1. Packages
  2. Packages
  3. Scaleway
  4. API Docs
  5. loadbalancers
  6. Certificate
Viewing docs for Scaleway v1.49.0
published on Thursday, May 14, 2026 by pulumiverse
Schema (JSON)
pulumiverse/pulumi-scaleway

scaleway.loadbalancers.Certificate

scaleway logo
Viewing docs for Scaleway v1.49.0
published on Thursday, May 14, 2026 by pulumiverse
Schema (JSON)
pulumiverse/pulumi-scaleway

    Creates and manages Scaleway Load Balancer certificates.

    For more information, see the main documentation or API documentation.

    Example Usage

    Custom Certificate

    import * as pulumi from "@pulumi/pulumi";
import * as scaleway from "@pulumiverse/scaleway";

const cert01 = new scaleway.loadbalancers.Certificate("cert01", {
    lbId: lb01.id,
    name: "custom-cert",
    customCertificate: {
        certificateChain: "CERTIFICATE_CHAIN_CONTENTS\n",
    },
});

    import pulumi
import pulumiverse_scaleway as scaleway

cert01 = scaleway.loadbalancers.Certificate("cert01",
    lb_id=lb01["id"],
    name="custom-cert",
    custom_certificate={
        "certificate_chain": "CERTIFICATE_CHAIN_CONTENTS\n",
    })

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/loadbalancers"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := loadbalancers.NewCertificate(ctx, "cert01", &loadbalancers.CertificateArgs{
			LbId: pulumi.Any(lb01.Id),
			Name: pulumi.String("custom-cert"),
			CustomCertificate: &loadbalancers.CertificateCustomCertificateArgs{
				CertificateChain: pulumi.String("CERTIFICATE_CHAIN_CONTENTS\n"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scaleway = Pulumiverse.Scaleway;

return await Deployment.RunAsync(() => 
{
    var cert01 = new Scaleway.Loadbalancers.Certificate("cert01", new()
    {
        LbId = lb01.Id,
        Name = "custom-cert",
        CustomCertificate = new Scaleway.Loadbalancers.Inputs.CertificateCustomCertificateArgs
        {
            CertificateChain = @"CERTIFICATE_CHAIN_CONTENTS
",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scaleway.loadbalancers.Certificate;
import com.pulumi.scaleway.loadbalancers.CertificateArgs;
import com.pulumi.scaleway.loadbalancers.inputs.CertificateCustomCertificateArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var cert01 = new Certificate("cert01", CertificateArgs.builder()
            .lbId(lb01.id())
            .name("custom-cert")
            .customCertificate(CertificateCustomCertificateArgs.builder()
                .certificateChain("""
CERTIFICATE_CHAIN_CONTENTS
                """)
                .build())
            .build());

    }
}

    resources:
  cert01:
    type: scaleway:loadbalancers:Certificate
    properties:
      lbId: ${lb01.id}
      name: custom-cert
      customCertificate:
        certificateChain: |
          CERTIFICATE_CHAIN_CONTENTS

    Example coming soon!

    Additional notes

    • Ensure that all domain names used in the configuration are pointing to the Load Balancer IP. You can achieve this by creating a DNS record through Terraform pointing to the ipAddress property of the lbBeta entity.
    • If there are any issues with the certificate, you will receive a 400 error from the apply operation. Use export TF_LOG=DEBUG to view the exact problem returned by the API.
    • Wildcards are not yet supported with Let’s Encrypt.
    • Use lifecycle instruction with createBeforeDestroy = true to permit correct certificate replacement and prevent a 400 error from the apply operation.

    Create Certificate Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Certificate(name: string, args: CertificateArgs, opts?: CustomResourceOptions);
    @overload
def Certificate(resource_name: str,
                args: CertificateArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def Certificate(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                lb_id: Optional[str] = None,
                custom_certificate: Optional[CertificateCustomCertificateArgs] = None,
                letsencrypt: Optional[CertificateLetsencryptArgs] = None,
                name: Optional[str] = None)
    func NewCertificate(ctx *Context, name string, args CertificateArgs, opts ...ResourceOption) (*Certificate, error)
    public Certificate(string name, CertificateArgs args, CustomResourceOptions? opts = null)
    public Certificate(String name, CertificateArgs args)
public Certificate(String name, CertificateArgs args, CustomResourceOptions options)

    type: scaleway:loadbalancers:Certificate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "scaleway_loadbalancers_certificate" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args CertificateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CertificateArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CertificateArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CertificateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CertificateArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var certificateResource = new Scaleway.Loadbalancers.Certificate("certificateResource", new()
{
    LbId = "string",
    CustomCertificate = new Scaleway.Loadbalancers.Inputs.CertificateCustomCertificateArgs
    {
        CertificateChain = "string",
    },
    Letsencrypt = new Scaleway.Loadbalancers.Inputs.CertificateLetsencryptArgs
    {
        CommonName = "string",
        SubjectAlternativeNames = new[]
        {
            "string",
        },
    },
    Name = "string",
});

    example, err := loadbalancers.NewCertificate(ctx, "certificateResource", &loadbalancers.CertificateArgs{
	LbId: pulumi.String("string"),
	CustomCertificate: &loadbalancers.CertificateCustomCertificateArgs{
		CertificateChain: pulumi.String("string"),
	},
	Letsencrypt: &loadbalancers.CertificateLetsencryptArgs{
		CommonName: pulumi.String("string"),
		SubjectAlternativeNames: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	Name: pulumi.String("string"),
})

    resource "scaleway_loadbalancers_certificate" "certificateResource" {
  lb_id = "string"
  custom_certificate = {
    certificate_chain = "string"
  }
  letsencrypt = {
    common_name               = "string"
    subject_alternative_names = ["string"]
  }
  name = "string"
}

    var certificateResource = new Certificate("certificateResource", CertificateArgs.builder()
    .lbId("string")
    .customCertificate(CertificateCustomCertificateArgs.builder()
        .certificateChain("string")
        .build())
    .letsencrypt(CertificateLetsencryptArgs.builder()
        .commonName("string")
        .subjectAlternativeNames("string")
        .build())
    .name("string")
    .build());

    certificate_resource = scaleway.loadbalancers.Certificate("certificateResource",
    lb_id="string",
    custom_certificate={
        "certificate_chain": "string",
    },
    letsencrypt={
        "common_name": "string",
        "subject_alternative_names": ["string"],
    },
    name="string")

    const certificateResource = new scaleway.loadbalancers.Certificate("certificateResource", {
    lbId: "string",
    customCertificate: {
        certificateChain: "string",
    },
    letsencrypt: {
        commonName: "string",
        subjectAlternativeNames: ["string"],
    },
    name: "string",
});

    type: scaleway:loadbalancers:Certificate
properties:
    customCertificate:
        certificateChain: string
    lbId: string
    letsencrypt:
        commonName: string
        subjectAlternativeNames:
            - string
    name: string

    Certificate Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Certificate resource accepts the following input properties:

    LbId string
    The load-balancer ID
    CustomCertificate Pulumiverse.Scaleway.Loadbalancers.Inputs.CertificateCustomCertificate
    The custom type certificate type configuration
    Letsencrypt Pulumiverse.Scaleway.Loadbalancers.Inputs.CertificateLetsencrypt
    The Let's Encrypt type certificate configuration
    Name string
    The name of the load-balancer certificate
    LbId string
    The load-balancer ID
    CustomCertificate CertificateCustomCertificateArgs
    The custom type certificate type configuration
    Letsencrypt CertificateLetsencryptArgs
    The Let's Encrypt type certificate configuration
    Name string
    The name of the load-balancer certificate
    lb_id string
    The load-balancer ID
    custom_certificate object
    The custom type certificate type configuration
    letsencrypt object
    The Let's Encrypt type certificate configuration
    name string
    The name of the load-balancer certificate
    lbId String
    The load-balancer ID
    customCertificate CertificateCustomCertificate
    The custom type certificate type configuration
    letsencrypt CertificateLetsencrypt
    The Let's Encrypt type certificate configuration
    name String
    The name of the load-balancer certificate
    lbId string
    The load-balancer ID
    customCertificate CertificateCustomCertificate
    The custom type certificate type configuration
    letsencrypt CertificateLetsencrypt
    The Let's Encrypt type certificate configuration
    name string
    The name of the load-balancer certificate
    lb_id str
    The load-balancer ID
    custom_certificate CertificateCustomCertificateArgs
    The custom type certificate type configuration
    letsencrypt CertificateLetsencryptArgs
    The Let's Encrypt type certificate configuration
    name str
    The name of the load-balancer certificate
    lbId String
    The load-balancer ID
    customCertificate Property Map
    The custom type certificate type configuration
    letsencrypt Property Map
    The Let's Encrypt type certificate configuration
    name String
    The name of the load-balancer certificate

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Certificate resource produces the following output properties:

    CommonName string
    Main domain of the certificate
    Fingerprint string
    The identifier (SHA-1) of the certificate
    Id string
    The provider-assigned unique ID for this managed resource.
    NotValidAfter string
    The not valid after validity bound timestamp
    NotValidBefore string
    The not valid before validity bound timestamp
    Status string
    Certificate status
    SubjectAlternativeNames List<string>
    The alternative domain names of the certificate
    CommonName string
    Main domain of the certificate
    Fingerprint string
    The identifier (SHA-1) of the certificate
    Id string
    The provider-assigned unique ID for this managed resource.
    NotValidAfter string
    The not valid after validity bound timestamp
    NotValidBefore string
    The not valid before validity bound timestamp
    Status string
    Certificate status
    SubjectAlternativeNames []string
    The alternative domain names of the certificate
    common_name string
    Main domain of the certificate
    fingerprint string
    The identifier (SHA-1) of the certificate
    id string
    The provider-assigned unique ID for this managed resource.
    not_valid_after string
    The not valid after validity bound timestamp
    not_valid_before string
    The not valid before validity bound timestamp
    status string
    Certificate status
    subject_alternative_names list(string)
    The alternative domain names of the certificate
    commonName String
    Main domain of the certificate
    fingerprint String
    The identifier (SHA-1) of the certificate
    id String
    The provider-assigned unique ID for this managed resource.
    notValidAfter String
    The not valid after validity bound timestamp
    notValidBefore String
    The not valid before validity bound timestamp
    status String
    Certificate status
    subjectAlternativeNames List<String>
    The alternative domain names of the certificate
    commonName string
    Main domain of the certificate
    fingerprint string
    The identifier (SHA-1) of the certificate
    id string
    The provider-assigned unique ID for this managed resource.
    notValidAfter string
    The not valid after validity bound timestamp
    notValidBefore string
    The not valid before validity bound timestamp
    status string
    Certificate status
    subjectAlternativeNames string[]
    The alternative domain names of the certificate
    common_name str
    Main domain of the certificate
    fingerprint str
    The identifier (SHA-1) of the certificate
    id str
    The provider-assigned unique ID for this managed resource.
    not_valid_after str
    The not valid after validity bound timestamp
    not_valid_before str
    The not valid before validity bound timestamp
    status str
    Certificate status
    subject_alternative_names Sequence[str]
    The alternative domain names of the certificate
    commonName String
    Main domain of the certificate
    fingerprint String
    The identifier (SHA-1) of the certificate
    id String
    The provider-assigned unique ID for this managed resource.
    notValidAfter String
    The not valid after validity bound timestamp
    notValidBefore String
    The not valid before validity bound timestamp
    status String
    Certificate status
    subjectAlternativeNames List<String>
    The alternative domain names of the certificate

    Look up Existing Certificate Resource

    Get an existing Certificate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CertificateState, opts?: CustomResourceOptions): Certificate
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        common_name: Optional[str] = None,
        custom_certificate: Optional[CertificateCustomCertificateArgs] = None,
        fingerprint: Optional[str] = None,
        lb_id: Optional[str] = None,
        letsencrypt: Optional[CertificateLetsencryptArgs] = None,
        name: Optional[str] = None,
        not_valid_after: Optional[str] = None,
        not_valid_before: Optional[str] = None,
        status: Optional[str] = None,
        subject_alternative_names: Optional[Sequence[str]] = None) -> Certificate
    func GetCertificate(ctx *Context, name string, id IDInput, state *CertificateState, opts ...ResourceOption) (*Certificate, error)
    public static Certificate Get(string name, Input<string> id, CertificateState? state, CustomResourceOptions? opts = null)
    public static Certificate get(String name, Output<String> id, CertificateState state, CustomResourceOptions options)
    resources:  _:    type: scaleway:loadbalancers:Certificate    get:      id: ${id}
    import {
  to = scaleway_loadbalancers_certificate.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CommonName string
    Main domain of the certificate
    CustomCertificate Pulumiverse.Scaleway.Loadbalancers.Inputs.CertificateCustomCertificate
    The custom type certificate type configuration
    Fingerprint string
    The identifier (SHA-1) of the certificate
    LbId string
    The load-balancer ID
    Letsencrypt Pulumiverse.Scaleway.Loadbalancers.Inputs.CertificateLetsencrypt
    The Let's Encrypt type certificate configuration
    Name string
    The name of the load-balancer certificate
    NotValidAfter string
    The not valid after validity bound timestamp
    NotValidBefore string
    The not valid before validity bound timestamp
    Status string
    Certificate status
    SubjectAlternativeNames List<string>
    The alternative domain names of the certificate
    CommonName string
    Main domain of the certificate
    CustomCertificate CertificateCustomCertificateArgs
    The custom type certificate type configuration
    Fingerprint string
    The identifier (SHA-1) of the certificate
    LbId string
    The load-balancer ID
    Letsencrypt CertificateLetsencryptArgs
    The Let's Encrypt type certificate configuration
    Name string
    The name of the load-balancer certificate
    NotValidAfter string
    The not valid after validity bound timestamp
    NotValidBefore string
    The not valid before validity bound timestamp
    Status string
    Certificate status
    SubjectAlternativeNames []string
    The alternative domain names of the certificate
    common_name string
    Main domain of the certificate
    custom_certificate object
    The custom type certificate type configuration
    fingerprint string
    The identifier (SHA-1) of the certificate
    lb_id string
    The load-balancer ID
    letsencrypt object
    The Let's Encrypt type certificate configuration
    name string
    The name of the load-balancer certificate
    not_valid_after string
    The not valid after validity bound timestamp
    not_valid_before string
    The not valid before validity bound timestamp
    status string
    Certificate status
    subject_alternative_names list(string)
    The alternative domain names of the certificate
    commonName String
    Main domain of the certificate
    customCertificate CertificateCustomCertificate
    The custom type certificate type configuration
    fingerprint String
    The identifier (SHA-1) of the certificate
    lbId String
    The load-balancer ID
    letsencrypt CertificateLetsencrypt
    The Let's Encrypt type certificate configuration
    name String
    The name of the load-balancer certificate
    notValidAfter String
    The not valid after validity bound timestamp
    notValidBefore String
    The not valid before validity bound timestamp
    status String
    Certificate status
    subjectAlternativeNames List<String>
    The alternative domain names of the certificate
    commonName string
    Main domain of the certificate
    customCertificate CertificateCustomCertificate
    The custom type certificate type configuration
    fingerprint string
    The identifier (SHA-1) of the certificate
    lbId string
    The load-balancer ID
    letsencrypt CertificateLetsencrypt
    The Let's Encrypt type certificate configuration
    name string
    The name of the load-balancer certificate
    notValidAfter string
    The not valid after validity bound timestamp
    notValidBefore string
    The not valid before validity bound timestamp
    status string
    Certificate status
    subjectAlternativeNames string[]
    The alternative domain names of the certificate
    common_name str
    Main domain of the certificate
    custom_certificate CertificateCustomCertificateArgs
    The custom type certificate type configuration
    fingerprint str
    The identifier (SHA-1) of the certificate
    lb_id str
    The load-balancer ID
    letsencrypt CertificateLetsencryptArgs
    The Let's Encrypt type certificate configuration
    name str
    The name of the load-balancer certificate
    not_valid_after str
    The not valid after validity bound timestamp
    not_valid_before str
    The not valid before validity bound timestamp
    status str
    Certificate status
    subject_alternative_names Sequence[str]
    The alternative domain names of the certificate
    commonName String
    Main domain of the certificate
    customCertificate Property Map
    The custom type certificate type configuration
    fingerprint String
    The identifier (SHA-1) of the certificate
    lbId String
    The load-balancer ID
    letsencrypt Property Map
    The Let's Encrypt type certificate configuration
    name String
    The name of the load-balancer certificate
    notValidAfter String
    The not valid after validity bound timestamp
    notValidBefore String
    The not valid before validity bound timestamp
    status String
    Certificate status
    subjectAlternativeNames List<String>
    The alternative domain names of the certificate

    Supporting Types

    CertificateCustomCertificate, CertificateCustomCertificateArgs

    CertificateChain string
    The full PEM-formatted certificate chain
    CertificateChain string
    The full PEM-formatted certificate chain
    certificate_chain string
    The full PEM-formatted certificate chain
    certificateChain String
    The full PEM-formatted certificate chain
    certificateChain string
    The full PEM-formatted certificate chain
    certificate_chain str
    The full PEM-formatted certificate chain
    certificateChain String
    The full PEM-formatted certificate chain

    CertificateLetsencrypt, CertificateLetsencryptArgs

    CommonName string
    Main domain of the certificate
    SubjectAlternativeNames List<string>
    The alternative domain names of the certificate
    CommonName string
    Main domain of the certificate
    SubjectAlternativeNames []string
    The alternative domain names of the certificate
    common_name string
    Main domain of the certificate
    subject_alternative_names list(string)
    The alternative domain names of the certificate
    commonName String
    Main domain of the certificate
    subjectAlternativeNames List<String>
    The alternative domain names of the certificate
    commonName string
    Main domain of the certificate
    subjectAlternativeNames string[]
    The alternative domain names of the certificate
    common_name str
    Main domain of the certificate
    subject_alternative_names Sequence[str]
    The alternative domain names of the certificate
    commonName String
    Main domain of the certificate
    subjectAlternativeNames List<String>
    The alternative domain names of the certificate

    Import

    Load Balancer certificates can be imported using the {zone}/{id}, e.g.

    $ pulumi import scaleway:loadbalancers/certificate:Certificate cert01 fr-par-1/11111111-1111-1111-1111-111111111111

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    scaleway pulumiverse/pulumi-scaleway
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the scaleway Terraform Provider.
    scaleway logo
    Viewing docs for Scaleway v1.49.0
    published on Thursday, May 14, 2026 by pulumiverse
    Schema (JSON)
    pulumiverse/pulumi-scaleway
      Try Pulumi Cloud free. Your team will thank you.