excludeCnFromSans: false,
    ipSans: ["string"],
    otherSans: ["string"],
    pkiCertId: "string",
    triggers: {
        string: "string",
    },
    ttl: "string",
    uriSans: ["string"],
});

    type: hsdp:PkiCert
properties:
    altNames: string
    commonName: string
    excludeCnFromSans: false
    ipSans:
        - string
    otherSans:
        - string
    pkiCertId: string
    role: string
    tenantId: string
    triggers:
        string: string
    ttl: string
    uriSans:
        - string

    PkiCert Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The PkiCert resource accepts the following input properties:

    CommonName string
    The common name to use
    Role string
    the Role to use as defined under a PKI Tenant resource
    TenantId string
    The tenant ID to create this certificate under
    AltName string

    Deprecated: Deprecated

    AltNames string
    Alternative names to use, comma separated list.
    ExcludeCnFromSans bool
    Exclude common name from SAN
    IpSans List<string>
    ) A list of IP SANS to include
    OtherSans List<string>
    ) A list of other SANS to include
    PkiCertId string
    Triggers Dictionary<string, string>
    ) An list of strings which when changes will trigger recreation of the resource
    Ttl string
    The TTL, example 720h for 1 month
    UriSans List<string>
    ) A list of URI SANS to include
    CommonName string
    The common name to use
    Role string
    the Role to use as defined under a PKI Tenant resource
    TenantId string
    The tenant ID to create this certificate under
    AltName string

    Deprecated: Deprecated

    AltNames string
    Alternative names to use, comma separated list.
    ExcludeCnFromSans bool
    Exclude common name from SAN
    IpSans []string
    ) A list of IP SANS to include
    OtherSans []string
    ) A list of other SANS to include
    PkiCertId string
    Triggers map[string]string
    ) An list of strings which when changes will trigger recreation of the resource
    Ttl string
    The TTL, example 720h for 1 month
    UriSans []string
    ) A list of URI SANS to include
    commonName String
    The common name to use
    role String
    the Role to use as defined under a PKI Tenant resource
    tenantId String
    The tenant ID to create this certificate under
    altName String

    Deprecated: Deprecated

    altNames String
    Alternative names to use, comma separated list.
    excludeCnFromSans Boolean
    Exclude common name from SAN
    ipSans List<String>
    ) A list of IP SANS to include
    otherSans List<String>
    ) A list of other SANS to include
    pkiCertId String
    triggers Map<String,String>
    ) An list of strings which when changes will trigger recreation of the resource
    ttl String
    The TTL, example 720h for 1 month
    uriSans List<String>
    ) A list of URI SANS to include
    commonName string
    The common name to use
    role string
    the Role to use as defined under a PKI Tenant resource
    tenantId string
    The tenant ID to create this certificate under
    altName string

    Deprecated: Deprecated

    altNames string
    Alternative names to use, comma separated list.
    excludeCnFromSans boolean
    Exclude common name from SAN
    ipSans string[]
    ) A list of IP SANS to include
    otherSans string[]
    ) A list of other SANS to include
    pkiCertId string
    triggers {[key: string]: string}
    ) An list of strings which when changes will trigger recreation of the resource
    ttl string
    The TTL, example 720h for 1 month
    uriSans string[]
    ) A list of URI SANS to include
    common_name str
    The common name to use
    role str
    the Role to use as defined under a PKI Tenant resource
    tenant_id str
    The tenant ID to create this certificate under
    alt_name str

    Deprecated: Deprecated

    alt_names str
    Alternative names to use, comma separated list.
    exclude_cn_from_sans bool
    Exclude common name from SAN
    ip_sans Sequence[str]
    ) A list of IP SANS to include
    other_sans Sequence[str]
    ) A list of other SANS to include
    pki_cert_id str
    triggers Mapping[str, str]
    ) An list of strings which when changes will trigger recreation of the resource
    ttl str
    The TTL, example 720h for 1 month
    uri_sans Sequence[str]
    ) A list of URI SANS to include
    commonName String
    The common name to use
    role String
    the Role to use as defined under a PKI Tenant resource
    tenantId String
    The tenant ID to create this certificate under
    altName String

    Deprecated: Deprecated

    altNames String
    Alternative names to use, comma separated list.
    excludeCnFromSans Boolean
    Exclude common name from SAN
    ipSans List<String>
    ) A list of IP SANS to include
    otherSans List<String>
    ) A list of other SANS to include
    pkiCertId String
    triggers Map<String>
    ) An list of strings which when changes will trigger recreation of the resource
    ttl String
    The TTL, example 720h for 1 month
    uriSans List<String>
    ) A list of URI SANS to include

    Outputs

    All input properties are implicitly available as output properties. Additionally, the PkiCert resource produces the following output properties:

    CaChainPem string
    The full CA chain in PEM format
    CertPem string
    The certificate in PEM format
    Expiration double
    (int) The Unix timestamp when the certificate will expire
    Id string
    The provider-assigned unique ID for this managed resource.
    IssuingCaPem string
    The issuing CA certicate in PEM format
    PrivateKeyPem string
    The private key in PEM format
    SerialNumber string
    The certificate serial number (equal to resource ID)
    CaChainPem string
    The full CA chain in PEM format
    CertPem string
    The certificate in PEM format
    Expiration float64
    (int) The Unix timestamp when the certificate will expire
    Id string
    The provider-assigned unique ID for this managed resource.
    IssuingCaPem string
    The issuing CA certicate in PEM format
    PrivateKeyPem string
    The private key in PEM format
    SerialNumber string
    The certificate serial number (equal to resource ID)
    caChainPem String
    The full CA chain in PEM format
    certPem String
    The certificate in PEM format
    expiration Double
    (int) The Unix timestamp when the certificate will expire
    id String
    The provider-assigned unique ID for this managed resource.
    issuingCaPem String
    The issuing CA certicate in PEM format
    privateKeyPem String
    The private key in PEM format
    serialNumber String
    The certificate serial number (equal to resource ID)
    caChainPem string
    The full CA chain in PEM format
    certPem string
    The certificate in PEM format
    expiration number
    (int) The Unix timestamp when the certificate will expire
    id string
    The provider-assigned unique ID for this managed resource.
    issuingCaPem string
    The issuing CA certicate in PEM format
    privateKeyPem string
    The private key in PEM format
    serialNumber string
    The certificate serial number (equal to resource ID)
    ca_chain_pem str
    The full CA chain in PEM format
    cert_pem str
    The certificate in PEM format
    expiration float
    (int) The Unix timestamp when the certificate will expire
    id str
    The provider-assigned unique ID for this managed resource.
    issuing_ca_pem str
    The issuing CA certicate in PEM format
    private_key_pem str
    The private key in PEM format
    serial_number str
    The certificate serial number (equal to resource ID)
    caChainPem String
    The full CA chain in PEM format
    certPem String
    The certificate in PEM format
    expiration Number
    (int) The Unix timestamp when the certificate will expire
    id String
    The provider-assigned unique ID for this managed resource.
    issuingCaPem String
    The issuing CA certicate in PEM format
    privateKeyPem String
    The private key in PEM format
    serialNumber String
    The certificate serial number (equal to resource ID)

    Look up Existing PkiCert Resource

    Get an existing PkiCert resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: PkiCertState, opts?: CustomResourceOptions): PkiCert
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        alt_name: Optional[str] = None,
        alt_names: Optional[str] = None,
        ca_chain_pem: Optional[str] = None,
        cert_pem: Optional[str] = None,
        common_name: Optional[str] = None,
        exclude_cn_from_sans: Optional[bool] = None,
        expiration: Optional[float] = None,
        ip_sans: Optional[Sequence[str]] = None,
        issuing_ca_pem: Optional[str] = None,
        other_sans: Optional[Sequence[str]] = None,
        pki_cert_id: Optional[str] = None,
        private_key_pem: Optional[str] = None,
        role: Optional[str] = None,
        serial_number: Optional[str] = None,
        tenant_id: Optional[str] = None,
        triggers: Optional[Mapping[str, str]] = None,
        ttl: Optional[str] = None,
        uri_sans: Optional[Sequence[str]] = None) -> PkiCert
    func GetPkiCert(ctx *Context, name string, id IDInput, state *PkiCertState, opts ...ResourceOption) (*PkiCert, error)
    public static PkiCert Get(string name, Input<string> id, PkiCertState? state, CustomResourceOptions? opts = null)
    public static PkiCert get(String name, Output<String> id, PkiCertState state, CustomResourceOptions options)
    resources:  _:    type: hsdp:PkiCert    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AltName string

    Deprecated: Deprecated

    AltNames string
    Alternative names to use, comma separated list.
    CaChainPem string
    The full CA chain in PEM format
    CertPem string
    The certificate in PEM format
    CommonName string
    The common name to use
    ExcludeCnFromSans bool
    Exclude common name from SAN
    Expiration double
    (int) The Unix timestamp when the certificate will expire
    IpSans List<string>
    ) A list of IP SANS to include
    IssuingCaPem string
    The issuing CA certicate in PEM format
    OtherSans List<string>
    ) A list of other SANS to include
    PkiCertId string
    PrivateKeyPem string
    The private key in PEM format
    Role string
    the Role to use as defined under a PKI Tenant resource
    SerialNumber string
    The certificate serial number (equal to resource ID)
    TenantId string
    The tenant ID to create this certificate under
    Triggers Dictionary<string, string>
    ) An list of strings which when changes will trigger recreation of the resource
    Ttl string
    The TTL, example 720h for 1 month
    UriSans List<string>
    ) A list of URI SANS to include
    AltName string

    Deprecated: Deprecated

    AltNames string
    Alternative names to use, comma separated list.
    CaChainPem string
    The full CA chain in PEM format
    CertPem string
    The certificate in PEM format
    CommonName string
    The common name to use
    ExcludeCnFromSans bool
    Exclude common name from SAN
    Expiration float64
    (int) The Unix timestamp when the certificate will expire
    IpSans []string
    ) A list of IP SANS to include
    IssuingCaPem string
    The issuing CA certicate in PEM format
    OtherSans []string
    ) A list of other SANS to include
    PkiCertId string
    PrivateKeyPem string
    The private key in PEM format
    Role string
    the Role to use as defined under a PKI Tenant resource
    SerialNumber string
    The certificate serial number (equal to resource ID)
    TenantId string
    The tenant ID to create this certificate under
    Triggers map[string]string
    ) An list of strings which when changes will trigger recreation of the resource
    Ttl string
    The TTL, example 720h for 1 month
    UriSans []string
    ) A list of URI SANS to include
    altName String

    Deprecated: Deprecated

    altNames String
    Alternative names to use, comma separated list.
    caChainPem String
    The full CA chain in PEM format
    certPem String
    The certificate in PEM format
    commonName String
    The common name to use
    excludeCnFromSans Boolean
    Exclude common name from SAN
    expiration Double
    (int) The Unix timestamp when the certificate will expire
    ipSans List<String>
    ) A list of IP SANS to include
    issuingCaPem String
    The issuing CA certicate in PEM format
    otherSans List<String>
    ) A list of other SANS to include
    pkiCertId String
    privateKeyPem String
    The private key in PEM format
    role String
    the Role to use as defined under a PKI Tenant resource
    serialNumber String
    The certificate serial number (equal to resource ID)
    tenantId String
    The tenant ID to create this certificate under
    triggers Map<String,String>
    ) An list of strings which when changes will trigger recreation of the resource
    ttl String
    The TTL, example 720h for 1 month
    uriSans List<String>
    ) A list of URI SANS to include
    altName string

    Deprecated: Deprecated

    altNames string
    Alternative names to use, comma separated list.
    caChainPem string
    The full CA chain in PEM format
    certPem string
    The certificate in PEM format
    commonName string
    The common name to use
    excludeCnFromSans boolean
    Exclude common name from SAN
    expiration number
    (int) The Unix timestamp when the certificate will expire
    ipSans string[]
    ) A list of IP SANS to include
    issuingCaPem string
    The issuing CA certicate in PEM format
    otherSans string[]
    ) A list of other SANS to include
    pkiCertId string
    privateKeyPem string
    The private key in PEM format
    role string
    the Role to use as defined under a PKI Tenant resource
    serialNumber string
    The certificate serial number (equal to resource ID)
    tenantId string
    The tenant ID to create this certificate under
    triggers {[key: string]: string}
    ) An list of strings which when changes will trigger recreation of the resource
    ttl string
    The TTL, example 720h for 1 month
    uriSans string[]
    ) A list of URI SANS to include
    alt_name str

    Deprecated: Deprecated

    alt_names str
    Alternative names to use, comma separated list.
    ca_chain_pem str
    The full CA chain in PEM format
    cert_pem str
    The certificate in PEM format
    common_name str
    The common name to use
    exclude_cn_from_sans bool
    Exclude common name from SAN
    expiration float
    (int) The Unix timestamp when the certificate will expire
    ip_sans Sequence[str]
    ) A list of IP SANS to include
    issuing_ca_pem str
    The issuing CA certicate in PEM format
    other_sans Sequence[str]
    ) A list of other SANS to include
    pki_cert_id str
    private_key_pem str
    The private key in PEM format
    role str
    the Role to use as defined under a PKI Tenant resource
    serial_number str
    The certificate serial number (equal to resource ID)
    tenant_id str
    The tenant ID to create this certificate under
    triggers Mapping[str, str]
    ) An list of strings which when changes will trigger recreation of the resource
    ttl str
    The TTL, example 720h for 1 month
    uri_sans Sequence[str]
    ) A list of URI SANS to include
    altName String

    Deprecated: Deprecated

    altNames String
    Alternative names to use, comma separated list.
    caChainPem String
    The full CA chain in PEM format
    certPem String
    The certificate in PEM format
    commonName String
    The common name to use
    excludeCnFromSans Boolean
    Exclude common name from SAN
    expiration Number
    (int) The Unix timestamp when the certificate will expire
    ipSans List<String>
    ) A list of IP SANS to include
    issuingCaPem String
    The issuing CA certicate in PEM format
    otherSans List<String>
    ) A list of other SANS to include
    pkiCertId String
    privateKeyPem String
    The private key in PEM format
    role String
    the Role to use as defined under a PKI Tenant resource
    serialNumber String
    The certificate serial number (equal to resource ID)
    tenantId String
    The tenant ID to create this certificate under
    triggers Map<String>
    ) An list of strings which when changes will trigger recreation of the resource
    ttl String
    The TTL, example 720h for 1 month
    uriSans List<String>
    ) A list of URI SANS to include

    Import

    ing

    Importing a HSDP PKI certificate is supported but not recommended as the private key will be missing, rendering the resource more or less useless in most cases. You can import a certificate using the serial number

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    hsdp philips-software/terraform-provider-hsdp
    License
    Notes
    This Pulumi package is based on the hsdp Terraform Provider.
    hsdp logo
    hsdp 0.65.3 published on Tuesday, Apr 15, 2025 by philips-software
    philips-software/terraform-provider-hsdp