Certificate Issuer
Manages a Key Vault Certificate Issuer.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const current = azure.core.getClientConfig({});
const example = new azure.core.ResourceGroup("example", {
name: "example-resources",
location: "West Europe",
});
const exampleKeyVault = new azure.keyvault.KeyVault("example", {
name: "examplekeyvault",
location: example.location,
resourceGroupName: example.name,
skuName: "standard",
tenantId: current.then(current => current.tenantId),
});
const exampleCertificateIssuer = new azure.keyvault.CertificateIssuer("example", {
name: "example-issuer",
orgId: "ExampleOrgName",
keyVaultId: exampleKeyVault.id,
providerName: "DigiCert",
accountId: "0000",
password: "example-password",
});
Content copied to clipboard
import pulumi
import pulumi_azure as azure
current = azure.core.get_client_config()
example = azure.core.ResourceGroup("example",
name="example-resources",
location="West Europe")
example_key_vault = azure.keyvault.KeyVault("example",
name="examplekeyvault",
location=example.location,
resource_group_name=example.name,
sku_name="standard",
tenant_id=current.tenant_id)
example_certificate_issuer = azure.keyvault.CertificateIssuer("example",
name="example-issuer",
org_id="ExampleOrgName",
key_vault_id=example_key_vault.id,
provider_name="DigiCert",
account_id="0000",
password="example-password")
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var current = Azure.Core.GetClientConfig.Invoke();
var example = new Azure.Core.ResourceGroup("example", new()
{
Name = "example-resources",
Location = "West Europe",
});
var exampleKeyVault = new Azure.KeyVault.KeyVault("example", new()
{
Name = "examplekeyvault",
Location = example.Location,
ResourceGroupName = example.Name,
SkuName = "standard",
TenantId = current.Apply(getClientConfigResult => getClientConfigResult.TenantId),
});
var exampleCertificateIssuer = new Azure.KeyVault.CertificateIssuer("example", new()
{
Name = "example-issuer",
OrgId = "ExampleOrgName",
KeyVaultId = exampleKeyVault.Id,
ProviderName = "DigiCert",
AccountId = "0000",
Password = "example-password",
});
});
Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
current, err := core.GetClientConfig(ctx, map[string]interface{}{}, nil)
if err != nil {
return err
}
example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
Name: pulumi.String("example-resources"),
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
Name: pulumi.String("examplekeyvault"),
Location: example.Location,
ResourceGroupName: example.Name,
SkuName: pulumi.String("standard"),
TenantId: pulumi.String(current.TenantId),
})
if err != nil {
return err
}
_, err = keyvault.NewCertificateIssuer(ctx, "example", &keyvault.CertificateIssuerArgs{
Name: pulumi.String("example-issuer"),
OrgId: pulumi.String("ExampleOrgName"),
KeyVaultId: exampleKeyVault.ID(),
ProviderName: pulumi.String("DigiCert"),
AccountId: pulumi.String("0000"),
Password: pulumi.String("example-password"),
})
if err != nil {
return err
}
return nil
})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.CoreFunctions;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.keyvault.KeyVault;
import com.pulumi.azure.keyvault.KeyVaultArgs;
import com.pulumi.azure.keyvault.CertificateIssuer;
import com.pulumi.azure.keyvault.CertificateIssuerArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var current = CoreFunctions.getClientConfig();
var example = new ResourceGroup("example", ResourceGroupArgs.builder()
.name("example-resources")
.location("West Europe")
.build());
var exampleKeyVault = new KeyVault("exampleKeyVault", KeyVaultArgs.builder()
.name("examplekeyvault")
.location(example.location())
.resourceGroupName(example.name())
.skuName("standard")
.tenantId(current.applyValue(getClientConfigResult -> getClientConfigResult.tenantId()))
.build());
var exampleCertificateIssuer = new CertificateIssuer("exampleCertificateIssuer", CertificateIssuerArgs.builder()
.name("example-issuer")
.orgId("ExampleOrgName")
.keyVaultId(exampleKeyVault.id())
.providerName("DigiCert")
.accountId("0000")
.password("example-password")
.build());
}
}
Content copied to clipboard
resources:
example:
type: azure:core:ResourceGroup
properties:
name: example-resources
location: West Europe
exampleKeyVault:
type: azure:keyvault:KeyVault
name: example
properties:
name: examplekeyvault
location: ${example.location}
resourceGroupName: ${example.name}
skuName: standard
tenantId: ${current.tenantId}
exampleCertificateIssuer:
type: azure:keyvault:CertificateIssuer
name: example
properties:
name: example-issuer
orgId: ExampleOrgName
keyVaultId: ${exampleKeyVault.id}
providerName: DigiCert
accountId: '0000'
password: example-password
variables:
current:
fn::invoke:
function: azure:core:getClientConfig
arguments: {}
Content copied to clipboard
Import
Key Vault Certificate Issuers can be imported using the resource id
, e.g.
$ pulumi import azure:keyvault/certificateIssuer:CertificateIssuer example "https://key-vault-name.vault.azure.net/certificates/issuers/example"
Content copied to clipboard
Properties
Link copied to clipboard
One or more admin
blocks as defined below.
Link copied to clipboard
The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
Link copied to clipboard
The name of the third-party Certificate Issuer. Possible values are: DigiCert
, GlobalSign
, OneCertV2-PrivateCA
, OneCertV2-PublicCA
and SslAdminV2
.
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard