published on Thursday, Apr 23, 2026 by Volcengine
published on Thursday, Apr 23, 2026 by Volcengine
ALB supports uploading server certificates and CA certificates to the console and manages uploaded certificates separately
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as volcenginecc from "@volcengine/pulumi-volcenginecc";
const aLBCertificateDemo = new volcenginecc.alb.Certificate("ALBCertificateDemo", {
certificateName: "ALBCertificateDemo",
certificateType: "CA",
publicKey: "-----BEGIN CERTIFICATE-----xxxx-----END CERTIFICATE-----",
description: "ALBCertificateDemo description",
projectName: "default",
tags: [{
key: "env",
value: "test",
}],
});
import pulumi
import pulumi_volcenginecc as volcenginecc
a_lb_certificate_demo = volcenginecc.alb.Certificate("ALBCertificateDemo",
certificate_name="ALBCertificateDemo",
certificate_type="CA",
public_key="-----BEGIN CERTIFICATE-----xxxx-----END CERTIFICATE-----",
description="ALBCertificateDemo description",
project_name="default",
tags=[{
"key": "env",
"value": "test",
}])
package main
import (
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/volcengine/pulumi-volcenginecc/sdk/go/volcenginecc/alb"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := alb.NewCertificate(ctx, "ALBCertificateDemo", &alb.CertificateArgs{
CertificateName: pulumi.String("ALBCertificateDemo"),
CertificateType: pulumi.String("CA"),
PublicKey: pulumi.String("-----BEGIN CERTIFICATE-----xxxx-----END CERTIFICATE-----"),
Description: pulumi.String("ALBCertificateDemo description"),
ProjectName: pulumi.String("default"),
Tags: alb.CertificateTagArray{
&alb.CertificateTagArgs{
Key: pulumi.String("env"),
Value: pulumi.String("test"),
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Volcenginecc = Volcengine.Pulumi.Volcenginecc;
return await Deployment.RunAsync(() =>
{
var aLBCertificateDemo = new Volcenginecc.Alb.Certificate("ALBCertificateDemo", new()
{
CertificateName = "ALBCertificateDemo",
CertificateType = "CA",
PublicKey = "-----BEGIN CERTIFICATE-----xxxx-----END CERTIFICATE-----",
Description = "ALBCertificateDemo description",
ProjectName = "default",
Tags = new[]
{
new Volcenginecc.Alb.Inputs.CertificateTagArgs
{
Key = "env",
Value = "test",
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.volcengine.volcenginecc.alb.Certificate;
import com.volcengine.volcenginecc.alb.CertificateArgs;
import com.pulumi.volcenginecc.alb.inputs.CertificateTagArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var aLBCertificateDemo = new Certificate("aLBCertificateDemo", CertificateArgs.builder()
.certificateName("ALBCertificateDemo")
.certificateType("CA")
.publicKey("-----BEGIN CERTIFICATE-----xxxx-----END CERTIFICATE-----")
.description("ALBCertificateDemo description")
.projectName("default")
.tags(CertificateTagArgs.builder()
.key("env")
.value("test")
.build())
.build());
}
}
resources:
aLBCertificateDemo:
type: volcenginecc:alb:Certificate
name: ALBCertificateDemo
properties:
certificateName: ALBCertificateDemo
certificateType: CA
publicKey: '-----BEGIN CERTIFICATE-----xxxx-----END CERTIFICATE-----'
description: ALBCertificateDemo description
projectName: default
tags:
- key: env
value: test
Create Certificate Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Certificate(name: string, args: CertificateArgs, opts?: CustomResourceOptions);@overload
def Certificate(resource_name: str,
args: CertificateArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Certificate(resource_name: str,
opts: Optional[ResourceOptions] = None,
certificate_type: Optional[str] = None,
public_key: Optional[str] = None,
certificate_name: Optional[str] = None,
description: Optional[str] = None,
private_key: Optional[str] = None,
project_name: Optional[str] = None,
tags: Optional[Sequence[CertificateTagArgs]] = None)func NewCertificate(ctx *Context, name string, args CertificateArgs, opts ...ResourceOption) (*Certificate, error)public Certificate(string name, CertificateArgs args, CustomResourceOptions? opts = null)
public Certificate(String name, CertificateArgs args)
public Certificate(String name, CertificateArgs args, CustomResourceOptions options)
type: volcenginecc:alb:Certificate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CertificateArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var certificateResource = new Volcenginecc.Alb.Certificate("certificateResource", new()
{
CertificateType = "string",
PublicKey = "string",
CertificateName = "string",
Description = "string",
PrivateKey = "string",
ProjectName = "string",
Tags = new[]
{
new Volcenginecc.Alb.Inputs.CertificateTagArgs
{
Key = "string",
Value = "string",
},
},
});
example, err := alb.NewCertificate(ctx, "certificateResource", &alb.CertificateArgs{
CertificateType: pulumi.String("string"),
PublicKey: pulumi.String("string"),
CertificateName: pulumi.String("string"),
Description: pulumi.String("string"),
PrivateKey: pulumi.String("string"),
ProjectName: pulumi.String("string"),
Tags: alb.CertificateTagArray{
&alb.CertificateTagArgs{
Key: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
})
var certificateResource = new com.volcengine.volcenginecc.alb.Certificate("certificateResource", com.volcengine.volcenginecc.alb.CertificateArgs.builder()
.certificateType("string")
.publicKey("string")
.certificateName("string")
.description("string")
.privateKey("string")
.projectName("string")
.tags(CertificateTagArgs.builder()
.key("string")
.value("string")
.build())
.build());
certificate_resource = volcenginecc.alb.Certificate("certificateResource",
certificate_type="string",
public_key="string",
certificate_name="string",
description="string",
private_key="string",
project_name="string",
tags=[{
"key": "string",
"value": "string",
}])
const certificateResource = new volcenginecc.alb.Certificate("certificateResource", {
certificateType: "string",
publicKey: "string",
certificateName: "string",
description: "string",
privateKey: "string",
projectName: "string",
tags: [{
key: "string",
value: "string",
}],
});
type: volcenginecc:alb:Certificate
properties:
certificateName: string
certificateType: string
description: string
privateKey: string
projectName: string
publicKey: string
tags:
- key: string
value: string
Certificate Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Certificate resource accepts the following input properties:
- Certificate
Type string - Certificate type. Options: CA: CA certificate; Server: server certificate
- Public
Key string - Server certificate public key
- Certificate
Name string - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- Description string
- Certificate description
- Private
Key string - Server certificate private key. Required when certificate type is Server
- Project
Name string - Project name
-
List<Volcengine.
Certificate Tag>
- Certificate
Type string - Certificate type. Options: CA: CA certificate; Server: server certificate
- Public
Key string - Server certificate public key
- Certificate
Name string - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- Description string
- Certificate description
- Private
Key string - Server certificate private key. Required when certificate type is Server
- Project
Name string - Project name
-
[]Certificate
Tag Args
- certificate
Type String - Certificate type. Options: CA: CA certificate; Server: server certificate
- public
Key String - Server certificate public key
- certificate
Name String - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- description String
- Certificate description
- private
Key String - Server certificate private key. Required when certificate type is Server
- project
Name String - Project name
-
List<Certificate
Tag>
- certificate
Type string - Certificate type. Options: CA: CA certificate; Server: server certificate
- public
Key string - Server certificate public key
- certificate
Name string - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- description string
- Certificate description
- private
Key string - Server certificate private key. Required when certificate type is Server
- project
Name string - Project name
-
Certificate
Tag[]
- certificate_
type str - Certificate type. Options: CA: CA certificate; Server: server certificate
- public_
key str - Server certificate public key
- certificate_
name str - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- description str
- Certificate description
- private_
key str - Server certificate private key. Required when certificate type is Server
- project_
name str - Project name
-
Sequence[Certificate
Tag Args]
- certificate
Type String - Certificate type. Options: CA: CA certificate; Server: server certificate
- public
Key String - Server certificate public key
- certificate
Name String - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- description String
- Certificate description
- private
Key String - Server certificate private key. Required when certificate type is Server
- project
Name String - Project name
- List<Property Map>
Outputs
All input properties are implicitly available as output properties. Additionally, the Certificate resource produces the following output properties:
- Certificate
Id string - Certificate ID
- Created
Time string - Certificate creation time
- Domain
Name string - Certificate domain name
- Expired
At string - Certificate expiration time
- Id string
- The provider-assigned unique ID for this managed resource.
- Listeners List<string>
- List of listeners associated with the certificate
- San string
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- Status string
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
- Certificate
Id string - Certificate ID
- Created
Time string - Certificate creation time
- Domain
Name string - Certificate domain name
- Expired
At string - Certificate expiration time
- Id string
- The provider-assigned unique ID for this managed resource.
- Listeners []string
- List of listeners associated with the certificate
- San string
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- Status string
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
- certificate
Id String - Certificate ID
- created
Time String - Certificate creation time
- domain
Name String - Certificate domain name
- expired
At String - Certificate expiration time
- id String
- The provider-assigned unique ID for this managed resource.
- listeners List<String>
- List of listeners associated with the certificate
- san String
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- status String
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
- certificate
Id string - Certificate ID
- created
Time string - Certificate creation time
- domain
Name string - Certificate domain name
- expired
At string - Certificate expiration time
- id string
- The provider-assigned unique ID for this managed resource.
- listeners string[]
- List of listeners associated with the certificate
- san string
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- status string
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
- certificate_
id str - Certificate ID
- created_
time str - Certificate creation time
- domain_
name str - Certificate domain name
- expired_
at str - Certificate expiration time
- id str
- The provider-assigned unique ID for this managed resource.
- listeners Sequence[str]
- List of listeners associated with the certificate
- san str
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- status str
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
- certificate
Id String - Certificate ID
- created
Time String - Certificate creation time
- domain
Name String - Certificate domain name
- expired
At String - Certificate expiration time
- id String
- The provider-assigned unique ID for this managed resource.
- listeners List<String>
- List of listeners associated with the certificate
- san String
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- status String
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
Look up Existing Certificate Resource
Get an existing Certificate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: CertificateState, opts?: CustomResourceOptions): Certificate@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
certificate_id: Optional[str] = None,
certificate_name: Optional[str] = None,
certificate_type: Optional[str] = None,
created_time: Optional[str] = None,
description: Optional[str] = None,
domain_name: Optional[str] = None,
expired_at: Optional[str] = None,
listeners: Optional[Sequence[str]] = None,
private_key: Optional[str] = None,
project_name: Optional[str] = None,
public_key: Optional[str] = None,
san: Optional[str] = None,
status: Optional[str] = None,
tags: Optional[Sequence[CertificateTagArgs]] = None) -> Certificatefunc GetCertificate(ctx *Context, name string, id IDInput, state *CertificateState, opts ...ResourceOption) (*Certificate, error)public static Certificate Get(string name, Input<string> id, CertificateState? state, CustomResourceOptions? opts = null)public static Certificate get(String name, Output<String> id, CertificateState state, CustomResourceOptions options)resources: _: type: volcenginecc:alb:Certificate get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Certificate
Id string - Certificate ID
- Certificate
Name string - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- Certificate
Type string - Certificate type. Options: CA: CA certificate; Server: server certificate
- Created
Time string - Certificate creation time
- Description string
- Certificate description
- Domain
Name string - Certificate domain name
- Expired
At string - Certificate expiration time
- Listeners List<string>
- List of listeners associated with the certificate
- Private
Key string - Server certificate private key. Required when certificate type is Server
- Project
Name string - Project name
- Public
Key string - Server certificate public key
- San string
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- Status string
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
-
List<Volcengine.
Certificate Tag>
- Certificate
Id string - Certificate ID
- Certificate
Name string - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- Certificate
Type string - Certificate type. Options: CA: CA certificate; Server: server certificate
- Created
Time string - Certificate creation time
- Description string
- Certificate description
- Domain
Name string - Certificate domain name
- Expired
At string - Certificate expiration time
- Listeners []string
- List of listeners associated with the certificate
- Private
Key string - Server certificate private key. Required when certificate type is Server
- Project
Name string - Project name
- Public
Key string - Server certificate public key
- San string
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- Status string
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
-
[]Certificate
Tag Args
- certificate
Id String - Certificate ID
- certificate
Name String - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- certificate
Type String - Certificate type. Options: CA: CA certificate; Server: server certificate
- created
Time String - Certificate creation time
- description String
- Certificate description
- domain
Name String - Certificate domain name
- expired
At String - Certificate expiration time
- listeners List<String>
- List of listeners associated with the certificate
- private
Key String - Server certificate private key. Required when certificate type is Server
- project
Name String - Project name
- public
Key String - Server certificate public key
- san String
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- status String
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
-
List<Certificate
Tag>
- certificate
Id string - Certificate ID
- certificate
Name string - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- certificate
Type string - Certificate type. Options: CA: CA certificate; Server: server certificate
- created
Time string - Certificate creation time
- description string
- Certificate description
- domain
Name string - Certificate domain name
- expired
At string - Certificate expiration time
- listeners string[]
- List of listeners associated with the certificate
- private
Key string - Server certificate private key. Required when certificate type is Server
- project
Name string - Project name
- public
Key string - Server certificate public key
- san string
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- status string
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
-
Certificate
Tag[]
- certificate_
id str - Certificate ID
- certificate_
name str - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- certificate_
type str - Certificate type. Options: CA: CA certificate; Server: server certificate
- created_
time str - Certificate creation time
- description str
- Certificate description
- domain_
name str - Certificate domain name
- expired_
at str - Certificate expiration time
- listeners Sequence[str]
- List of listeners associated with the certificate
- private_
key str - Server certificate private key. Required when certificate type is Server
- project_
name str - Project name
- public_
key str - Server certificate public key
- san str
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- status str
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
-
Sequence[Certificate
Tag Args]
- certificate
Id String - Certificate ID
- certificate
Name String - Certificate name. Length must be between 1 and 128 characters, start with a letter or Chinese character, and may include numbers, periods (.), underscores (_), and hyphens (-)
- certificate
Type String - Certificate type. Options: CA: CA certificate; Server: server certificate
- created
Time String - Certificate creation time
- description String
- Certificate description
- domain
Name String - Certificate domain name
- expired
At String - Certificate expiration time
- listeners List<String>
- List of listeners associated with the certificate
- private
Key String - Server certificate private key. Required when certificate type is Server
- project
Name String - Project name
- public
Key String - Server certificate public key
- san String
- Certificate subject alternative name list. Use English ',' to separate multiple domain names. Includes (commonName, DnsName, IP)
- status String
- Certificate status. Options: Creating: creating; Active: active; Deleting: deleting
- List<Property Map>
Supporting Types
CertificateTag, CertificateTagArgs
Import
$ pulumi import volcenginecc:alb/certificate:Certificate example "certificate_id|certificate_type"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- volcenginecc volcengine/pulumi-volcenginecc
- License
- MPL-2.0
- Notes
- This Pulumi package is based on the
volcengineccTerraform Provider.
published on Thursday, Apr 23, 2026 by Volcengine
