pulumi-gcp-kotlin/com.pulumi.gcp.certificateauthority.kotlin.inputs/CaPoolIssuancePolicyIdentityConstraintsArgs

CaPoolIssuancePolicyIdentityConstraintsArgs

data class CaPoolIssuancePolicyIdentityConstraintsArgs(val allowSubjectAltNamesPassthrough: Output<Boolean>, val allowSubjectPassthrough: Output<Boolean>, val celExpression: Output<CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs>? = null) : ConvertibleToJava<CaPoolIssuancePolicyIdentityConstraintsArgs>

Constructors

fun CaPoolIssuancePolicyIdentityConstraintsArgs(allowSubjectAltNamesPassthrough: Output<Boolean>, allowSubjectPassthrough: Output<Boolean>, celExpression: Output<CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs>? = null)

Functions

Link copied to clipboard
open override fun toJava(): CaPoolIssuancePolicyIdentityConstraintsArgs

Properties

Link copied to clipboard
val allowSubjectAltNamesPassthrough: Output<Boolean>

If this is set, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.

Link copied to clipboard
val allowSubjectPassthrough: Output<Boolean>

If this is set, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.

Link copied to clipboard
val celExpression: Output<CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs>? = null

A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/cel-guide Structure is documented below.