Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. certificatemanager
  5. getCertificates
Google Cloud v8.27.0 published on Thursday, Apr 17, 2025 by Pulumi
pulumi/pulumi-gcp

gcp.certificatemanager.getCertificates

Explore with Pulumi AI

gcp logo
Google Cloud v8.27.0 published on Thursday, Apr 17, 2025 by Pulumi
pulumi/pulumi-gcp

    List all certificates within Google Certificate Manager for a given project, region or filter.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const _default = gcp.certificatemanager.getCertificates({});

    import pulumi
import pulumi_gcp as gcp

default = gcp.certificatemanager.get_certificates()

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificatemanager.GetCertificates(ctx, &certificatemanager.GetCertificatesArgs{}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var @default = Gcp.CertificateManager.GetCertificates.Invoke();

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;
import com.pulumi.gcp.certificatemanager.inputs.GetCertificatesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var default = CertificatemanagerFunctions.getCertificates(GetCertificatesArgs.builder()
            .build());

    }
}

    variables:
  default:
    fn::invoke:
      function: gcp:certificatemanager:getCertificates
      arguments: {}

    With A Filter

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const _default = gcp.certificatemanager.getCertificates({
    filter: "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
});

    import pulumi
import pulumi_gcp as gcp

default = gcp.certificatemanager.get_certificates(filter="name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*")

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificatemanager.GetCertificates(ctx, &certificatemanager.GetCertificatesArgs{
			Filter: pulumi.StringRef("name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var @default = Gcp.CertificateManager.GetCertificates.Invoke(new()
    {
        Filter = "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;
import com.pulumi.gcp.certificatemanager.inputs.GetCertificatesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var default = CertificatemanagerFunctions.getCertificates(GetCertificatesArgs.builder()
            .filter("name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*")
            .build());

    }
}

    variables:
  default:
    fn::invoke:
      function: gcp:certificatemanager:getCertificates
      arguments:
        filter: name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*

    Using getCertificates

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCertificates(args: GetCertificatesArgs, opts?: InvokeOptions): Promise<GetCertificatesResult>
function getCertificatesOutput(args: GetCertificatesOutputArgs, opts?: InvokeOptions): Output<GetCertificatesResult>
    def get_certificates(filter: Optional[str] = None,
                     region: Optional[str] = None,
                     opts: Optional[InvokeOptions] = None) -> GetCertificatesResult
def get_certificates_output(filter: Optional[pulumi.Input[str]] = None,
                     region: Optional[pulumi.Input[str]] = None,
                     opts: Optional[InvokeOptions] = None) -> Output[GetCertificatesResult]
    func GetCertificates(ctx *Context, args *GetCertificatesArgs, opts ...InvokeOption) (*GetCertificatesResult, error)
func GetCertificatesOutput(ctx *Context, args *GetCertificatesOutputArgs, opts ...InvokeOption) GetCertificatesResultOutput

    > Note: This function is named GetCertificates in the Go SDK.

    public static class GetCertificates 
{
    public static Task<GetCertificatesResult> InvokeAsync(GetCertificatesArgs args, InvokeOptions? opts = null)
    public static Output<GetCertificatesResult> Invoke(GetCertificatesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetCertificatesResult> getCertificates(GetCertificatesArgs args, InvokeOptions options)
public static Output<GetCertificatesResult> getCertificates(GetCertificatesArgs args, InvokeOptions options)

    fn::invoke:
  function: gcp:certificatemanager/getCertificates:getCertificates
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Filter string
    Filter expression to restrict the certificates returned.
    Region string
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    Filter string
    Filter expression to restrict the certificates returned.
    Region string
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    filter String
    Filter expression to restrict the certificates returned.
    region String
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    filter string
    Filter expression to restrict the certificates returned.
    region string
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    filter str
    Filter expression to restrict the certificates returned.
    region str
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    filter String
    Filter expression to restrict the certificates returned.
    region String
    The region in which the resource belongs. If it is not provided, GLOBAL is used.

    getCertificates Result

    The following output properties are available:

    Certificates List<GetCertificatesCertificate>
    Id string
    The provider-assigned unique ID for this managed resource.
    Filter string
    Region string
    Certificates []GetCertificatesCertificate
    Id string
    The provider-assigned unique ID for this managed resource.
    Filter string
    Region string
    certificates List<GetCertificatesCertificate>
    id String
    The provider-assigned unique ID for this managed resource.
    filter String
    region String
    certificates GetCertificatesCertificate[]
    id string
    The provider-assigned unique ID for this managed resource.
    filter string
    region string
    certificates Sequence[GetCertificatesCertificate]
    id str
    The provider-assigned unique ID for this managed resource.
    filter str
    region str
    certificates List<Property Map>
    id String
    The provider-assigned unique ID for this managed resource.
    filter String
    region String

    Supporting Types

    GetCertificatesCertificate

    Description string
    A human-readable description of the resource.
    EffectiveLabels Dictionary<string, string>
    Labels Dictionary<string, string>

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    Location string
    The Certificate Manager location. If not specified, "global" is used.
    Manageds List<GetCertificatesCertificateManaged>
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    Name string
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    SanDnsnames List<string>
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    Scope string

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    Description string
    A human-readable description of the resource.
    EffectiveLabels map[string]string
    Labels map[string]string

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    Location string
    The Certificate Manager location. If not specified, "global" is used.
    Manageds []GetCertificatesCertificateManaged
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    Name string
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    SanDnsnames []string
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    Scope string

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    description String
    A human-readable description of the resource.
    effectiveLabels Map<String,String>
    labels Map<String,String>

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    location String
    The Certificate Manager location. If not specified, "global" is used.
    manageds List<GetCertificatesCertificateManaged>
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    name String
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    sanDnsnames List<String>
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    scope String

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    description string
    A human-readable description of the resource.
    effectiveLabels {[key: string]: string}
    labels {[key: string]: string}

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    location string
    The Certificate Manager location. If not specified, "global" is used.
    manageds GetCertificatesCertificateManaged[]
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    name string
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    sanDnsnames string[]
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    scope string

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    description str
    A human-readable description of the resource.
    effective_labels Mapping[str, str]
    labels Mapping[str, str]

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    location str
    The Certificate Manager location. If not specified, "global" is used.
    manageds Sequence[GetCertificatesCertificateManaged]
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    name str
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    san_dnsnames Sequence[str]
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    scope str

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    description String
    A human-readable description of the resource.
    effectiveLabels Map<String>
    labels Map<String>

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    location String
    The Certificate Manager location. If not specified, "global" is used.
    manageds List<Property Map>
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    name String
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    sanDnsnames List<String>
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    scope String

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    GetCertificatesCertificateManaged

    AuthorizationAttemptInfos List<GetCertificatesCertificateManagedAuthorizationAttemptInfo>
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    DnsAuthorizations List<string>
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    Domains List<string>
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    IssuanceConfig string
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    ProvisioningIssues List<GetCertificatesCertificateManagedProvisioningIssue>
    Information about issues with provisioning this Managed Certificate.
    State string
    A state of this Managed Certificate.
    AuthorizationAttemptInfos []GetCertificatesCertificateManagedAuthorizationAttemptInfo
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    DnsAuthorizations []string
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    Domains []string
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    IssuanceConfig string
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    ProvisioningIssues []GetCertificatesCertificateManagedProvisioningIssue
    Information about issues with provisioning this Managed Certificate.
    State string
    A state of this Managed Certificate.
    authorizationAttemptInfos List<GetCertificatesCertificateManagedAuthorizationAttemptInfo>
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    dnsAuthorizations List<String>
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    domains List<String>
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    issuanceConfig String
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    provisioningIssues List<GetCertificatesCertificateManagedProvisioningIssue>
    Information about issues with provisioning this Managed Certificate.
    state String
    A state of this Managed Certificate.
    authorizationAttemptInfos GetCertificatesCertificateManagedAuthorizationAttemptInfo[]
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    dnsAuthorizations string[]
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    domains string[]
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    issuanceConfig string
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    provisioningIssues GetCertificatesCertificateManagedProvisioningIssue[]
    Information about issues with provisioning this Managed Certificate.
    state string
    A state of this Managed Certificate.
    authorization_attempt_infos Sequence[GetCertificatesCertificateManagedAuthorizationAttemptInfo]
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    dns_authorizations Sequence[str]
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    domains Sequence[str]
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    issuance_config str
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    provisioning_issues Sequence[GetCertificatesCertificateManagedProvisioningIssue]
    Information about issues with provisioning this Managed Certificate.
    state str
    A state of this Managed Certificate.
    authorizationAttemptInfos List<Property Map>
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    dnsAuthorizations List<String>
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    domains List<String>
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    issuanceConfig String
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    provisioningIssues List<Property Map>
    Information about issues with provisioning this Managed Certificate.
    state String
    A state of this Managed Certificate.

    GetCertificatesCertificateManagedAuthorizationAttemptInfo

    Details string
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    Domain string
    Domain name of the authorization attempt.
    FailureReason string
    Reason for failure of the authorization attempt for the domain.
    State string
    State of the domain for managed certificate issuance.
    Details string
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    Domain string
    Domain name of the authorization attempt.
    FailureReason string
    Reason for failure of the authorization attempt for the domain.
    State string
    State of the domain for managed certificate issuance.
    details String
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    domain String
    Domain name of the authorization attempt.
    failureReason String
    Reason for failure of the authorization attempt for the domain.
    state String
    State of the domain for managed certificate issuance.
    details string
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    domain string
    Domain name of the authorization attempt.
    failureReason string
    Reason for failure of the authorization attempt for the domain.
    state string
    State of the domain for managed certificate issuance.
    details str
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    domain str
    Domain name of the authorization attempt.
    failure_reason str
    Reason for failure of the authorization attempt for the domain.
    state str
    State of the domain for managed certificate issuance.
    details String
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    domain String
    Domain name of the authorization attempt.
    failureReason String
    Reason for failure of the authorization attempt for the domain.
    state String
    State of the domain for managed certificate issuance.

    GetCertificatesCertificateManagedProvisioningIssue

    Details string
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    Reason string
    Reason for provisioning failures.
    Details string
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    Reason string
    Reason for provisioning failures.
    details String
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    reason String
    Reason for provisioning failures.
    details string
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    reason string
    Reason for provisioning failures.
    details str
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    reason str
    Reason for provisioning failures.
    details String
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    reason String
    Reason for provisioning failures.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud v8.27.0 published on Thursday, Apr 17, 2025 by Pulumi
    pulumi/pulumi-gcp