trust_configs

Creates, updates, deletes, gets or lists a trust_configs resource.

Overview

Name	trust_configs
Type	Resource
Id	google.certificatemanager.trust_configs

Fields

Name	Datatype	Description
name	string	Identifier. A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern projects/*/locations/*/trustConfigs/*.
description	string	Optional. One or more paragraphs of text description of a TrustConfig.
allowlistedCertificates	array	Optional. A certificate matching an allowlisted certificate is always considered valid as long as the certificate is parseable, proof of private key possession is established, and constraints on the certificate's SAN field are met.
createTime	string	Output only. The creation timestamp of a TrustConfig.
etag	string	This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
labels	object	Optional. Set of labels associated with a TrustConfig.
trustStores	array	Optional. Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.
updateTime	string	Output only. The last update timestamp of a TrustConfig.

Methods

Name	Accessible by	Required Params	Description
get	SELECT	locationsId, projectsId, trustConfigsId	Gets details of a single TrustConfig.
list	SELECT	locationsId, projectsId	Lists TrustConfigs in a given project and location.
create	INSERT	locationsId, projectsId	Creates a new TrustConfig in a given project and location.
delete	DELETE	locationsId, projectsId, trustConfigsId	Deletes a single TrustConfig.
patch	UPDATE	locationsId, projectsId, trustConfigsId	Updates a TrustConfig.

SELECT examples

Lists TrustConfigs in a given project and location.

SELECT
name,
description,
allowlistedCertificates,
createTime,
etag,
labels,
trustStores,
updateTime
FROM google.certificatemanager.trust_configs
WHERE locationsId = '{{ locationsId }}'
AND projectsId = '{{ projectsId }}';

INSERT example

Use the following StackQL query and manifest file to create a new trust_configs resource.

All Properties

/*+ create */
INSERT INTO google.certificatemanager.trust_configs (
locationsId,
projectsId,
name,
labels,
description,
etag,
trustStores,
allowlistedCertificates
)
SELECT 
'{{ locationsId }}',
'{{ projectsId }}',
'{{ name }}',
'{{ labels }}',
'{{ description }}',
'{{ etag }}',
'{{ trustStores }}',
'{{ allowlistedCertificates }}'
;

Manifest

- name: your_resource_model_name
  props:
    - name: name
      value: string
    - name: createTime
      value: string
    - name: updateTime
      value: string
    - name: labels
      value: object
    - name: description
      value: string
    - name: etag
      value: string
    - name: trustStores
      value:
        - - name: trustAnchors
            value:
              - - name: pemCertificate
                  value: string
          - name: intermediateCas
            value:
              - - name: pemCertificate
                  value: string
    - name: allowlistedCertificates
      value:
        - - name: pemCertificate
            value: string

UPDATE example

Updates a trust_configs resource.

/*+ update */
UPDATE google.certificatemanager.trust_configs
SET 
name = '{{ name }}',
labels = '{{ labels }}',
description = '{{ description }}',
etag = '{{ etag }}',
trustStores = '{{ trustStores }}',
allowlistedCertificates = '{{ allowlistedCertificates }}'
WHERE 
locationsId = '{{ locationsId }}'
AND projectsId = '{{ projectsId }}'
AND trustConfigsId = '{{ trustConfigsId }}';

DELETE example

Deletes the specified trust_configs resource.

/*+ delete */
DELETE FROM google.certificatemanager.trust_configs
WHERE locationsId = '{{ locationsId }}'
AND projectsId = '{{ projectsId }}'
AND trustConfigsId = '{{ trustConfigsId }}';