pulumi-gcp-kotlin/com.pulumi.gcp.networksecurity.kotlin/ClientTlsPolicy

ClientTlsPolicy

class ClientTlsPolicy : KotlinCustomResource

Example Usage

Network Security Client Tls Policy Basic

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.networksecurity.ClientTlsPolicy;
import com.pulumi.gcp.networksecurity.ClientTlsPolicyArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var default_ = new ClientTlsPolicy("default", ClientTlsPolicyArgs.builder()
            .labels(Map.of("foo", "bar"))
            .description("my description")
            .sni("secure.example.com")
            .build(), CustomResourceOptions.builder()
                .provider(google_beta)
                .build());
    }
}

Network Security Client Tls Policy Advanced

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.networksecurity.ClientTlsPolicy;
import com.pulumi.gcp.networksecurity.ClientTlsPolicyArgs;
import com.pulumi.gcp.networksecurity.inputs.ClientTlsPolicyClientCertificateArgs;
import com.pulumi.gcp.networksecurity.inputs.ClientTlsPolicyClientCertificateCertificateProviderInstanceArgs;
import com.pulumi.gcp.networksecurity.inputs.ClientTlsPolicyServerValidationCaArgs;
import com.pulumi.gcp.networksecurity.inputs.ClientTlsPolicyServerValidationCaGrpcEndpointArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var default_ = new ClientTlsPolicy("default", ClientTlsPolicyArgs.builder()
            .labels(Map.of("foo", "bar"))
            .description("my description")
            .clientCertificate(ClientTlsPolicyClientCertificateArgs.builder()
                .certificateProviderInstance(ClientTlsPolicyClientCertificateCertificateProviderInstanceArgs.builder()
                    .pluginInstance("google_cloud_private_spiffe")
                    .build())
                .build())
            .serverValidationCas(
                ClientTlsPolicyServerValidationCaArgs.builder()
                    .grpcEndpoint(ClientTlsPolicyServerValidationCaGrpcEndpointArgs.builder()
                        .targetUri("unix:mypath")
                        .build())
                    .build(),
                ClientTlsPolicyServerValidationCaArgs.builder()
                    .grpcEndpoint(ClientTlsPolicyServerValidationCaGrpcEndpointArgs.builder()
                        .targetUri("unix:mypath1")
                        .build())
                    .build())
            .build(), CustomResourceOptions.builder()
                .provider(google_beta)
                .build());
    }
}

Import

ClientTlsPolicy can be imported using any of these accepted formats

$ pulumi import gcp:networksecurity/clientTlsPolicy:ClientTlsPolicy default projects/{{project}}/locations/{{location}}/clientTlsPolicies/{{name}}

$ pulumi import gcp:networksecurity/clientTlsPolicy:ClientTlsPolicy default {{project}}/{{location}}/{{name}}

$ pulumi import gcp:networksecurity/clientTlsPolicy:ClientTlsPolicy default {{location}}/{{name}}

Properties

clientCertificate

val clientCertificate: Output<ClientTlsPolicyClientCertificate>?

Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. Structure is documented below.

createTime

val createTime: Output<String>

Time the ClientTlsPolicy was created in UTC.

description

val description: Output<String>?

A free-text description of the resource. Max length 1024 characters.

val id: Output<String>

labels

val labels: Output<Map<String, String>>?

Set of label tags associated with the ClientTlsPolicy resource.

location

val location: Output<String>?

The location of the client tls policy. The default value is global.

name

val name: Output<String>

Name of the ClientTlsPolicy resource.

project

val project: Output<String>

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

pulumiChildResources

val pulumiChildResources: Set<KotlinResource>

pulumiResourceName

val pulumiResourceName: String

pulumiResourceType

val pulumiResourceType: String

serverValidationCas

val serverValidationCas: Output<List<ClientTlsPolicyServerValidationCa>>?

Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate. Structure is documented below.

sni

val sni: Output<String>?

Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".

updateTime

val updateTime: Output<String>

Time the ClientTlsPolicy was updated in UTC.

urn

val urn: Output<String>