pulumi-gcp-kotlin/com.pulumi.gcp.certificateauthority.kotlin.outputs/CertificateTemplateIdentityConstraints

CertificateTemplateIdentityConstraints

data class CertificateTemplateIdentityConstraints(val allowSubjectAltNamesPassthrough: Boolean, val allowSubjectPassthrough: Boolean, val celExpression: CertificateTemplateIdentityConstraintsCelExpression? = null)

Constructors

Link copied to clipboard
fun CertificateTemplateIdentityConstraints(allowSubjectAltNamesPassthrough: Boolean, allowSubjectPassthrough: Boolean, celExpression: CertificateTemplateIdentityConstraintsCelExpression? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard
val allowSubjectAltNamesPassthrough: Boolean

Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.

Link copied to clipboard
val allowSubjectPassthrough: Boolean

Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.

Link copied to clipboard
val celExpression: CertificateTemplateIdentityConstraintsCelExpression? = null

Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel