Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions privateca/capool_all_fields/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@ resource "google_privateca_ca_pool" "default" {
name = "ca-pool-all-fields"
location = "us-central1"
tier = "ENTERPRISE"

publishing_options {
publish_ca_cert = false
publish_crl = true
Expand Down
1 change: 1 addition & 0 deletions privateca/capool_basic/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@ resource "google_privateca_ca_pool" "default" {
name = "ca-pool"
location = "us-central1"
tier = "ENTERPRISE"

publishing_options {
publish_ca_cert = true
publish_crl = true
Expand Down
1 change: 1 addition & 0 deletions privateca/certificate_authority_basic/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@ resource "google_privateca_certificate_authority" "default" {
certificate_authority_id = "my-certificate-authority-hashicorp"
location = "us-central1"
deletion_protection = false # set to true to prevent destruction of the resource

config {
subject_config {
subject {
Expand Down
1 change: 1 addition & 0 deletions privateca/certificate_authority_byo_key/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,7 @@ resource "google_kms_crypto_key_iam_binding" "privateca_sa_keyuser_signerverifie
resource "google_kms_crypto_key_iam_binding" "privateca_sa_keyuser_viewer" {
crypto_key_id = "projects/keys-project/locations/us-central1/keyRings/key-ring/cryptoKeys/crypto-key"
role = "roles/viewer"

members = [
"serviceAccount:${google_project_service_identity.privateca_sa.email}",
]
Expand Down
1 change: 1 addition & 0 deletions privateca/certificate_authority_subordinate/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ resource "google_privateca_certificate_authority" "root_ca" {
location = "us-central1"
deletion_protection = false # set to true to prevent destruction of the resource
ignore_active_certificates_on_deletion = true

config {
subject_config {
subject {
Expand Down
1 change: 1 addition & 0 deletions privateca/certificate_config/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ resource "google_privateca_certificate_authority" "test_ca" {
pool = "my-pool"
ignore_active_certificates_on_deletion = true
deletion_protection = false # set to true to prevent destruction of the resource

config {
subject_config {
subject {
Expand Down
1 change: 1 addition & 0 deletions privateca/certificate_csr/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ resource "google_privateca_certificate_authority" "test_ca" {
certificate_authority_id = "my-certificate-authority"
location = "us-central1"
deletion_protection = false # set to true to prevent destruction of the resource

config {
subject_config {
subject {
Expand Down
2 changes: 2 additions & 0 deletions privateca/certificate_no_authority/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@ resource "google_privateca_certificate_authority" "authority" {
certificate_authority_id = "my-sample-certificate-authority"
location = "us-central1"
deletion_protection = false # set to true to prevent destruction of the resource

config {
subject_config {
subject {
Expand Down Expand Up @@ -60,6 +61,7 @@ resource "google_privateca_certificate" "default" {
location = "us-central1"
lifetime = "860s"
name = "my-sample-certificate"

config {
subject_config {
subject {
Expand Down
1 change: 1 addition & 0 deletions privateca/certificate_with_template/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,7 @@ resource "google_privateca_certificate_authority" "test_ca" {
certificate_authority_id = "my-certificate-authority-test-ca"
location = "us-central1"
deletion_protection = false # set to true to prevent destruction of the resource

config {
subject_config {
subject {
Expand Down
3 changes: 3 additions & 0 deletions privateca/quickstart/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -40,13 +40,15 @@ resource "google_privateca_ca_pool" "default" {
name = "my-ca-pool"
location = "us-central1"
tier = "ENTERPRISE"

publishing_options {
publish_ca_cert = true
publish_crl = true
}
labels = {
foo = "bar"
}

issuance_policy {
baseline_values {
ca_options {
Expand All @@ -69,6 +71,7 @@ resource "google_privateca_certificate_authority" "test_ca" {
certificate_authority_id = "my-authority"
location = "us-central1"
pool = google_privateca_ca_pool.default.name

config {
subject_config {
subject {
Expand Down