workload_identity_pool_provider_keys

Creates, updates, deletes, gets or lists a workload_identity_pool_provider_keys resource.

Overview

Name	workload_identity_pool_provider_keys
Type	Resource
Id	google.iam.workload_identity_pool_provider_keys

Fields

Name	Datatype	Description
name	string	Output only. The resource name of the key.
expireTime	string	Output only. Time after which the key will be permanently purged and cannot be recovered. Note that the key may get purged before this timestamp if the total limit of keys per provider is crossed.
keyData	object	Represents a public key data along with its format.
state	string	Output only. The state of the key.
use	string	Required. The purpose of the key.

Methods

Name	Accessible by	Required Params	Description
get	SELECT	keysId, locationsId, projectsId, providersId, workloadIdentityPoolsId	Gets an individual WorkloadIdentityPoolProviderKey.
list	SELECT	locationsId, projectsId, providersId, workloadIdentityPoolsId	Lists all non-deleted WorkloadIdentityPoolProviderKeys in a project. If show_deleted is set to true, then deleted pools are also listed.
create	INSERT	locationsId, projectsId, providersId, workloadIdentityPoolsId	Create a new WorkloadIdentityPoolProviderKey in a WorkloadIdentityPoolProvider.
delete	DELETE	keysId, locationsId, projectsId, providersId, workloadIdentityPoolsId	Deletes an WorkloadIdentityPoolProviderKey. You can undelete a key for 30 days. After 30 days, deletion is permanent.
undelete	EXEC	keysId, locationsId, projectsId, providersId, workloadIdentityPoolsId	Undeletes an WorkloadIdentityPoolProviderKey, as long as it was deleted fewer than 30 days ago.

SELECT examples

Lists all non-deleted WorkloadIdentityPoolProviderKeys in a project. If show_deleted is set to true, then deleted pools are also listed.

SELECT
name,
expireTime,
keyData,
state,
use
FROM google.iam.workload_identity_pool_provider_keys
WHERE locationsId = '{{ locationsId }}'
AND projectsId = '{{ projectsId }}'
AND providersId = '{{ providersId }}'
AND workloadIdentityPoolsId = '{{ workloadIdentityPoolsId }}';

INSERT example

Use the following StackQL query and manifest file to create a new workload_identity_pool_provider_keys resource.

All Properties

/*+ create */
INSERT INTO google.iam.workload_identity_pool_provider_keys (
locationsId,
projectsId,
providersId,
workloadIdentityPoolsId,
keyData,
use
)
SELECT 
'{{ locationsId }}',
'{{ projectsId }}',
'{{ providersId }}',
'{{ workloadIdentityPoolsId }}',
'{{ keyData }}',
'{{ use }}'
;

Manifest

- name: your_resource_model_name
  props:
    - name: name
      value: string
    - name: keyData
      value:
        - name: format
          value: string
        - name: notBeforeTime
          value: string
        - name: notAfterTime
          value: string
        - name: key
          value: string
        - name: keySpec
          value: string
    - name: state
      value: string
    - name: use
      value: string
    - name: expireTime
      value: string

DELETE example

Deletes the specified workload_identity_pool_provider_keys resource.

/*+ delete */
DELETE FROM google.iam.workload_identity_pool_provider_keys
WHERE keysId = '{{ keysId }}'
AND locationsId = '{{ locationsId }}'
AND projectsId = '{{ projectsId }}'
AND providersId = '{{ providersId }}'
AND workloadIdentityPoolsId = '{{ workloadIdentityPoolsId }}';