diff --git a/privateca/capool_all_fields/main.tf b/privateca/capool_all_fields/main.tf index 6503f3df2..258d617cd 100644 --- a/privateca/capool_all_fields/main.tf +++ b/privateca/capool_all_fields/main.tf @@ -19,6 +19,7 @@ resource "google_privateca_ca_pool" "default" { name = "ca-pool-all-fields" location = "us-central1" tier = "ENTERPRISE" + publishing_options { publish_ca_cert = false publish_crl = true diff --git a/privateca/capool_basic/main.tf b/privateca/capool_basic/main.tf index 34e32dbb3..27270c9b5 100644 --- a/privateca/capool_basic/main.tf +++ b/privateca/capool_basic/main.tf @@ -19,6 +19,7 @@ resource "google_privateca_ca_pool" "default" { name = "ca-pool" location = "us-central1" tier = "ENTERPRISE" + publishing_options { publish_ca_cert = true publish_crl = true diff --git a/privateca/certificate_authority_basic/main.tf b/privateca/certificate_authority_basic/main.tf index b362546d1..fa0de5061 100644 --- a/privateca/certificate_authority_basic/main.tf +++ b/privateca/certificate_authority_basic/main.tf @@ -22,6 +22,7 @@ resource "google_privateca_certificate_authority" "default" { certificate_authority_id = "my-certificate-authority-hashicorp" location = "us-central1" deletion_protection = false # set to true to prevent destruction of the resource + config { subject_config { subject { diff --git a/privateca/certificate_authority_byo_key/main.tf b/privateca/certificate_authority_byo_key/main.tf index 7ae287193..9e80dd736 100644 --- a/privateca/certificate_authority_byo_key/main.tf +++ b/privateca/certificate_authority_byo_key/main.tf @@ -32,6 +32,7 @@ resource "google_kms_crypto_key_iam_binding" "privateca_sa_keyuser_signerverifie resource "google_kms_crypto_key_iam_binding" "privateca_sa_keyuser_viewer" { crypto_key_id = "projects/keys-project/locations/us-central1/keyRings/key-ring/cryptoKeys/crypto-key" role = "roles/viewer" + members = [ "serviceAccount:${google_project_service_identity.privateca_sa.email}", ] diff --git a/privateca/certificate_authority_subordinate/main.tf b/privateca/certificate_authority_subordinate/main.tf index b15bbdd6e..ba6e092cf 100644 --- a/privateca/certificate_authority_subordinate/main.tf +++ b/privateca/certificate_authority_subordinate/main.tf @@ -21,6 +21,7 @@ resource "google_privateca_certificate_authority" "root_ca" { location = "us-central1" deletion_protection = false # set to true to prevent destruction of the resource ignore_active_certificates_on_deletion = true + config { subject_config { subject { diff --git a/privateca/certificate_config/main.tf b/privateca/certificate_config/main.tf index 5da9698c3..a6db67023 100644 --- a/privateca/certificate_config/main.tf +++ b/privateca/certificate_config/main.tf @@ -21,6 +21,7 @@ resource "google_privateca_certificate_authority" "test_ca" { pool = "my-pool" ignore_active_certificates_on_deletion = true deletion_protection = false # set to true to prevent destruction of the resource + config { subject_config { subject { diff --git a/privateca/certificate_csr/main.tf b/privateca/certificate_csr/main.tf index f55f63218..8c475a5d6 100644 --- a/privateca/certificate_csr/main.tf +++ b/privateca/certificate_csr/main.tf @@ -20,6 +20,7 @@ resource "google_privateca_certificate_authority" "test_ca" { certificate_authority_id = "my-certificate-authority" location = "us-central1" deletion_protection = false # set to true to prevent destruction of the resource + config { subject_config { subject { diff --git a/privateca/certificate_no_authority/main.tf b/privateca/certificate_no_authority/main.tf index f6aa9d12b..679959b53 100644 --- a/privateca/certificate_no_authority/main.tf +++ b/privateca/certificate_no_authority/main.tf @@ -22,6 +22,7 @@ resource "google_privateca_certificate_authority" "authority" { certificate_authority_id = "my-sample-certificate-authority" location = "us-central1" deletion_protection = false # set to true to prevent destruction of the resource + config { subject_config { subject { @@ -60,6 +61,7 @@ resource "google_privateca_certificate" "default" { location = "us-central1" lifetime = "860s" name = "my-sample-certificate" + config { subject_config { subject { diff --git a/privateca/certificate_with_template/main.tf b/privateca/certificate_with_template/main.tf index 2fc69ba1a..424ce37f9 100644 --- a/privateca/certificate_with_template/main.tf +++ b/privateca/certificate_with_template/main.tf @@ -95,6 +95,7 @@ resource "google_privateca_certificate_authority" "test_ca" { certificate_authority_id = "my-certificate-authority-test-ca" location = "us-central1" deletion_protection = false # set to true to prevent destruction of the resource + config { subject_config { subject { diff --git a/privateca/quickstart/main.tf b/privateca/quickstart/main.tf index 12116d99e..4df3a1467 100644 --- a/privateca/quickstart/main.tf +++ b/privateca/quickstart/main.tf @@ -40,6 +40,7 @@ resource "google_privateca_ca_pool" "default" { name = "my-ca-pool" location = "us-central1" tier = "ENTERPRISE" + publishing_options { publish_ca_cert = true publish_crl = true @@ -47,6 +48,7 @@ resource "google_privateca_ca_pool" "default" { labels = { foo = "bar" } + issuance_policy { baseline_values { ca_options { @@ -69,6 +71,7 @@ resource "google_privateca_certificate_authority" "test_ca" { certificate_authority_id = "my-authority" location = "us-central1" pool = google_privateca_ca_pool.default.name + config { subject_config { subject {