published on Friday, Sep 18, 2026 by kong
published on Friday, Sep 18, 2026 by kong
AIGatewayCertificate Resource
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as konnect from "@pulumi/konnect";
const myAigatewaycertificate = new konnect.AiGatewayCertificate("my_aigatewaycertificate", {
cert: `-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
`,
certAlt: `-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
`,
gatewayId: "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7",
key: `-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
`,
keyAlt: `-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
`,
labels: {
key: "value",
},
managedBy: {
key: "value",
},
name: "my-tls-cert",
});
import pulumi
import pulumi_konnect as konnect
my_aigatewaycertificate = konnect.AiGatewayCertificate("my_aigatewaycertificate",
cert="""-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
""",
cert_alt="""-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
""",
gateway_id="5f9fd312-a987-4628-b4c5-bb4f4fddd5f7",
key="""-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
""",
key_alt="""-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
""",
labels={
"key": "value",
},
managed_by={
"key": "value",
},
name="my-tls-cert")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/konnect/v3/konnect"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := konnect.NewAiGatewayCertificate(ctx, "my_aigatewaycertificate", &konnect.AiGatewayCertificateArgs{
Cert: pulumi.String("-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----\n"),
CertAlt: pulumi.String("-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----\n"),
GatewayId: pulumi.String("5f9fd312-a987-4628-b4c5-bb4f4fddd5f7"),
Key: pulumi.String("-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"),
KeyAlt: pulumi.String("-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"),
Labels: pulumi.StringMap{
"key": pulumi.String("value"),
},
ManagedBy: pulumi.StringMap{
"key": pulumi.String("value"),
},
Name: pulumi.String("my-tls-cert"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Konnect = Pulumi.Konnect;
return await Deployment.RunAsync(() =>
{
var myAigatewaycertificate = new Konnect.AiGatewayCertificate("my_aigatewaycertificate", new()
{
Cert = @"-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
",
CertAlt = @"-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
",
GatewayId = "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7",
Key = @"-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
",
KeyAlt = @"-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
",
Labels =
{
{ "key", "value" },
},
ManagedBy =
{
{ "key", "value" },
},
Name = "my-tls-cert",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.AiGatewayCertificate;
import com.pulumi.konnect.AiGatewayCertificateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var myAigatewaycertificate = new AiGatewayCertificate("myAigatewaycertificate", AiGatewayCertificateArgs.builder()
.cert("""
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
""")
.certAlt("""
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
""")
.gatewayId("5f9fd312-a987-4628-b4c5-bb4f4fddd5f7")
.key("""
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
""")
.keyAlt("""
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
""")
.labels(Map.of("key", "value"))
.managedBy(Map.of("key", "value"))
.name("my-tls-cert")
.build());
}
}
resources:
myAigatewaycertificate:
type: konnect:AiGatewayCertificate
name: my_aigatewaycertificate
properties:
cert: |
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
certAlt: |
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
gatewayId: 5f9fd312-a987-4628-b4c5-bb4f4fddd5f7
key: |
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
keyAlt: |
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
labels:
key: value
managedBy:
key: value
name: my-tls-cert
Example coming soon!
Create AiGatewayCertificate Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new AiGatewayCertificate(name: string, args: AiGatewayCertificateArgs, opts?: CustomResourceOptions);@overload
def AiGatewayCertificate(resource_name: str,
args: AiGatewayCertificateArgs,
opts: Optional[ResourceOptions] = None)
@overload
def AiGatewayCertificate(resource_name: str,
opts: Optional[ResourceOptions] = None,
cert: Optional[str] = None,
gateway_id: Optional[str] = None,
key: Optional[str] = None,
cert_alt: Optional[str] = None,
key_alt: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
managed_by: Optional[Mapping[str, str]] = None,
name: Optional[str] = None)func NewAiGatewayCertificate(ctx *Context, name string, args AiGatewayCertificateArgs, opts ...ResourceOption) (*AiGatewayCertificate, error)public AiGatewayCertificate(string name, AiGatewayCertificateArgs args, CustomResourceOptions? opts = null)
public AiGatewayCertificate(String name, AiGatewayCertificateArgs args)
public AiGatewayCertificate(String name, AiGatewayCertificateArgs args, CustomResourceOptions options)
type: konnect:AiGatewayCertificate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "konnect_ai_gateway_certificate" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args AiGatewayCertificateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AiGatewayCertificateArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AiGatewayCertificateArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AiGatewayCertificateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AiGatewayCertificateArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var aiGatewayCertificateResource = new Konnect.AiGatewayCertificate("aiGatewayCertificateResource", new()
{
Cert = "string",
GatewayId = "string",
Key = "string",
CertAlt = "string",
KeyAlt = "string",
Labels =
{
{ "string", "string" },
},
ManagedBy =
{
{ "string", "string" },
},
Name = "string",
});
example, err := konnect.NewAiGatewayCertificate(ctx, "aiGatewayCertificateResource", &konnect.AiGatewayCertificateArgs{
Cert: pulumi.String("string"),
GatewayId: pulumi.String("string"),
Key: pulumi.String("string"),
CertAlt: pulumi.String("string"),
KeyAlt: pulumi.String("string"),
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
ManagedBy: pulumi.StringMap{
"string": pulumi.String("string"),
},
Name: pulumi.String("string"),
})
resource "konnect_ai_gateway_certificate" "aiGatewayCertificateResource" {
lifecycle {
create_before_destroy = true
}
cert = "string"
gateway_id = "string"
key = "string"
cert_alt = "string"
key_alt = "string"
labels = {
"string" = "string"
}
managed_by = {
"string" = "string"
}
name = "string"
}
var aiGatewayCertificateResource = new AiGatewayCertificate("aiGatewayCertificateResource", AiGatewayCertificateArgs.builder()
.cert("string")
.gatewayId("string")
.key("string")
.certAlt("string")
.keyAlt("string")
.labels(Map.of("string", "string"))
.managedBy(Map.of("string", "string"))
.name("string")
.build());
ai_gateway_certificate_resource = konnect.AiGatewayCertificate("aiGatewayCertificateResource",
cert="string",
gateway_id="string",
key="string",
cert_alt="string",
key_alt="string",
labels={
"string": "string",
},
managed_by={
"string": "string",
},
name="string")
const aiGatewayCertificateResource = new konnect.AiGatewayCertificate("aiGatewayCertificateResource", {
cert: "string",
gatewayId: "string",
key: "string",
certAlt: "string",
keyAlt: "string",
labels: {
string: "string",
},
managedBy: {
string: "string",
},
name: "string",
});
type: konnect:AiGatewayCertificate
properties:
cert: string
certAlt: string
gatewayId: string
key: string
keyAlt: string
labels:
string: string
managedBy:
string: string
name: string
AiGatewayCertificate Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The AiGatewayCertificate resource accepts the following input properties:
- Cert string
- PEM-encoded public certificate chain.
- Gateway
Id string - The unique ID of the AI Gateway.
- Key string
- PEM-encoded private key matching
cert. - Cert
Alt string - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - Key
Alt string - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - Labels Dictionary<string, string>
- Public labels store information about an entity that can be used for filtering a list of objects.
- Managed
By Dictionary<string, string> - Name string
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- Cert string
- PEM-encoded public certificate chain.
- Gateway
Id string - The unique ID of the AI Gateway.
- Key string
- PEM-encoded private key matching
cert. - Cert
Alt string - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - Key
Alt string - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - Labels map[string]string
- Public labels store information about an entity that can be used for filtering a list of objects.
- Managed
By map[string]string - Name string
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- cert string
- PEM-encoded public certificate chain.
- gateway_
id string - The unique ID of the AI Gateway.
- key string
- PEM-encoded private key matching
cert. - cert_
alt string - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - key_
alt string - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels map(string)
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed_
by map(string) - name string
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- cert String
- PEM-encoded public certificate chain.
- gateway
Id String - The unique ID of the AI Gateway.
- key String
- PEM-encoded private key matching
cert. - cert
Alt String - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - key
Alt String - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels Map<String,String>
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed
By Map<String,String> - name String
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- cert string
- PEM-encoded public certificate chain.
- gateway
Id string - The unique ID of the AI Gateway.
- key string
- PEM-encoded private key matching
cert. - cert
Alt string - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - key
Alt string - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels {[key: string]: string}
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed
By {[key: string]: string} - name string
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- cert str
- PEM-encoded public certificate chain.
- gateway_
id str - The unique ID of the AI Gateway.
- key str
- PEM-encoded private key matching
cert. - cert_
alt str - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - key_
alt str - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels Mapping[str, str]
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed_
by Mapping[str, str] - name str
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- cert String
- PEM-encoded public certificate chain.
- gateway
Id String - The unique ID of the AI Gateway.
- key String
- PEM-encoded private key matching
cert. - cert
Alt String - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - key
Alt String - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels Map<String>
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed
By Map<String> - name String
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
Outputs
All input properties are implicitly available as output properties. Additionally, the AiGatewayCertificate resource produces the following output properties:
- created_
at string - An ISO-8601 timestamp representation of entity creation date.
- id string
- The provider-assigned unique ID for this managed resource.
- updated_
at string - An ISO-8601 timestamp representation of entity update date.
- created_
at str - An ISO-8601 timestamp representation of entity creation date.
- id str
- The provider-assigned unique ID for this managed resource.
- updated_
at str - An ISO-8601 timestamp representation of entity update date.
Look up Existing AiGatewayCertificate Resource
Get an existing AiGatewayCertificate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AiGatewayCertificateState, opts?: CustomResourceOptions): AiGatewayCertificate@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
cert: Optional[str] = None,
cert_alt: Optional[str] = None,
created_at: Optional[str] = None,
gateway_id: Optional[str] = None,
key: Optional[str] = None,
key_alt: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
managed_by: Optional[Mapping[str, str]] = None,
name: Optional[str] = None,
updated_at: Optional[str] = None) -> AiGatewayCertificatefunc GetAiGatewayCertificate(ctx *Context, name string, id IDInput, state *AiGatewayCertificateState, opts ...ResourceOption) (*AiGatewayCertificate, error)public static AiGatewayCertificate Get(string name, Input<string> id, AiGatewayCertificateState? state, CustomResourceOptions? opts = null)public static AiGatewayCertificate get(String name, Output<String> id, AiGatewayCertificateState state, CustomResourceOptions options)resources: _: type: konnect:AiGatewayCertificate get: id: ${id}import {
to = konnect_ai_gateway_certificate.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Cert string
- PEM-encoded public certificate chain.
- Cert
Alt string - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - Created
At string - An ISO-8601 timestamp representation of entity creation date.
- Gateway
Id string - The unique ID of the AI Gateway.
- Key string
- PEM-encoded private key matching
cert. - Key
Alt string - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - Labels Dictionary<string, string>
- Public labels store information about an entity that can be used for filtering a list of objects.
- Managed
By Dictionary<string, string> - Name string
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- Updated
At string - An ISO-8601 timestamp representation of entity update date.
- Cert string
- PEM-encoded public certificate chain.
- Cert
Alt string - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - Created
At string - An ISO-8601 timestamp representation of entity creation date.
- Gateway
Id string - The unique ID of the AI Gateway.
- Key string
- PEM-encoded private key matching
cert. - Key
Alt string - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - Labels map[string]string
- Public labels store information about an entity that can be used for filtering a list of objects.
- Managed
By map[string]string - Name string
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- Updated
At string - An ISO-8601 timestamp representation of entity update date.
- cert string
- PEM-encoded public certificate chain.
- cert_
alt string - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - created_
at string - An ISO-8601 timestamp representation of entity creation date.
- gateway_
id string - The unique ID of the AI Gateway.
- key string
- PEM-encoded private key matching
cert. - key_
alt string - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels map(string)
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed_
by map(string) - name string
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- updated_
at string - An ISO-8601 timestamp representation of entity update date.
- cert String
- PEM-encoded public certificate chain.
- cert
Alt String - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - created
At String - An ISO-8601 timestamp representation of entity creation date.
- gateway
Id String - The unique ID of the AI Gateway.
- key String
- PEM-encoded private key matching
cert. - key
Alt String - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels Map<String,String>
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed
By Map<String,String> - name String
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- updated
At String - An ISO-8601 timestamp representation of entity update date.
- cert string
- PEM-encoded public certificate chain.
- cert
Alt string - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - created
At string - An ISO-8601 timestamp representation of entity creation date.
- gateway
Id string - The unique ID of the AI Gateway.
- key string
- PEM-encoded private key matching
cert. - key
Alt string - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels {[key: string]: string}
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed
By {[key: string]: string} - name string
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- updated
At string - An ISO-8601 timestamp representation of entity update date.
- cert str
- PEM-encoded public certificate chain.
- cert_
alt str - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - created_
at str - An ISO-8601 timestamp representation of entity creation date.
- gateway_
id str - The unique ID of the AI Gateway.
- key str
- PEM-encoded private key matching
cert. - key_
alt str - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels Mapping[str, str]
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed_
by Mapping[str, str] - name str
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- updated_
at str - An ISO-8601 timestamp representation of entity update date.
- cert String
- PEM-encoded public certificate chain.
- cert
Alt String - PEM-encoded public certificate chain of the alternative certificate. It must use a different key algorithm than
cert, and requireskey_altto be set. - created
At String - An ISO-8601 timestamp representation of entity creation date.
- gateway
Id String - The unique ID of the AI Gateway.
- key String
- PEM-encoded private key matching
cert. - key
Alt String - PEM-encoded private key matching
cert_alt. Requirescert_altto be set. - labels Map<String>
- Public labels store information about an entity that can be used for filtering a list of objects.
- managed
By Map<String> - name String
- A user-defined unique identifier for this certificate, used as a stable human-readable reference. This value is immutable after creation.
- updated
At String - An ISO-8601 timestamp representation of entity update date.
Import
In Terraform v1.5.0 and later, the import block can be used with the id attribute, for example:
terraform
import {
to = konnect_ai_gateway_certificate.my_konnect_ai_gateway_certificate
id = jsonencode({
gateway_id = "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7"
id = "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7"
})
}
The pulumi import command can be used, for example:
$ pulumi import konnect:index/aiGatewayCertificate:AiGatewayCertificate my_konnect_ai_gateway_certificate '{"gateway_id": "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7", "id": "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7"}'
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- konnect kong/terraform-provider-konnect
- License
- Notes
- This Pulumi package is based on the
konnectTerraform Provider.
published on Friday, Sep 18, 2026 by kong