gcp.certificatemanager.getCertificates
Explore with Pulumi AI
List all certificates within Google Certificate Manager for a given project, region or filter.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const _default = gcp.certificatemanager.getCertificates({});
import pulumi
import pulumi_gcp as gcp
default = gcp.certificatemanager.get_certificates()
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificatemanager.GetCertificates(ctx, &certificatemanager.GetCertificatesArgs{}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() => 
{
    var @default = Gcp.CertificateManager.GetCertificates.Invoke();
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;
import com.pulumi.gcp.certificatemanager.inputs.GetCertificatesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var default = CertificatemanagerFunctions.getCertificates();
    }
}
variables:
  default:
    fn::invoke:
      function: gcp:certificatemanager:getCertificates
      arguments: {}
With A Filter
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const _default = gcp.certificatemanager.getCertificates({
    filter: "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
});
import pulumi
import pulumi_gcp as gcp
default = gcp.certificatemanager.get_certificates(filter="name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*")
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := certificatemanager.GetCertificates(ctx, &certificatemanager.GetCertificatesArgs{
			Filter: pulumi.StringRef("name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() => 
{
    var @default = Gcp.CertificateManager.GetCertificates.Invoke(new()
    {
        Filter = "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;
import com.pulumi.gcp.certificatemanager.inputs.GetCertificatesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var default = CertificatemanagerFunctions.getCertificates(GetCertificatesArgs.builder()
            .filter("name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*")
            .build());
    }
}
variables:
  default:
    fn::invoke:
      function: gcp:certificatemanager:getCertificates
      arguments:
        filter: name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*
Using getCertificates
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getCertificates(args: GetCertificatesArgs, opts?: InvokeOptions): Promise<GetCertificatesResult>
function getCertificatesOutput(args: GetCertificatesOutputArgs, opts?: InvokeOptions): Output<GetCertificatesResult>def get_certificates(filter: Optional[str] = None,
                     region: Optional[str] = None,
                     opts: Optional[InvokeOptions] = None) -> GetCertificatesResult
def get_certificates_output(filter: Optional[pulumi.Input[str]] = None,
                     region: Optional[pulumi.Input[str]] = None,
                     opts: Optional[InvokeOptions] = None) -> Output[GetCertificatesResult]func GetCertificates(ctx *Context, args *GetCertificatesArgs, opts ...InvokeOption) (*GetCertificatesResult, error)
func GetCertificatesOutput(ctx *Context, args *GetCertificatesOutputArgs, opts ...InvokeOption) GetCertificatesResultOutput> Note: This function is named GetCertificates in the Go SDK.
public static class GetCertificates 
{
    public static Task<GetCertificatesResult> InvokeAsync(GetCertificatesArgs args, InvokeOptions? opts = null)
    public static Output<GetCertificatesResult> Invoke(GetCertificatesInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetCertificatesResult> getCertificates(GetCertificatesArgs args, InvokeOptions options)
public static Output<GetCertificatesResult> getCertificates(GetCertificatesArgs args, InvokeOptions options)
fn::invoke:
  function: gcp:certificatemanager/getCertificates:getCertificates
  arguments:
    # arguments dictionaryThe following arguments are supported:
getCertificates Result
The following output properties are available:
- Certificates
List<GetCertificates Certificate> 
- Id string
- The provider-assigned unique ID for this managed resource.
- Filter string
- Region string
- Certificates
[]GetCertificates Certificate 
- Id string
- The provider-assigned unique ID for this managed resource.
- Filter string
- Region string
- certificates
List<GetCertificates Certificate> 
- id String
- The provider-assigned unique ID for this managed resource.
- filter String
- region String
- certificates
GetCertificates Certificate[] 
- id string
- The provider-assigned unique ID for this managed resource.
- filter string
- region string
- certificates
Sequence[GetCertificates Certificate] 
- id str
- The provider-assigned unique ID for this managed resource.
- filter str
- region str
- certificates List<Property Map>
- id String
- The provider-assigned unique ID for this managed resource.
- filter String
- region String
Supporting Types
GetCertificatesCertificate  
- Description string
- A human-readable description of the resource.
- EffectiveLabels Dictionary<string, string>
- Labels Dictionary<string, string>
- Set of label tags associated with the Certificate resource. - Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource. 
- Location string
- The Certificate Manager location. If not specified, "global" is used.
- Manageds
List<GetCertificates Certificate Managed> 
- Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
- Name string
- A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
- Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- PulumiLabels Dictionary<string, string>
- The combination of labels configured directly on the resource and default labels configured on the provider.
- SanDnsnames List<string>
- The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
- Scope string
- The scope of the certificate. - DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option. - EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations. - ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones 
- Description string
- A human-readable description of the resource.
- EffectiveLabels map[string]string
- Labels map[string]string
- Set of label tags associated with the Certificate resource. - Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource. 
- Location string
- The Certificate Manager location. If not specified, "global" is used.
- Manageds
[]GetCertificates Certificate Managed 
- Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
- Name string
- A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
- Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- PulumiLabels map[string]string
- The combination of labels configured directly on the resource and default labels configured on the provider.
- SanDnsnames []string
- The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
- Scope string
- The scope of the certificate. - DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option. - EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations. - ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones 
- description String
- A human-readable description of the resource.
- effectiveLabels Map<String,String>
- labels Map<String,String>
- Set of label tags associated with the Certificate resource. - Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource. 
- location String
- The Certificate Manager location. If not specified, "global" is used.
- manageds
List<GetCertificates Certificate Managed> 
- Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
- name String
- A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
- project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumiLabels Map<String,String>
- The combination of labels configured directly on the resource and default labels configured on the provider.
- sanDnsnames List<String>
- The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
- scope String
- The scope of the certificate. - DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option. - EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations. - ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones 
- description string
- A human-readable description of the resource.
- effectiveLabels {[key: string]: string}
- labels {[key: string]: string}
- Set of label tags associated with the Certificate resource. - Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource. 
- location string
- The Certificate Manager location. If not specified, "global" is used.
- manageds
GetCertificates Certificate Managed[] 
- Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
- name string
- A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
- project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumiLabels {[key: string]: string}
- The combination of labels configured directly on the resource and default labels configured on the provider.
- sanDnsnames string[]
- The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
- scope string
- The scope of the certificate. - DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option. - EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations. - ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones 
- description str
- A human-readable description of the resource.
- effective_labels Mapping[str, str]
- labels Mapping[str, str]
- Set of label tags associated with the Certificate resource. - Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource. 
- location str
- The Certificate Manager location. If not specified, "global" is used.
- manageds
Sequence[GetCertificates Certificate Managed] 
- Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
- name str
- A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
- project str
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi_labels Mapping[str, str]
- The combination of labels configured directly on the resource and default labels configured on the provider.
- san_dnsnames Sequence[str]
- The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
- scope str
- The scope of the certificate. - DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option. - EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations. - ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones 
- description String
- A human-readable description of the resource.
- effectiveLabels Map<String>
- labels Map<String>
- Set of label tags associated with the Certificate resource. - Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource. 
- location String
- The Certificate Manager location. If not specified, "global" is used.
- manageds List<Property Map>
- Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
- name String
- A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
- project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumiLabels Map<String>
- The combination of labels configured directly on the resource and default labels configured on the provider.
- sanDnsnames List<String>
- The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
- scope String
- The scope of the certificate. - DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option. - EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations. - ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones 
GetCertificatesCertificateManaged   
- 
List<GetCertificates Certificate Managed Authorization Attempt Info> 
- Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
- List<string>
- Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- Domains List<string>
- The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
- IssuanceConfig string
- The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- ProvisioningIssues List<GetCertificates Certificate Managed Provisioning Issue> 
- Information about issues with provisioning this Managed Certificate.
- State string
- A state of this Managed Certificate.
- 
[]GetCertificates Certificate Managed Authorization Attempt Info 
- Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
- []string
- Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- Domains []string
- The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
- IssuanceConfig string
- The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- ProvisioningIssues []GetCertificates Certificate Managed Provisioning Issue 
- Information about issues with provisioning this Managed Certificate.
- State string
- A state of this Managed Certificate.
- 
List<GetCertificates Certificate Managed Authorization Attempt Info> 
- Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
- List<String>
- Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- domains List<String>
- The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
- issuanceConfig String
- The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- provisioningIssues List<GetCertificates Certificate Managed Provisioning Issue> 
- Information about issues with provisioning this Managed Certificate.
- state String
- A state of this Managed Certificate.
- 
GetCertificates Certificate Managed Authorization Attempt Info[] 
- Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
- string[]
- Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- domains string[]
- The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
- issuanceConfig string
- The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- provisioningIssues GetCertificates Certificate Managed Provisioning Issue[] 
- Information about issues with provisioning this Managed Certificate.
- state string
- A state of this Managed Certificate.
- 
Sequence[GetCertificates Certificate Managed Authorization Attempt Info] 
- Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
- Sequence[str]
- Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- domains Sequence[str]
- The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
- issuance_config str
- The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- provisioning_issues Sequence[GetCertificates Certificate Managed Provisioning Issue] 
- Information about issues with provisioning this Managed Certificate.
- state str
- A state of this Managed Certificate.
- List<Property Map>
- Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
- List<String>
- Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- domains List<String>
- The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
- issuanceConfig String
- The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
- provisioningIssues List<Property Map>
- Information about issues with provisioning this Managed Certificate.
- state String
- A state of this Managed Certificate.
GetCertificatesCertificateManagedAuthorizationAttemptInfo      
- Details string
- Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
- Domain string
- Domain name of the authorization attempt.
- FailureReason string
- Reason for failure of the authorization attempt for the domain.
- State string
- State of the domain for managed certificate issuance.
- Details string
- Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
- Domain string
- Domain name of the authorization attempt.
- FailureReason string
- Reason for failure of the authorization attempt for the domain.
- State string
- State of the domain for managed certificate issuance.
- details String
- Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
- domain String
- Domain name of the authorization attempt.
- failureReason String
- Reason for failure of the authorization attempt for the domain.
- state String
- State of the domain for managed certificate issuance.
- details string
- Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
- domain string
- Domain name of the authorization attempt.
- failureReason string
- Reason for failure of the authorization attempt for the domain.
- state string
- State of the domain for managed certificate issuance.
- details str
- Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
- domain str
- Domain name of the authorization attempt.
- failure_reason str
- Reason for failure of the authorization attempt for the domain.
- state str
- State of the domain for managed certificate issuance.
- details String
- Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
- domain String
- Domain name of the authorization attempt.
- failureReason String
- Reason for failure of the authorization attempt for the domain.
- state String
- State of the domain for managed certificate issuance.
GetCertificatesCertificateManagedProvisioningIssue     
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the google-betaTerraform Provider.