CertificateManagerCertificate

description

Optional

string

A human-readable description of the resource.

location

Required

string

Immutable. The Certificate Manager location. If not specified, "global" is used.

managed

Optional

object

Immutable. Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.

managed.authorizationAttemptInfo

Optional

list (object)

Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.

managed.authorizationAttemptInfo[]

Optional

object

managed.authorizationAttemptInfo[].details

Optional

string

Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.

managed.authorizationAttemptInfo[].domain

Optional

string

Domain name of the authorization attempt.

managed.authorizationAttemptInfo[].failureReason

Optional

string

Reason for failure of the authorization attempt for the domain.

managed.authorizationAttemptInfo[].state

Optional

string

State of the domain for managed certificate issuance.

managed.dnsAuthorizationsRefs

Optional

list (object)

managed.dnsAuthorizationsRefs[]

Optional

object

Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specified, but not both.

managed.dnsAuthorizationsRefs[].external

Optional

string

Allowed value: string of the format `projects/{{project}}/locations/global/dnsAuthorizations/{{value}}`, where {{value}} is the `name` field of a `CertificateManagerDNSAuthorization` resource.

managed.dnsAuthorizationsRefs[].name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

managed.dnsAuthorizationsRefs[].namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

managed.domains

Optional

list (string)

Immutable. The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution.

managed.domains[]

Optional

string

managed.issuanceConfigRef

Optional

object

Only the `external` field is supported to configure the reference. Immutable. The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects/*/locations/*/certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specified, but not both.

managed.issuanceConfigRef.external

Optional

string

Allowed value: string of the format `projects/{{project}}/locations/{{location}}/certificateIssuanceConfigs/{{name}}`, where {{value}} is the `name` field of a `CertificateManagerCertificateIssuanceConfig` resource.

managed.issuanceConfigRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

managed.issuanceConfigRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

managed.provisioningIssue

Optional

list (object)

Information about issues with provisioning this Managed Certificate.

managed.provisioningIssue[]

Optional

object

managed.provisioningIssue[].details

Optional

string

Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.

managed.provisioningIssue[].reason

Optional

string

Reason for provisioning failures.

managed.state

Optional

string

A state of this Managed Certificate.

projectRef

Required

object

The project that this resource belongs to.

projectRef.external

Optional

string

Allowed value: The `name` field of a `Project` resource.

projectRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

projectRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

resourceID

Optional

string

Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default.

scope

Optional

string

Immutable. The scope of the certificate. DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option. EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from non-core Google data centers. ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). see https://cloud.google.com/compute/docs/regions-zones.

selfManaged

Optional

object

Immutable. Certificate data for a SelfManaged Certificate. SelfManaged Certificates are uploaded by the user. Updating such certificates before they expire remains the user's responsibility.

selfManaged.certificatePem

Optional

object

DEPRECATED. `certificate_pem` is deprecated. Use `pem_certificate` instead. Immutable. The certificate chain in PEM-encoded form. Leaf certificate comes first, followed by intermediate ones if any.

selfManaged.certificatePem.value

Optional

string

Value of the field. Cannot be used if 'valueFrom' is specified.

selfManaged.certificatePem.valueFrom

Optional

object

Source for the field's value. Cannot be used if 'value' is specified.

selfManaged.certificatePem.valueFrom.secretKeyRef

Optional

object

Reference to a value with the given key in the given Secret in the resource's namespace.

selfManaged.certificatePem.valueFrom.secretKeyRef.key

Required*

string

Key that identifies the value to be extracted.

selfManaged.certificatePem.valueFrom.secretKeyRef.name

Required*

string

Name of the Secret to extract a value from.

selfManaged.pemCertificate

Optional

string

Immutable. The certificate chain in PEM-encoded form. Leaf certificate comes first, followed by intermediate ones if any.

selfManaged.pemPrivateKey

Optional

object

Immutable. The private key of the leaf certificate in PEM-encoded form.

selfManaged.pemPrivateKey.value

Optional

string

Value of the field. Cannot be used if 'valueFrom' is specified.

selfManaged.pemPrivateKey.valueFrom

Optional

object

Source for the field's value. Cannot be used if 'value' is specified.

selfManaged.pemPrivateKey.valueFrom.secretKeyRef

Optional

object

Reference to a value with the given key in the given Secret in the resource's namespace.

selfManaged.pemPrivateKey.valueFrom.secretKeyRef.key

Required*

string

Key that identifies the value to be extracted.

selfManaged.pemPrivateKey.valueFrom.secretKeyRef.name

Required*

string

Name of the Secret to extract a value from.

selfManaged.privateKeyPem

Optional

object

DEPRECATED. `private_key_pem` is deprecated. Use `pem_private_key` instead. Immutable. The private key of the leaf certificate in PEM-encoded form.

selfManaged.privateKeyPem.value

Optional

string

Value of the field. Cannot be used if 'valueFrom' is specified.

selfManaged.privateKeyPem.valueFrom

Optional

object

Source for the field's value. Cannot be used if 'value' is specified.

selfManaged.privateKeyPem.valueFrom.secretKeyRef

Optional

object

Reference to a value with the given key in the given Secret in the resource's namespace.

selfManaged.privateKeyPem.valueFrom.secretKeyRef.key

Required*

string

Key that identifies the value to be extracted.

selfManaged.privateKeyPem.valueFrom.secretKeyRef.name

Required*

string

Name of the Secret to extract a value from.

list (object)

Conditions represent the latest available observation of the resource's current state.

object

string

Last time the condition transitioned from one status to another.

string

Human-readable message indicating details about last transition.

string

Unique, one-word, CamelCase reason for the condition's last transition.

string

Status is the status of the condition. Can be True, False, Unknown.

string

Type is the type of the condition.

integer

ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource.