1. Packages
  2. Google Cloud Native
  3. API Docs
  4. networksecurity
  5. networksecurity/v1
  6. getClientTlsPolicy

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

google-native.networksecurity/v1.getClientTlsPolicy

Explore with Pulumi AI

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

Gets details of a single ClientTlsPolicy.

Using getClientTlsPolicy

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getClientTlsPolicy(args: GetClientTlsPolicyArgs, opts?: InvokeOptions): Promise<GetClientTlsPolicyResult>
function getClientTlsPolicyOutput(args: GetClientTlsPolicyOutputArgs, opts?: InvokeOptions): Output<GetClientTlsPolicyResult>
Copy
def get_client_tls_policy(client_tls_policy_id: Optional[str] = None,
                          location: Optional[str] = None,
                          project: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetClientTlsPolicyResult
def get_client_tls_policy_output(client_tls_policy_id: Optional[pulumi.Input[str]] = None,
                          location: Optional[pulumi.Input[str]] = None,
                          project: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetClientTlsPolicyResult]
Copy
func LookupClientTlsPolicy(ctx *Context, args *LookupClientTlsPolicyArgs, opts ...InvokeOption) (*LookupClientTlsPolicyResult, error)
func LookupClientTlsPolicyOutput(ctx *Context, args *LookupClientTlsPolicyOutputArgs, opts ...InvokeOption) LookupClientTlsPolicyResultOutput
Copy

> Note: This function is named LookupClientTlsPolicy in the Go SDK.

public static class GetClientTlsPolicy 
{
    public static Task<GetClientTlsPolicyResult> InvokeAsync(GetClientTlsPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetClientTlsPolicyResult> Invoke(GetClientTlsPolicyInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetClientTlsPolicyResult> getClientTlsPolicy(GetClientTlsPolicyArgs args, InvokeOptions options)
public static Output<GetClientTlsPolicyResult> getClientTlsPolicy(GetClientTlsPolicyArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: google-native:networksecurity/v1:getClientTlsPolicy
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

ClientTlsPolicyId This property is required. string
Location This property is required. string
Project string
ClientTlsPolicyId This property is required. string
Location This property is required. string
Project string
clientTlsPolicyId This property is required. String
location This property is required. String
project String
clientTlsPolicyId This property is required. string
location This property is required. string
project string
client_tls_policy_id This property is required. str
location This property is required. str
project str
clientTlsPolicyId This property is required. String
location This property is required. String
project String

getClientTlsPolicy Result

The following output properties are available:

ClientCertificate Pulumi.GoogleNative.NetworkSecurity.V1.Outputs.GoogleCloudNetworksecurityV1CertificateProviderResponse
Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
CreateTime string
The timestamp when the resource was created.
Description string
Optional. Free-text description of the resource.
Labels Dictionary<string, string>
Optional. Set of label tags associated with the resource.
Name string
Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
ServerValidationCa List<Pulumi.GoogleNative.NetworkSecurity.V1.Outputs.ValidationCAResponse>
Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
Sni string
Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
UpdateTime string
The timestamp when the resource was updated.
ClientCertificate GoogleCloudNetworksecurityV1CertificateProviderResponse
Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
CreateTime string
The timestamp when the resource was created.
Description string
Optional. Free-text description of the resource.
Labels map[string]string
Optional. Set of label tags associated with the resource.
Name string
Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
ServerValidationCa []ValidationCAResponse
Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
Sni string
Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
UpdateTime string
The timestamp when the resource was updated.
clientCertificate GoogleCloudNetworksecurityV1CertificateProviderResponse
Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
createTime String
The timestamp when the resource was created.
description String
Optional. Free-text description of the resource.
labels Map<String,String>
Optional. Set of label tags associated with the resource.
name String
Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
serverValidationCa List<ValidationCAResponse>
Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
sni String
Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
updateTime String
The timestamp when the resource was updated.
clientCertificate GoogleCloudNetworksecurityV1CertificateProviderResponse
Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
createTime string
The timestamp when the resource was created.
description string
Optional. Free-text description of the resource.
labels {[key: string]: string}
Optional. Set of label tags associated with the resource.
name string
Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
serverValidationCa ValidationCAResponse[]
Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
sni string
Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
updateTime string
The timestamp when the resource was updated.
client_certificate GoogleCloudNetworksecurityV1CertificateProviderResponse
Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
create_time str
The timestamp when the resource was created.
description str
Optional. Free-text description of the resource.
labels Mapping[str, str]
Optional. Set of label tags associated with the resource.
name str
Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
server_validation_ca Sequence[ValidationCAResponse]
Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
sni str
Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
update_time str
The timestamp when the resource was updated.
clientCertificate Property Map
Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
createTime String
The timestamp when the resource was created.
description String
Optional. Free-text description of the resource.
labels Map<String>
Optional. Set of label tags associated with the resource.
name String
Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
serverValidationCa List<Property Map>
Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
sni String
Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
updateTime String
The timestamp when the resource was updated.

Supporting Types

CertificateProviderInstanceResponse

PluginInstance This property is required. string
Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
PluginInstance This property is required. string
Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
pluginInstance This property is required. String
Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
pluginInstance This property is required. string
Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
plugin_instance This property is required. str
Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
pluginInstance This property is required. String
Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.

GoogleCloudNetworksecurityV1CertificateProviderResponse

CertificateProviderInstance This property is required. Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
GrpcEndpoint This property is required. Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the cert and private key.
CertificateProviderInstance This property is required. CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
GrpcEndpoint This property is required. GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the cert and private key.
certificateProviderInstance This property is required. CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint This property is required. GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the cert and private key.
certificateProviderInstance This property is required. CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint This property is required. GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the cert and private key.
certificate_provider_instance This property is required. CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpc_endpoint This property is required. GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the cert and private key.
certificateProviderInstance This property is required. Property Map
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint This property is required. Property Map
gRPC specific configuration to access the gRPC server to obtain the cert and private key.

GoogleCloudNetworksecurityV1GrpcEndpointResponse

TargetUri This property is required. string
The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
TargetUri This property is required. string
The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
targetUri This property is required. String
The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
targetUri This property is required. string
The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
target_uri This property is required. str
The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
targetUri This property is required. String
The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".

ValidationCAResponse

CertificateProviderInstance This property is required. Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
GrpcEndpoint This property is required. Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the CA certificate.
CertificateProviderInstance This property is required. CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
GrpcEndpoint This property is required. GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the CA certificate.
certificateProviderInstance This property is required. CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint This property is required. GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the CA certificate.
certificateProviderInstance This property is required. CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint This property is required. GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the CA certificate.
certificate_provider_instance This property is required. CertificateProviderInstanceResponse
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpc_endpoint This property is required. GoogleCloudNetworksecurityV1GrpcEndpointResponse
gRPC specific configuration to access the gRPC server to obtain the CA certificate.
certificateProviderInstance This property is required. Property Map
The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
grpcEndpoint This property is required. Property Map
gRPC specific configuration to access the gRPC server to obtain the CA certificate.

Package Details

Repository
Google Cloud Native pulumi/pulumi-google-native
License
Apache-2.0

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi