pulumi-gcp-kotlin/com.pulumi.gcp.dns.kotlin.outputs/GetKeysKeySigningKey

GetKeysKeySigningKey

data class GetKeysKeySigningKey(val algorithm: String, val creationTime: String, val description: String, val digests: List<GetKeysKeySigningKeyDigest>, val dsRecord: String, val id: String, val isActive: Boolean, val keyLength: Int, val keyTag: Int, val publicKey: String)

Constructors

fun GetKeysKeySigningKey(algorithm: String, creationTime: String, description: String, digests: List<GetKeysKeySigningKeyDigest>, dsRecord: String, id: String, isActive: Boolean, keyLength: Int, keyTag: Int, publicKey: String)

Types

Companion

object Companion

Properties

algorithm

val algorithm: String

String mnemonic specifying the DNSSEC algorithm of this key. Immutable after creation time. Possible values are ecdsap256sha256, ecdsap384sha384, rsasha1, rsasha256, and rsasha512.

creationTime

val creationTime: String

The time that this resource was created in the control plane. This is in RFC3339 text format.

description

val description: String

A mutable string of at most 1024 characters associated with this resource for the user's convenience.

digests

val digests: List<GetKeysKeySigningKeyDigest>

A list of cryptographic hashes of the DNSKEY resource record associated with this DnsKey. These digests are needed to construct a DS record that points at this DNS key. Each contains:

dsRecord

val dsRecord: String

The DS record based on the KSK record. This is used when delegating DNSSEC-signed subdomains.

val id: String

Unique identifier for the resource; defined by the server.

isActive

val isActive: Boolean

Active keys will be used to sign subsequent changes to the ManagedZone. Inactive keys will still be present as DNSKEY Resource Records for the use of resolvers validating existing signatures.

keyLength

val keyLength: Int

Length of the key in bits. Specified at creation time then immutable.

keyTag

val keyTag: Int

The key tag is a non-cryptographic hash of the a DNSKEY resource record associated with this DnsKey. The key tag can be used to identify a DNSKEY more quickly (but it is not a unique identifier). In particular, the key tag is used in a parent zone's DS record to point at the DNSKEY in this child ManagedZone. The key tag is a number in the range 0, 65535 and the algorithm to calculate it is specified in RFC4034 Appendix B.

publicKey

val publicKey: String

Base64 encoded public half of this key.