v1alpha1

package
v0.5.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 8, 2022 License: Apache-2.0 Imports: 16 Imported by: 0

Documentation

Overview

+groupName=privateca.google.kubeform.com

Index

Constants

This section is empty.

Variables

View Source
var (
	// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
	// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
	SchemeBuilder runtime.SchemeBuilder

	AddToScheme = localSchemeBuilder.AddToScheme
)
View Source
var SchemeGroupVersion = schema.GroupVersion{Group: privateca.GroupName, Version: "v1alpha1"}

Functions

func GetDecoder

func GetDecoder() map[string]jsoniter.ValDecoder

func GetEncoder

func GetEncoder() map[string]jsoniter.ValEncoder

func Kind

func Kind(kind string) schema.GroupKind

Kind takes an unqualified kind and returns a Group qualified GroupKind

func Resource

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type CaPool

type CaPool struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              CaPoolSpec   `json:"spec,omitempty"`
	Status            CaPoolStatus `json:"status,omitempty"`
}

func (*CaPool) DeepCopy

func (in *CaPool) DeepCopy() *CaPool

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPool.

func (*CaPool) DeepCopyInto

func (in *CaPool) DeepCopyInto(out *CaPool)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CaPool) DeepCopyObject

func (in *CaPool) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*CaPool) SetupWebhookWithManager

func (r *CaPool) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*CaPool) ValidateCreate

func (r *CaPool) ValidateCreate() error

ValidateCreate implements webhook.Validator so a webhook will be registered for the type

func (*CaPool) ValidateDelete

func (r *CaPool) ValidateDelete() error

ValidateDelete implements webhook.Validator so a webhook will be registered for the type

func (*CaPool) ValidateUpdate

func (r *CaPool) ValidateUpdate(old runtime.Object) error

ValidateUpdate implements webhook.Validator so a webhook will be registered for the type

type CaPoolIamBinding

type CaPoolIamBinding struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              CaPoolIamBindingSpec   `json:"spec,omitempty"`
	Status            CaPoolIamBindingStatus `json:"status,omitempty"`
}

func (*CaPoolIamBinding) DeepCopy

func (in *CaPoolIamBinding) DeepCopy() *CaPoolIamBinding

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamBinding.

func (*CaPoolIamBinding) DeepCopyInto

func (in *CaPoolIamBinding) DeepCopyInto(out *CaPoolIamBinding)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CaPoolIamBinding) DeepCopyObject

func (in *CaPoolIamBinding) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*CaPoolIamBinding) SetupWebhookWithManager

func (r *CaPoolIamBinding) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*CaPoolIamBinding) ValidateCreate

func (r *CaPoolIamBinding) ValidateCreate() error

ValidateCreate implements webhook.Validator so a webhook will be registered for the type

func (*CaPoolIamBinding) ValidateDelete

func (r *CaPoolIamBinding) ValidateDelete() error

ValidateDelete implements webhook.Validator so a webhook will be registered for the type

func (*CaPoolIamBinding) ValidateUpdate

func (r *CaPoolIamBinding) ValidateUpdate(old runtime.Object) error

ValidateUpdate implements webhook.Validator so a webhook will be registered for the type

type CaPoolIamBindingList

type CaPoolIamBindingList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of CaPoolIamBinding CRD objects
	Items []CaPoolIamBinding `json:"items,omitempty"`
}

CaPoolIamBindingList is a list of CaPoolIamBindings

func (*CaPoolIamBindingList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamBindingList.

func (*CaPoolIamBindingList) DeepCopyInto

func (in *CaPoolIamBindingList) DeepCopyInto(out *CaPoolIamBindingList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CaPoolIamBindingList) DeepCopyObject

func (in *CaPoolIamBindingList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type CaPoolIamBindingSpec

type CaPoolIamBindingSpec struct {
	State *CaPoolIamBindingSpecResource `json:"state,omitempty" tf:"-"`

	Resource CaPoolIamBindingSpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

func (*CaPoolIamBindingSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamBindingSpec.

func (*CaPoolIamBindingSpec) DeepCopyInto

func (in *CaPoolIamBindingSpec) DeepCopyInto(out *CaPoolIamBindingSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamBindingSpecCondition

type CaPoolIamBindingSpecCondition struct {
	// +optional
	Description *string `json:"description,omitempty" tf:"description"`
	Expression  *string `json:"expression" tf:"expression"`
	Title       *string `json:"title" tf:"title"`
}

func (*CaPoolIamBindingSpecCondition) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamBindingSpecCondition.

func (*CaPoolIamBindingSpecCondition) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamBindingSpecConditionCodec

type CaPoolIamBindingSpecConditionCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolIamBindingSpecConditionCodec) Decode

func (CaPoolIamBindingSpecConditionCodec) Encode

func (CaPoolIamBindingSpecConditionCodec) IsEmpty

type CaPoolIamBindingSpecResource

type CaPoolIamBindingSpecResource struct {
	ID string `json:"id,omitempty" tf:"id,omitempty"`

	CaPool *string `json:"caPool" tf:"ca_pool"`
	// +optional
	Condition *CaPoolIamBindingSpecCondition `json:"condition,omitempty" tf:"condition"`
	// +optional
	Etag *string `json:"etag,omitempty" tf:"etag"`
	// +optional
	Location *string  `json:"location,omitempty" tf:"location"`
	Members  []string `json:"members" tf:"members"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	Role    *string `json:"role" tf:"role"`
}

func (*CaPoolIamBindingSpecResource) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamBindingSpecResource.

func (*CaPoolIamBindingSpecResource) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamBindingStatus

type CaPoolIamBindingStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

func (*CaPoolIamBindingStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamBindingStatus.

func (*CaPoolIamBindingStatus) DeepCopyInto

func (in *CaPoolIamBindingStatus) DeepCopyInto(out *CaPoolIamBindingStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamMember

type CaPoolIamMember struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              CaPoolIamMemberSpec   `json:"spec,omitempty"`
	Status            CaPoolIamMemberStatus `json:"status,omitempty"`
}

func (*CaPoolIamMember) DeepCopy

func (in *CaPoolIamMember) DeepCopy() *CaPoolIamMember

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamMember.

func (*CaPoolIamMember) DeepCopyInto

func (in *CaPoolIamMember) DeepCopyInto(out *CaPoolIamMember)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CaPoolIamMember) DeepCopyObject

func (in *CaPoolIamMember) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*CaPoolIamMember) SetupWebhookWithManager

func (r *CaPoolIamMember) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*CaPoolIamMember) ValidateCreate

func (r *CaPoolIamMember) ValidateCreate() error

ValidateCreate implements webhook.Validator so a webhook will be registered for the type

func (*CaPoolIamMember) ValidateDelete

func (r *CaPoolIamMember) ValidateDelete() error

ValidateDelete implements webhook.Validator so a webhook will be registered for the type

func (*CaPoolIamMember) ValidateUpdate

func (r *CaPoolIamMember) ValidateUpdate(old runtime.Object) error

ValidateUpdate implements webhook.Validator so a webhook will be registered for the type

type CaPoolIamMemberList

type CaPoolIamMemberList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of CaPoolIamMember CRD objects
	Items []CaPoolIamMember `json:"items,omitempty"`
}

CaPoolIamMemberList is a list of CaPoolIamMembers

func (*CaPoolIamMemberList) DeepCopy

func (in *CaPoolIamMemberList) DeepCopy() *CaPoolIamMemberList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamMemberList.

func (*CaPoolIamMemberList) DeepCopyInto

func (in *CaPoolIamMemberList) DeepCopyInto(out *CaPoolIamMemberList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CaPoolIamMemberList) DeepCopyObject

func (in *CaPoolIamMemberList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type CaPoolIamMemberSpec

type CaPoolIamMemberSpec struct {
	State *CaPoolIamMemberSpecResource `json:"state,omitempty" tf:"-"`

	Resource CaPoolIamMemberSpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

func (*CaPoolIamMemberSpec) DeepCopy

func (in *CaPoolIamMemberSpec) DeepCopy() *CaPoolIamMemberSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamMemberSpec.

func (*CaPoolIamMemberSpec) DeepCopyInto

func (in *CaPoolIamMemberSpec) DeepCopyInto(out *CaPoolIamMemberSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamMemberSpecCondition

type CaPoolIamMemberSpecCondition struct {
	// +optional
	Description *string `json:"description,omitempty" tf:"description"`
	Expression  *string `json:"expression" tf:"expression"`
	Title       *string `json:"title" tf:"title"`
}

func (*CaPoolIamMemberSpecCondition) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamMemberSpecCondition.

func (*CaPoolIamMemberSpecCondition) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamMemberSpecConditionCodec

type CaPoolIamMemberSpecConditionCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolIamMemberSpecConditionCodec) Decode

func (CaPoolIamMemberSpecConditionCodec) Encode

func (CaPoolIamMemberSpecConditionCodec) IsEmpty

type CaPoolIamMemberSpecResource

type CaPoolIamMemberSpecResource struct {
	ID string `json:"id,omitempty" tf:"id,omitempty"`

	CaPool *string `json:"caPool" tf:"ca_pool"`
	// +optional
	Condition *CaPoolIamMemberSpecCondition `json:"condition,omitempty" tf:"condition"`
	// +optional
	Etag *string `json:"etag,omitempty" tf:"etag"`
	// +optional
	Location *string `json:"location,omitempty" tf:"location"`
	Member   *string `json:"member" tf:"member"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	Role    *string `json:"role" tf:"role"`
}

func (*CaPoolIamMemberSpecResource) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamMemberSpecResource.

func (*CaPoolIamMemberSpecResource) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamMemberStatus

type CaPoolIamMemberStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

func (*CaPoolIamMemberStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamMemberStatus.

func (*CaPoolIamMemberStatus) DeepCopyInto

func (in *CaPoolIamMemberStatus) DeepCopyInto(out *CaPoolIamMemberStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamPolicy

type CaPoolIamPolicy struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              CaPoolIamPolicySpec   `json:"spec,omitempty"`
	Status            CaPoolIamPolicyStatus `json:"status,omitempty"`
}

func (*CaPoolIamPolicy) DeepCopy

func (in *CaPoolIamPolicy) DeepCopy() *CaPoolIamPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamPolicy.

func (*CaPoolIamPolicy) DeepCopyInto

func (in *CaPoolIamPolicy) DeepCopyInto(out *CaPoolIamPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CaPoolIamPolicy) DeepCopyObject

func (in *CaPoolIamPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*CaPoolIamPolicy) SetupWebhookWithManager

func (r *CaPoolIamPolicy) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*CaPoolIamPolicy) ValidateCreate

func (r *CaPoolIamPolicy) ValidateCreate() error

ValidateCreate implements webhook.Validator so a webhook will be registered for the type

func (*CaPoolIamPolicy) ValidateDelete

func (r *CaPoolIamPolicy) ValidateDelete() error

ValidateDelete implements webhook.Validator so a webhook will be registered for the type

func (*CaPoolIamPolicy) ValidateUpdate

func (r *CaPoolIamPolicy) ValidateUpdate(old runtime.Object) error

ValidateUpdate implements webhook.Validator so a webhook will be registered for the type

type CaPoolIamPolicyList

type CaPoolIamPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of CaPoolIamPolicy CRD objects
	Items []CaPoolIamPolicy `json:"items,omitempty"`
}

CaPoolIamPolicyList is a list of CaPoolIamPolicys

func (*CaPoolIamPolicyList) DeepCopy

func (in *CaPoolIamPolicyList) DeepCopy() *CaPoolIamPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamPolicyList.

func (*CaPoolIamPolicyList) DeepCopyInto

func (in *CaPoolIamPolicyList) DeepCopyInto(out *CaPoolIamPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CaPoolIamPolicyList) DeepCopyObject

func (in *CaPoolIamPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type CaPoolIamPolicySpec

type CaPoolIamPolicySpec struct {
	State *CaPoolIamPolicySpecResource `json:"state,omitempty" tf:"-"`

	Resource CaPoolIamPolicySpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

func (*CaPoolIamPolicySpec) DeepCopy

func (in *CaPoolIamPolicySpec) DeepCopy() *CaPoolIamPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamPolicySpec.

func (*CaPoolIamPolicySpec) DeepCopyInto

func (in *CaPoolIamPolicySpec) DeepCopyInto(out *CaPoolIamPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamPolicySpecResource

type CaPoolIamPolicySpecResource struct {
	ID string `json:"id,omitempty" tf:"id,omitempty"`

	CaPool *string `json:"caPool" tf:"ca_pool"`
	// +optional
	Etag *string `json:"etag,omitempty" tf:"etag"`
	// +optional
	Location   *string `json:"location,omitempty" tf:"location"`
	PolicyData *string `json:"policyData" tf:"policy_data"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
}

func (*CaPoolIamPolicySpecResource) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamPolicySpecResource.

func (*CaPoolIamPolicySpecResource) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolIamPolicyStatus

type CaPoolIamPolicyStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

func (*CaPoolIamPolicyStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolIamPolicyStatus.

func (*CaPoolIamPolicyStatus) DeepCopyInto

func (in *CaPoolIamPolicyStatus) DeepCopyInto(out *CaPoolIamPolicyStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolList

type CaPoolList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of CaPool CRD objects
	Items []CaPool `json:"items,omitempty"`
}

CaPoolList is a list of CaPools

func (*CaPoolList) DeepCopy

func (in *CaPoolList) DeepCopy() *CaPoolList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolList.

func (*CaPoolList) DeepCopyInto

func (in *CaPoolList) DeepCopyInto(out *CaPoolList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CaPoolList) DeepCopyObject

func (in *CaPoolList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type CaPoolSpec

type CaPoolSpec struct {
	State *CaPoolSpecResource `json:"state,omitempty" tf:"-"`

	Resource CaPoolSpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

func (*CaPoolSpec) DeepCopy

func (in *CaPoolSpec) DeepCopy() *CaPoolSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpec.

func (*CaPoolSpec) DeepCopyInto

func (in *CaPoolSpec) DeepCopyInto(out *CaPoolSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicy

type CaPoolSpecIssuancePolicy struct {
	// IssuanceModes specifies the allowed ways in which Certificates may be requested from this CaPool.
	// +optional
	AllowedIssuanceModes *CaPoolSpecIssuancePolicyAllowedIssuanceModes `json:"allowedIssuanceModes,omitempty" tf:"allowed_issuance_modes"`
	// If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here.
	// Otherwise, any key may be used.
	// +optional
	AllowedKeyTypes []CaPoolSpecIssuancePolicyAllowedKeyTypes `json:"allowedKeyTypes,omitempty" tf:"allowed_key_types"`
	// A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request
	// includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate
	// request uses a CertificateTemplate that defines conflicting predefinedValues for the same properties, the certificate
	// issuance request will fail.
	// +optional
	BaselineValues *CaPoolSpecIssuancePolicyBaselineValues `json:"baselineValues,omitempty" tf:"baseline_values"`
	// Describes constraints on identities that may appear in Certificates issued through this CaPool.
	// If this is omitted, then this CaPool will not add restrictions on a certificate's identity.
	// +optional
	IdentityConstraints *CaPoolSpecIssuancePolicyIdentityConstraints `json:"identityConstraints,omitempty" tf:"identity_constraints"`
	// The maximum lifetime allowed for issued Certificates. Note that if the issuing CertificateAuthority
	// expires before a Certificate's requested maximumLifetime, the effective lifetime will be explicitly truncated to match it.
	// +optional
	MaximumLifetime *string `json:"maximumLifetime,omitempty" tf:"maximum_lifetime"`
}

func (*CaPoolSpecIssuancePolicy) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicy.

func (*CaPoolSpecIssuancePolicy) DeepCopyInto

func (in *CaPoolSpecIssuancePolicy) DeepCopyInto(out *CaPoolSpecIssuancePolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyAllowedIssuanceModes

type CaPoolSpecIssuancePolicyAllowedIssuanceModes struct {
	// When true, allows callers to create Certificates by specifying a CertificateConfig.
	AllowConfigBasedIssuance *bool `json:"allowConfigBasedIssuance" tf:"allow_config_based_issuance"`
	// When true, allows callers to create Certificates by specifying a CSR.
	AllowCsrBasedIssuance *bool `json:"allowCsrBasedIssuance" tf:"allow_csr_based_issuance"`
}

func (*CaPoolSpecIssuancePolicyAllowedIssuanceModes) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyAllowedIssuanceModes.

func (*CaPoolSpecIssuancePolicyAllowedIssuanceModes) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyAllowedIssuanceModesCodec

type CaPoolSpecIssuancePolicyAllowedIssuanceModesCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyAllowedIssuanceModesCodec) Decode

func (CaPoolSpecIssuancePolicyAllowedIssuanceModesCodec) Encode

func (CaPoolSpecIssuancePolicyAllowedIssuanceModesCodec) IsEmpty

type CaPoolSpecIssuancePolicyAllowedKeyTypes

type CaPoolSpecIssuancePolicyAllowedKeyTypes struct {
	// Represents an allowed Elliptic Curve key type.
	// +optional
	EllipticCurve *CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurve `json:"ellipticCurve,omitempty" tf:"elliptic_curve"`
	// Describes an RSA key that may be used in a Certificate issued from a CaPool.
	// +optional
	Rsa *CaPoolSpecIssuancePolicyAllowedKeyTypesRsa `json:"rsa,omitempty" tf:"rsa"`
}

func (*CaPoolSpecIssuancePolicyAllowedKeyTypes) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyAllowedKeyTypes.

func (*CaPoolSpecIssuancePolicyAllowedKeyTypes) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurve

type CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurve struct {
	// The algorithm used. Possible values: ["ECDSA_P256", "ECDSA_P384", "EDDSA_25519"]
	SignatureAlgorithm *string `json:"signatureAlgorithm" tf:"signature_algorithm"`
}

func (*CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurve) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurve.

func (*CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurve) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurveCodec

type CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurveCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurveCodec) Decode

func (CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurveCodec) Encode

func (CaPoolSpecIssuancePolicyAllowedKeyTypesEllipticCurveCodec) IsEmpty

type CaPoolSpecIssuancePolicyAllowedKeyTypesRsa

type CaPoolSpecIssuancePolicyAllowedKeyTypesRsa struct {
	// The maximum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the
	// service will not enforce an explicit upper bound on RSA modulus sizes.
	// +optional
	MaxModulusSize *string `json:"maxModulusSize,omitempty" tf:"max_modulus_size"`
	// The minimum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the
	// service-level min RSA modulus size will continue to apply.
	// +optional
	MinModulusSize *string `json:"minModulusSize,omitempty" tf:"min_modulus_size"`
}

func (*CaPoolSpecIssuancePolicyAllowedKeyTypesRsa) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyAllowedKeyTypesRsa.

func (*CaPoolSpecIssuancePolicyAllowedKeyTypesRsa) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyAllowedKeyTypesRsaCodec

type CaPoolSpecIssuancePolicyAllowedKeyTypesRsaCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyAllowedKeyTypesRsaCodec) Decode

func (CaPoolSpecIssuancePolicyAllowedKeyTypesRsaCodec) Encode

func (CaPoolSpecIssuancePolicyAllowedKeyTypesRsaCodec) IsEmpty

type CaPoolSpecIssuancePolicyBaselineValues

type CaPoolSpecIssuancePolicyBaselineValues struct {
	// Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
	// +optional
	AdditionalExtensions []CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensions `json:"additionalExtensions,omitempty" tf:"additional_extensions"`
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	// +optional
	AiaOcspServers []string `json:"aiaOcspServers,omitempty" tf:"aia_ocsp_servers"`
	// Describes values that are relevant in a CA certificate.
	CaOptions *CaPoolSpecIssuancePolicyBaselineValuesCaOptions `json:"caOptions" tf:"ca_options"`
	// Indicates the intended use for keys that correspond to a certificate.
	KeyUsage *CaPoolSpecIssuancePolicyBaselineValuesKeyUsage `json:"keyUsage" tf:"key_usage"`
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// +optional
	PolicyIDS []CaPoolSpecIssuancePolicyBaselineValuesPolicyIDS `json:"policyIDS,omitempty" tf:"policy_ids"`
}

func (*CaPoolSpecIssuancePolicyBaselineValues) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyBaselineValues.

func (*CaPoolSpecIssuancePolicyBaselineValues) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensions

type CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensions struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical *bool `json:"critical" tf:"critical"`
	// Describes values that are relevant in a CA certificate.
	ObjectID *CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectID `json:"objectID" tf:"object_id"`
	// The value of this X.509 extension. A base64-encoded string.
	Value *string `json:"value" tf:"value"`
}

func (*CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensions.

func (*CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectID

type CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectID struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectID) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectID.

func (*CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectID) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectIDCodec

type CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectIDCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectIDCodec) Decode

func (CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectIDCodec) Encode

func (CaPoolSpecIssuancePolicyBaselineValuesAdditionalExtensionsObjectIDCodec) IsEmpty

type CaPoolSpecIssuancePolicyBaselineValuesCaOptions

type CaPoolSpecIssuancePolicyBaselineValuesCaOptions struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	// +optional
	IsCa *bool `json:"isCa,omitempty" tf:"is_ca"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
	// +optional
	MaxIssuerPathLength *int64 `json:"maxIssuerPathLength,omitempty" tf:"max_issuer_path_length"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both 'is_ca' and 'non_ca' are unset, the extension will be omitted from the CA certificate.
	// +optional
	NonCa *bool `json:"nonCa,omitempty" tf:"non_ca"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// if both 'max_issuer_path_length' and 'zero_max_issuer_path_length' are unset,
	// the max path length will be omitted from the CA certificate.
	// +optional
	ZeroMaxIssuerPathLength *bool `json:"zeroMaxIssuerPathLength,omitempty" tf:"zero_max_issuer_path_length"`
}

func (*CaPoolSpecIssuancePolicyBaselineValuesCaOptions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyBaselineValuesCaOptions.

func (*CaPoolSpecIssuancePolicyBaselineValuesCaOptions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyBaselineValuesCaOptionsCodec

type CaPoolSpecIssuancePolicyBaselineValuesCaOptionsCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyBaselineValuesCaOptionsCodec) Decode

func (CaPoolSpecIssuancePolicyBaselineValuesCaOptionsCodec) Encode

func (CaPoolSpecIssuancePolicyBaselineValuesCaOptionsCodec) IsEmpty

type CaPoolSpecIssuancePolicyBaselineValuesCodec

type CaPoolSpecIssuancePolicyBaselineValuesCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyBaselineValuesCodec) Decode

func (CaPoolSpecIssuancePolicyBaselineValuesCodec) Encode

func (CaPoolSpecIssuancePolicyBaselineValuesCodec) IsEmpty

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsage

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	BaseKeyUsage *CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsage `json:"baseKeyUsage" tf:"base_key_usage"`
	// Describes high-level ways in which a key may be used.
	ExtendedKeyUsage *CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsage `json:"extendedKeyUsage" tf:"extended_key_usage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// +optional
	UnknownExtendedKeyUsages []CaPoolSpecIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsages `json:"unknownExtendedKeyUsages,omitempty" tf:"unknown_extended_key_usages"`
}

func (*CaPoolSpecIssuancePolicyBaselineValuesKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyBaselineValuesKeyUsage.

func (*CaPoolSpecIssuancePolicyBaselineValuesKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsage

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	// +optional
	CertSign *bool `json:"certSign,omitempty" tf:"cert_sign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	// +optional
	ContentCommitment *bool `json:"contentCommitment,omitempty" tf:"content_commitment"`
	// The key may be used sign certificate revocation lists.
	// +optional
	CrlSign *bool `json:"crlSign,omitempty" tf:"crl_sign"`
	// The key may be used to encipher data.
	// +optional
	DataEncipherment *bool `json:"dataEncipherment,omitempty" tf:"data_encipherment"`
	// The key may be used to decipher only.
	// +optional
	DecipherOnly *bool `json:"decipherOnly,omitempty" tf:"decipher_only"`
	// The key may be used for digital signatures.
	// +optional
	DigitalSignature *bool `json:"digitalSignature,omitempty" tf:"digital_signature"`
	// The key may be used to encipher only.
	// +optional
	EncipherOnly *bool `json:"encipherOnly,omitempty" tf:"encipher_only"`
	// The key may be used in a key agreement protocol.
	// +optional
	KeyAgreement *bool `json:"keyAgreement,omitempty" tf:"key_agreement"`
	// The key may be used to encipher other keys.
	// +optional
	KeyEncipherment *bool `json:"keyEncipherment,omitempty" tf:"key_encipherment"`
}

func (*CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsage.

func (*CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageCodec

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageCodec) Decode

func (CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageCodec) Encode

func (CaPoolSpecIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageCodec) IsEmpty

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageCodec

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyBaselineValuesKeyUsageCodec) Decode

func (CaPoolSpecIssuancePolicyBaselineValuesKeyUsageCodec) Encode

func (CaPoolSpecIssuancePolicyBaselineValuesKeyUsageCodec) IsEmpty

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsage

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	// +optional
	ClientAuth *bool `json:"clientAuth,omitempty" tf:"client_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	// +optional
	CodeSigning *bool `json:"codeSigning,omitempty" tf:"code_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	// +optional
	EmailProtection *bool `json:"emailProtection,omitempty" tf:"email_protection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	// +optional
	OcspSigning *bool `json:"ocspSigning,omitempty" tf:"ocsp_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	// +optional
	ServerAuth *bool `json:"serverAuth,omitempty" tf:"server_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	// +optional
	TimeStamping *bool `json:"timeStamping,omitempty" tf:"time_stamping"`
}

func (*CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsage.

func (*CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageCodec

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageCodec) Decode

func (CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageCodec) Encode

func (CaPoolSpecIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageCodec) IsEmpty

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsages

type CaPoolSpecIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsages struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CaPoolSpecIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsages) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsages.

func (*CaPoolSpecIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsages) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyBaselineValuesPolicyIDS

type CaPoolSpecIssuancePolicyBaselineValuesPolicyIDS struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CaPoolSpecIssuancePolicyBaselineValuesPolicyIDS) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyBaselineValuesPolicyIDS.

func (*CaPoolSpecIssuancePolicyBaselineValuesPolicyIDS) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyCodec

type CaPoolSpecIssuancePolicyCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyCodec) Decode

func (CaPoolSpecIssuancePolicyCodec) Encode

func (CaPoolSpecIssuancePolicyCodec) IsEmpty

type CaPoolSpecIssuancePolicyIdentityConstraints

type CaPoolSpecIssuancePolicyIdentityConstraints struct {
	// If this is set, the SubjectAltNames extension may be copied from a certificate request into the signed certificate.
	// Otherwise, the requested SubjectAltNames will be discarded.
	AllowSubjectAltNamesPassthrough *bool `json:"allowSubjectAltNamesPassthrough" tf:"allow_subject_alt_names_passthrough"`
	// If this is set, the Subject field may be copied from a certificate request into the signed certificate.
	// Otherwise, the requested Subject will be discarded.
	AllowSubjectPassthrough *bool `json:"allowSubjectPassthrough" tf:"allow_subject_passthrough"`
	// A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a
	// certificate is signed. To see the full allowed syntax and some examples,
	// see https://cloud.google.com/certificate-authority-service/docs/cel-guide
	// +optional
	CelExpression *CaPoolSpecIssuancePolicyIdentityConstraintsCelExpression `json:"celExpression,omitempty" tf:"cel_expression"`
}

func (*CaPoolSpecIssuancePolicyIdentityConstraints) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyIdentityConstraints.

func (*CaPoolSpecIssuancePolicyIdentityConstraints) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyIdentityConstraintsCelExpression

type CaPoolSpecIssuancePolicyIdentityConstraintsCelExpression struct {
	// Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	// +optional
	Description *string `json:"description,omitempty" tf:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression *string `json:"expression" tf:"expression"`
	// String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	// +optional
	Location *string `json:"location,omitempty" tf:"location"`
	// Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	// +optional
	Title *string `json:"title,omitempty" tf:"title"`
}

func (*CaPoolSpecIssuancePolicyIdentityConstraintsCelExpression) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecIssuancePolicyIdentityConstraintsCelExpression.

func (*CaPoolSpecIssuancePolicyIdentityConstraintsCelExpression) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecIssuancePolicyIdentityConstraintsCelExpressionCodec

type CaPoolSpecIssuancePolicyIdentityConstraintsCelExpressionCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyIdentityConstraintsCelExpressionCodec) Decode

func (CaPoolSpecIssuancePolicyIdentityConstraintsCelExpressionCodec) Encode

func (CaPoolSpecIssuancePolicyIdentityConstraintsCelExpressionCodec) IsEmpty

type CaPoolSpecIssuancePolicyIdentityConstraintsCodec

type CaPoolSpecIssuancePolicyIdentityConstraintsCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecIssuancePolicyIdentityConstraintsCodec) Decode

func (CaPoolSpecIssuancePolicyIdentityConstraintsCodec) Encode

func (CaPoolSpecIssuancePolicyIdentityConstraintsCodec) IsEmpty

type CaPoolSpecPublishingOptions

type CaPoolSpecPublishingOptions struct {
	// When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"
	// X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding
	// X.509 extension will not be written in issued certificates.
	PublishCaCert *bool `json:"publishCaCert" tf:"publish_ca_cert"`
	// When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension
	// in all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not
	// be written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are
	// also rebuilt shortly after a certificate is revoked.
	PublishCrl *bool `json:"publishCrl" tf:"publish_crl"`
}

func (*CaPoolSpecPublishingOptions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecPublishingOptions.

func (*CaPoolSpecPublishingOptions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolSpecPublishingOptionsCodec

type CaPoolSpecPublishingOptionsCodec struct {
}

+k8s:deepcopy-gen=false

func (CaPoolSpecPublishingOptionsCodec) Decode

func (CaPoolSpecPublishingOptionsCodec) Encode

func (CaPoolSpecPublishingOptionsCodec) IsEmpty

type CaPoolSpecResource

type CaPoolSpecResource struct {
	Timeouts *base.ResourceTimeout `json:"timeouts,omitempty" tf:"timeouts"`

	ID string `json:"id,omitempty" tf:"id,omitempty"`

	// The IssuancePolicy to control how Certificates will be issued from this CaPool.
	// +optional
	IssuancePolicy *CaPoolSpecIssuancePolicy `json:"issuancePolicy,omitempty" tf:"issuance_policy"`
	// Labels with user-defined metadata.
	//
	// An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
	// "1.3kg", "count": "3" }.
	// +optional
	Labels *map[string]string `json:"labels,omitempty" tf:"labels"`
	// Location of the CaPool. A full list of valid locations can be found by
	// running 'gcloud privateca locations list'.
	Location *string `json:"location" tf:"location"`
	// The name for this CaPool.
	Name *string `json:"name" tf:"name"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	// The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
	// +optional
	PublishingOptions *CaPoolSpecPublishingOptions `json:"publishingOptions,omitempty" tf:"publishing_options"`
	// The Tier of this CaPool. Possible values: ["ENTERPRISE", "DEVOPS"]
	Tier *string `json:"tier" tf:"tier"`
}

func (*CaPoolSpecResource) DeepCopy

func (in *CaPoolSpecResource) DeepCopy() *CaPoolSpecResource

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolSpecResource.

func (*CaPoolSpecResource) DeepCopyInto

func (in *CaPoolSpecResource) DeepCopyInto(out *CaPoolSpecResource)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CaPoolStatus

type CaPoolStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

func (*CaPoolStatus) DeepCopy

func (in *CaPoolStatus) DeepCopy() *CaPoolStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CaPoolStatus.

func (*CaPoolStatus) DeepCopyInto

func (in *CaPoolStatus) DeepCopyInto(out *CaPoolStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Certificate

type Certificate struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              CertificateSpec   `json:"spec,omitempty"`
	Status            CertificateStatus `json:"status,omitempty"`
}

func (*Certificate) DeepCopy

func (in *Certificate) DeepCopy() *Certificate

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Certificate.

func (*Certificate) DeepCopyInto

func (in *Certificate) DeepCopyInto(out *Certificate)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Certificate) DeepCopyObject

func (in *Certificate) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*Certificate) SetupWebhookWithManager

func (r *Certificate) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*Certificate) ValidateCreate

func (r *Certificate) ValidateCreate() error

ValidateCreate implements webhook.Validator so a webhook will be registered for the type

func (*Certificate) ValidateDelete

func (r *Certificate) ValidateDelete() error

ValidateDelete implements webhook.Validator so a webhook will be registered for the type

func (*Certificate) ValidateUpdate

func (r *Certificate) ValidateUpdate(old runtime.Object) error

ValidateUpdate implements webhook.Validator so a webhook will be registered for the type

type CertificateAuthority

type CertificateAuthority struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              CertificateAuthoritySpec   `json:"spec,omitempty"`
	Status            CertificateAuthorityStatus `json:"status,omitempty"`
}

func (*CertificateAuthority) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthority.

func (*CertificateAuthority) DeepCopyInto

func (in *CertificateAuthority) DeepCopyInto(out *CertificateAuthority)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateAuthority) DeepCopyObject

func (in *CertificateAuthority) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*CertificateAuthority) SetupWebhookWithManager

func (r *CertificateAuthority) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*CertificateAuthority) ValidateCreate

func (r *CertificateAuthority) ValidateCreate() error

ValidateCreate implements webhook.Validator so a webhook will be registered for the type

func (*CertificateAuthority) ValidateDelete

func (r *CertificateAuthority) ValidateDelete() error

ValidateDelete implements webhook.Validator so a webhook will be registered for the type

func (*CertificateAuthority) ValidateUpdate

func (r *CertificateAuthority) ValidateUpdate(old runtime.Object) error

ValidateUpdate implements webhook.Validator so a webhook will be registered for the type

type CertificateAuthorityList

type CertificateAuthorityList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of CertificateAuthority CRD objects
	Items []CertificateAuthority `json:"items,omitempty"`
}

CertificateAuthorityList is a list of CertificateAuthoritys

func (*CertificateAuthorityList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityList.

func (*CertificateAuthorityList) DeepCopyInto

func (in *CertificateAuthorityList) DeepCopyInto(out *CertificateAuthorityList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateAuthorityList) DeepCopyObject

func (in *CertificateAuthorityList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type CertificateAuthoritySpec

type CertificateAuthoritySpec struct {
	State *CertificateAuthoritySpecResource `json:"state,omitempty" tf:"-"`

	Resource CertificateAuthoritySpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

func (*CertificateAuthoritySpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpec.

func (*CertificateAuthoritySpec) DeepCopyInto

func (in *CertificateAuthoritySpec) DeepCopyInto(out *CertificateAuthoritySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecAccessUrls

type CertificateAuthoritySpecAccessUrls struct {
	// The URL where this CertificateAuthority's CA certificate is published. This will only be
	// set for CAs that have been activated.
	// +optional
	CaCertificateAccessURL *string `json:"caCertificateAccessURL,omitempty" tf:"ca_certificate_access_url"`
	// The URL where this CertificateAuthority's CRLs are published. This will only be set for
	// CAs that have been activated.
	// +optional
	CrlAccessUrls []string `json:"crlAccessUrls,omitempty" tf:"crl_access_urls"`
}

func (*CertificateAuthoritySpecAccessUrls) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecAccessUrls.

func (*CertificateAuthoritySpecAccessUrls) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfig

type CertificateAuthoritySpecConfig struct {
	// Specifies some of the values in a certificate that are related to the subject.
	SubjectConfig *CertificateAuthoritySpecConfigSubjectConfig `json:"subjectConfig" tf:"subject_config"`
	// Describes how some of the technical X.509 fields in a certificate should be populated.
	X509Config *CertificateAuthoritySpecConfigX509Config `json:"x509Config" tf:"x509_config"`
}

func (*CertificateAuthoritySpecConfig) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfig.

func (*CertificateAuthoritySpecConfig) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigCodec

type CertificateAuthoritySpecConfigCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigCodec) Decode

func (CertificateAuthoritySpecConfigCodec) Encode

func (CertificateAuthoritySpecConfigCodec) IsEmpty

type CertificateAuthoritySpecConfigSubjectConfig

type CertificateAuthoritySpecConfigSubjectConfig struct {
	// Contains distinguished name fields such as the location and organization.
	Subject *CertificateAuthoritySpecConfigSubjectConfigSubject `json:"subject" tf:"subject"`
	// The subject alternative name fields.
	// +optional
	SubjectAltName *CertificateAuthoritySpecConfigSubjectConfigSubjectAltName `json:"subjectAltName,omitempty" tf:"subject_alt_name"`
}

func (*CertificateAuthoritySpecConfigSubjectConfig) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigSubjectConfig.

func (*CertificateAuthoritySpecConfigSubjectConfig) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigSubjectConfigCodec

type CertificateAuthoritySpecConfigSubjectConfigCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigSubjectConfigCodec) Decode

func (CertificateAuthoritySpecConfigSubjectConfigCodec) Encode

func (CertificateAuthoritySpecConfigSubjectConfigCodec) IsEmpty

type CertificateAuthoritySpecConfigSubjectConfigSubject

type CertificateAuthoritySpecConfigSubjectConfigSubject struct {
	// The common name of the distinguished name.
	CommonName *string `json:"commonName" tf:"common_name"`
	// The country code of the subject.
	// +optional
	CountryCode *string `json:"countryCode,omitempty" tf:"country_code"`
	// The locality or city of the subject.
	// +optional
	Locality *string `json:"locality,omitempty" tf:"locality"`
	// The organization of the subject.
	Organization *string `json:"organization" tf:"organization"`
	// The organizational unit of the subject.
	// +optional
	OrganizationalUnit *string `json:"organizationalUnit,omitempty" tf:"organizational_unit"`
	// The postal code of the subject.
	// +optional
	PostalCode *string `json:"postalCode,omitempty" tf:"postal_code"`
	// The province, territory, or regional state of the subject.
	// +optional
	Province *string `json:"province,omitempty" tf:"province"`
	// The street address of the subject.
	// +optional
	StreetAddress *string `json:"streetAddress,omitempty" tf:"street_address"`
}

func (*CertificateAuthoritySpecConfigSubjectConfigSubject) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigSubjectConfigSubject.

func (*CertificateAuthoritySpecConfigSubjectConfigSubject) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigSubjectConfigSubjectAltName

type CertificateAuthoritySpecConfigSubjectConfigSubjectAltName struct {
	// Contains only valid, fully-qualified host names.
	// +optional
	DnsNames []string `json:"dnsNames,omitempty" tf:"dns_names"`
	// Contains only valid RFC 2822 E-mail addresses.
	// +optional
	EmailAddresses []string `json:"emailAddresses,omitempty" tf:"email_addresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	// +optional
	IpAddresses []string `json:"ipAddresses,omitempty" tf:"ip_addresses"`
	// Contains only valid RFC 3986 URIs.
	// +optional
	Uris []string `json:"uris,omitempty" tf:"uris"`
}

func (*CertificateAuthoritySpecConfigSubjectConfigSubjectAltName) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigSubjectConfigSubjectAltName.

func (*CertificateAuthoritySpecConfigSubjectConfigSubjectAltName) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigSubjectConfigSubjectAltNameCodec

type CertificateAuthoritySpecConfigSubjectConfigSubjectAltNameCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigSubjectConfigSubjectAltNameCodec) Decode

func (CertificateAuthoritySpecConfigSubjectConfigSubjectAltNameCodec) Encode

func (CertificateAuthoritySpecConfigSubjectConfigSubjectAltNameCodec) IsEmpty

type CertificateAuthoritySpecConfigSubjectConfigSubjectCodec

type CertificateAuthoritySpecConfigSubjectConfigSubjectCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigSubjectConfigSubjectCodec) Decode

func (CertificateAuthoritySpecConfigSubjectConfigSubjectCodec) Encode

func (CertificateAuthoritySpecConfigSubjectConfigSubjectCodec) IsEmpty

type CertificateAuthoritySpecConfigX509Config

type CertificateAuthoritySpecConfigX509Config struct {
	// Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
	// +optional
	AdditionalExtensions []CertificateAuthoritySpecConfigX509ConfigAdditionalExtensions `json:"additionalExtensions,omitempty" tf:"additional_extensions"`
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	// +optional
	AiaOcspServers []string `json:"aiaOcspServers,omitempty" tf:"aia_ocsp_servers"`
	// Describes values that are relevant in a CA certificate.
	CaOptions *CertificateAuthoritySpecConfigX509ConfigCaOptions `json:"caOptions" tf:"ca_options"`
	// Indicates the intended use for keys that correspond to a certificate.
	KeyUsage *CertificateAuthoritySpecConfigX509ConfigKeyUsage `json:"keyUsage" tf:"key_usage"`
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// +optional
	PolicyIDS []CertificateAuthoritySpecConfigX509ConfigPolicyIDS `json:"policyIDS,omitempty" tf:"policy_ids"`
}

func (*CertificateAuthoritySpecConfigX509Config) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigX509Config.

func (*CertificateAuthoritySpecConfigX509Config) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigX509ConfigAdditionalExtensions

type CertificateAuthoritySpecConfigX509ConfigAdditionalExtensions struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical *bool `json:"critical" tf:"critical"`
	// Describes values that are relevant in a CA certificate.
	ObjectID *CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectID `json:"objectID" tf:"object_id"`
	// The value of this X.509 extension. A base64-encoded string.
	Value *string `json:"value" tf:"value"`
}

func (*CertificateAuthoritySpecConfigX509ConfigAdditionalExtensions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigX509ConfigAdditionalExtensions.

func (*CertificateAuthoritySpecConfigX509ConfigAdditionalExtensions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectID

type CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectID struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectID) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectID.

func (*CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectID) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectIDCodec

type CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectIDCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectIDCodec) Decode

func (CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectIDCodec) Encode

func (CertificateAuthoritySpecConfigX509ConfigAdditionalExtensionsObjectIDCodec) IsEmpty

type CertificateAuthoritySpecConfigX509ConfigCaOptions

type CertificateAuthoritySpecConfigX509ConfigCaOptions struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	IsCa *bool `json:"isCa" tf:"is_ca"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
	// +optional
	MaxIssuerPathLength *int64 `json:"maxIssuerPathLength,omitempty" tf:"max_issuer_path_length"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both 'is_ca' and 'non_ca' are unset, the extension will be omitted from the CA certificate.
	// +optional
	NonCa *bool `json:"nonCa,omitempty" tf:"non_ca"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// if both 'max_issuer_path_length' and 'zero_max_issuer_path_length' are unset,
	// the max path length will be omitted from the CA certificate.
	// +optional
	ZeroMaxIssuerPathLength *bool `json:"zeroMaxIssuerPathLength,omitempty" tf:"zero_max_issuer_path_length"`
}

func (*CertificateAuthoritySpecConfigX509ConfigCaOptions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigX509ConfigCaOptions.

func (*CertificateAuthoritySpecConfigX509ConfigCaOptions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigX509ConfigCaOptionsCodec

type CertificateAuthoritySpecConfigX509ConfigCaOptionsCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigX509ConfigCaOptionsCodec) Decode

func (CertificateAuthoritySpecConfigX509ConfigCaOptionsCodec) Encode

func (CertificateAuthoritySpecConfigX509ConfigCaOptionsCodec) IsEmpty

type CertificateAuthoritySpecConfigX509ConfigCodec

type CertificateAuthoritySpecConfigX509ConfigCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigX509ConfigCodec) Decode

func (CertificateAuthoritySpecConfigX509ConfigCodec) Encode

func (CertificateAuthoritySpecConfigX509ConfigCodec) IsEmpty

type CertificateAuthoritySpecConfigX509ConfigKeyUsage

type CertificateAuthoritySpecConfigX509ConfigKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	BaseKeyUsage *CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsage `json:"baseKeyUsage" tf:"base_key_usage"`
	// Describes high-level ways in which a key may be used.
	ExtendedKeyUsage *CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsage `json:"extendedKeyUsage" tf:"extended_key_usage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// +optional
	UnknownExtendedKeyUsages []CertificateAuthoritySpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages `json:"unknownExtendedKeyUsages,omitempty" tf:"unknown_extended_key_usages"`
}

func (*CertificateAuthoritySpecConfigX509ConfigKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigX509ConfigKeyUsage.

func (*CertificateAuthoritySpecConfigX509ConfigKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsage

type CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	// +optional
	CertSign *bool `json:"certSign,omitempty" tf:"cert_sign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	// +optional
	ContentCommitment *bool `json:"contentCommitment,omitempty" tf:"content_commitment"`
	// The key may be used sign certificate revocation lists.
	// +optional
	CrlSign *bool `json:"crlSign,omitempty" tf:"crl_sign"`
	// The key may be used to encipher data.
	// +optional
	DataEncipherment *bool `json:"dataEncipherment,omitempty" tf:"data_encipherment"`
	// The key may be used to decipher only.
	// +optional
	DecipherOnly *bool `json:"decipherOnly,omitempty" tf:"decipher_only"`
	// The key may be used for digital signatures.
	// +optional
	DigitalSignature *bool `json:"digitalSignature,omitempty" tf:"digital_signature"`
	// The key may be used to encipher only.
	// +optional
	EncipherOnly *bool `json:"encipherOnly,omitempty" tf:"encipher_only"`
	// The key may be used in a key agreement protocol.
	// +optional
	KeyAgreement *bool `json:"keyAgreement,omitempty" tf:"key_agreement"`
	// The key may be used to encipher other keys.
	// +optional
	KeyEncipherment *bool `json:"keyEncipherment,omitempty" tf:"key_encipherment"`
}

func (*CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsage.

func (*CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsageCodec

type CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsageCodec) Decode

func (CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsageCodec) Encode

func (CertificateAuthoritySpecConfigX509ConfigKeyUsageBaseKeyUsageCodec) IsEmpty

type CertificateAuthoritySpecConfigX509ConfigKeyUsageCodec

type CertificateAuthoritySpecConfigX509ConfigKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigX509ConfigKeyUsageCodec) Decode

func (CertificateAuthoritySpecConfigX509ConfigKeyUsageCodec) Encode

func (CertificateAuthoritySpecConfigX509ConfigKeyUsageCodec) IsEmpty

type CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsage

type CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	// +optional
	ClientAuth *bool `json:"clientAuth,omitempty" tf:"client_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	// +optional
	CodeSigning *bool `json:"codeSigning,omitempty" tf:"code_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	// +optional
	EmailProtection *bool `json:"emailProtection,omitempty" tf:"email_protection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	// +optional
	OcspSigning *bool `json:"ocspSigning,omitempty" tf:"ocsp_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	// +optional
	ServerAuth *bool `json:"serverAuth,omitempty" tf:"server_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	// +optional
	TimeStamping *bool `json:"timeStamping,omitempty" tf:"time_stamping"`
}

func (*CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsage.

func (*CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec

type CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec) Decode

func (CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec) Encode

func (CertificateAuthoritySpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec) IsEmpty

type CertificateAuthoritySpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages

type CertificateAuthoritySpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateAuthoritySpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages.

func (*CertificateAuthoritySpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecConfigX509ConfigPolicyIDS

type CertificateAuthoritySpecConfigX509ConfigPolicyIDS struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateAuthoritySpecConfigX509ConfigPolicyIDS) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecConfigX509ConfigPolicyIDS.

func (*CertificateAuthoritySpecConfigX509ConfigPolicyIDS) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecKeySpec

type CertificateAuthoritySpecKeySpec struct {
	// The algorithm to use for creating a managed Cloud KMS key for a for a simplified
	// experience. All managed keys will be have their ProtectionLevel as HSM. Possible values: ["SIGN_HASH_ALGORITHM_UNSPECIFIED", "RSA_PSS_2048_SHA256", "RSA_PSS_3072_SHA256", "RSA_PSS_4096_SHA256", "RSA_PKCS1_2048_SHA256", "RSA_PKCS1_3072_SHA256", "RSA_PKCS1_4096_SHA256", "EC_P256_SHA256", "EC_P384_SHA384"]
	// +optional
	Algorithm *string `json:"algorithm,omitempty" tf:"algorithm"`
	// The resource name for an existing Cloud KMS CryptoKeyVersion in the format
	// 'projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*'.
	// +optional
	CloudKmsKeyVersion *string `json:"cloudKmsKeyVersion,omitempty" tf:"cloud_kms_key_version"`
}

func (*CertificateAuthoritySpecKeySpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecKeySpec.

func (*CertificateAuthoritySpecKeySpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthoritySpecKeySpecCodec

type CertificateAuthoritySpecKeySpecCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateAuthoritySpecKeySpecCodec) Decode

func (CertificateAuthoritySpecKeySpecCodec) Encode

func (CertificateAuthoritySpecKeySpecCodec) IsEmpty

type CertificateAuthoritySpecResource

type CertificateAuthoritySpecResource struct {
	Timeouts *base.ResourceTimeout `json:"timeouts,omitempty" tf:"timeouts"`

	ID string `json:"id,omitempty" tf:"id,omitempty"`

	// URLs for accessing content published by this CA, such as the CA certificate and CRLs.
	// +optional
	AccessUrls []CertificateAuthoritySpecAccessUrls `json:"accessUrls,omitempty" tf:"access_urls"`
	// The user provided Resource ID for this Certificate Authority.
	CertificateAuthorityID *string `json:"certificateAuthorityID" tf:"certificate_authority_id"`
	// The config used to create a self-signed X.509 certificate or CSR.
	Config *CertificateAuthoritySpecConfig `json:"config" tf:"config"`
	// The time at which this CertificateAuthority was created.
	//
	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
	// fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +optional
	CreateTime *string `json:"createTime,omitempty" tf:"create_time"`
	// The name of a Cloud Storage bucket where this CertificateAuthority will publish content,
	// such as the CA certificate and CRLs. This must be a bucket name, without any prefixes
	// (such as 'gs://') or suffixes (such as '.googleapis.com'). For example, to use a bucket named
	// my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will be
	// created.
	// +optional
	GcsBucket *string `json:"gcsBucket,omitempty" tf:"gcs_bucket"`
	// This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs.
	// Use with care. Defaults to 'false'.
	// +optional
	IgnoreActiveCertificatesOnDeletion *bool `json:"ignoreActiveCertificatesOnDeletion,omitempty" tf:"ignore_active_certificates_on_deletion"`
	// Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority
	// is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA
	// certificate. Otherwise, it is used to sign a CSR.
	KeySpec *CertificateAuthoritySpecKeySpec `json:"keySpec" tf:"key_spec"`
	// Labels with user-defined metadata.
	//
	// An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
	// "1.3kg", "count": "3" }.
	// +optional
	Labels *map[string]string `json:"labels,omitempty" tf:"labels"`
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
	// "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
	// fractional digits, terminated by 's'. Example: "3.5s".
	// +optional
	Lifetime *string `json:"lifetime,omitempty" tf:"lifetime"`
	// Location of the CertificateAuthority. A full list of valid locations can be found by
	// running 'gcloud privateca locations list'.
	Location *string `json:"location" tf:"location"`
	// The resource name for this CertificateAuthority in the format
	// projects/*/locations/*/certificateAuthorities/*.
	// +optional
	Name *string `json:"name,omitempty" tf:"name"`
	// This CertificateAuthority's certificate chain, including the current
	// CertificateAuthority's certificate. Ordered such that the root issuer is the final
	// element (consistent with RFC 5246). For a self-signed CA, this will only list the current
	// CertificateAuthority's certificate.
	// +optional
	PemCaCertificates []string `json:"pemCaCertificates,omitempty" tf:"pem_ca_certificates"`
	// The name of the CaPool this Certificate Authority belongs to.
	Pool *string `json:"pool" tf:"pool"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	// The State for this CertificateAuthority.
	// +optional
	State *string `json:"state,omitempty" tf:"state"`
	// The Type of this CertificateAuthority.
	//
	// ~> **Note:** For 'SUBORDINATE' Certificate Authorities, they need to
	// be manually activated (via Cloud Console of 'gcloud') before they can
	// issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
	// +optional
	Type *string `json:"type,omitempty" tf:"type"`
	// The time at which this CertificateAuthority was updated.
	//
	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
	// fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +optional
	UpdateTime *string `json:"updateTime,omitempty" tf:"update_time"`
}

func (*CertificateAuthoritySpecResource) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthoritySpecResource.

func (*CertificateAuthoritySpecResource) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateAuthorityStatus

type CertificateAuthorityStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

func (*CertificateAuthorityStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityStatus.

func (*CertificateAuthorityStatus) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateList

type CertificateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of Certificate CRD objects
	Items []Certificate `json:"items,omitempty"`
}

CertificateList is a list of Certificates

func (*CertificateList) DeepCopy

func (in *CertificateList) DeepCopy() *CertificateList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateList.

func (*CertificateList) DeepCopyInto

func (in *CertificateList) DeepCopyInto(out *CertificateList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateList) DeepCopyObject

func (in *CertificateList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type CertificateSpec

type CertificateSpec struct {
	State *CertificateSpecResource `json:"state,omitempty" tf:"-"`

	Resource CertificateSpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

func (*CertificateSpec) DeepCopy

func (in *CertificateSpec) DeepCopy() *CertificateSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpec.

func (*CertificateSpec) DeepCopyInto

func (in *CertificateSpec) DeepCopyInto(out *CertificateSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescription

type CertificateSpecCertificateDescription struct {
	// Describes lists of issuer CA certificate URLs that appear in the "Authority Information Access" extension in the certificate.
	// +optional
	AiaIssuingCertificateUrls []string `json:"aiaIssuingCertificateUrls,omitempty" tf:"aia_issuing_certificate_urls"`
	// Identifies the subjectKeyId of the parent certificate, per https://tools.ietf.org/html/rfc5280#section-4.2.1.1
	// +optional
	AuthorityKeyID []CertificateSpecCertificateDescriptionAuthorityKeyID `json:"authorityKeyID,omitempty" tf:"authority_key_id"`
	// The hash of the x.509 certificate.
	// +optional
	CertFingerprint []CertificateSpecCertificateDescriptionCertFingerprint `json:"certFingerprint,omitempty" tf:"cert_fingerprint"`
	// Describes some of the technical fields in a certificate.
	// +optional
	ConfigValues []CertificateSpecCertificateDescriptionConfigValues `json:"configValues,omitempty" tf:"config_values"`
	// Describes a list of locations to obtain CRL information, i.e. the DistributionPoint.fullName described by https://tools.ietf.org/html/rfc5280#section-4.2.1.13
	// +optional
	CrlDistributionPoints []string `json:"crlDistributionPoints,omitempty" tf:"crl_distribution_points"`
	// A PublicKey describes a public key.
	// +optional
	PublicKey []CertificateSpecCertificateDescriptionPublicKey `json:"publicKey,omitempty" tf:"public_key"`
	// Describes some of the values in a certificate that are related to the subject and lifetime.
	// +optional
	SubjectDescription []CertificateSpecCertificateDescriptionSubjectDescription `json:"subjectDescription,omitempty" tf:"subject_description"`
	// Provides a means of identifiying certificates that contain a particular public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
	// +optional
	SubjectKeyID []CertificateSpecCertificateDescriptionSubjectKeyID `json:"subjectKeyID,omitempty" tf:"subject_key_id"`
}

func (*CertificateSpecCertificateDescription) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescription.

func (*CertificateSpecCertificateDescription) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionAuthorityKeyID

type CertificateSpecCertificateDescriptionAuthorityKeyID struct {
	// Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.
	// +optional
	KeyID *string `json:"keyID,omitempty" tf:"key_id"`
}

func (*CertificateSpecCertificateDescriptionAuthorityKeyID) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionAuthorityKeyID.

func (*CertificateSpecCertificateDescriptionAuthorityKeyID) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionCertFingerprint

type CertificateSpecCertificateDescriptionCertFingerprint struct {
	// The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
	// +optional
	Sha256Hash *string `json:"sha256Hash,omitempty" tf:"sha256_hash"`
}

func (*CertificateSpecCertificateDescriptionCertFingerprint) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionCertFingerprint.

func (*CertificateSpecCertificateDescriptionCertFingerprint) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionConfigValues

type CertificateSpecCertificateDescriptionConfigValues struct {
	// Indicates the intended use for keys that correspond to a certificate.
	// +optional
	KeyUsage []CertificateSpecCertificateDescriptionConfigValuesKeyUsage `json:"keyUsage,omitempty" tf:"key_usage"`
}

func (*CertificateSpecCertificateDescriptionConfigValues) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionConfigValues.

func (*CertificateSpecCertificateDescriptionConfigValues) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionConfigValuesKeyUsage

type CertificateSpecCertificateDescriptionConfigValuesKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	// +optional
	BaseKeyUsage []CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsage `json:"baseKeyUsage,omitempty" tf:"base_key_usage"`
	// Describes high-level ways in which a key may be used.
	// +optional
	ExtendedKeyUsage []CertificateSpecCertificateDescriptionConfigValuesKeyUsageExtendedKeyUsage `json:"extendedKeyUsage,omitempty" tf:"extended_key_usage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// +optional
	UnknownExtendedKeyUsages []CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsages `json:"unknownExtendedKeyUsages,omitempty" tf:"unknown_extended_key_usages"`
}

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionConfigValuesKeyUsage.

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsage

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	// +optional
	KeyUsageOptions []CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsageKeyUsageOptions `json:"keyUsageOptions,omitempty" tf:"key_usage_options"`
}

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsage.

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsageKeyUsageOptions

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsageKeyUsageOptions struct {
	// The key may be used to sign certificates.
	// +optional
	CertSign *bool `json:"certSign,omitempty" tf:"cert_sign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	// +optional
	ContentCommitment *bool `json:"contentCommitment,omitempty" tf:"content_commitment"`
	// The key may be used sign certificate revocation lists.
	// +optional
	CrlSign *bool `json:"crlSign,omitempty" tf:"crl_sign"`
	// The key may be used to encipher data.
	// +optional
	DataEncipherment *bool `json:"dataEncipherment,omitempty" tf:"data_encipherment"`
	// The key may be used to decipher only.
	// +optional
	DecipherOnly *bool `json:"decipherOnly,omitempty" tf:"decipher_only"`
	// The key may be used for digital signatures.
	// +optional
	DigitalSignature *bool `json:"digitalSignature,omitempty" tf:"digital_signature"`
	// The key may be used to encipher only.
	// +optional
	EncipherOnly *bool `json:"encipherOnly,omitempty" tf:"encipher_only"`
	// The key may be used in a key agreement protocol.
	// +optional
	KeyAgreement *bool `json:"keyAgreement,omitempty" tf:"key_agreement"`
	// The key may be used to encipher other keys.
	// +optional
	KeyEncipherment *bool `json:"keyEncipherment,omitempty" tf:"key_encipherment"`
}

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsageKeyUsageOptions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsageKeyUsageOptions.

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageBaseKeyUsageKeyUsageOptions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageExtendedKeyUsage

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	// +optional
	ClientAuth *bool `json:"clientAuth,omitempty" tf:"client_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	// +optional
	CodeSigning *bool `json:"codeSigning,omitempty" tf:"code_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	// +optional
	EmailProtection *bool `json:"emailProtection,omitempty" tf:"email_protection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	// +optional
	OcspSigning *bool `json:"ocspSigning,omitempty" tf:"ocsp_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	// +optional
	ServerAuth *bool `json:"serverAuth,omitempty" tf:"server_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	// +optional
	TimeStamping *bool `json:"timeStamping,omitempty" tf:"time_stamping"`
}

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageExtendedKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionConfigValuesKeyUsageExtendedKeyUsage.

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageExtendedKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsages

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsages struct {
	// Required. Describes how some of the technical fields in a certificate should be populated.
	// +optional
	ObectID []CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsagesObectID `json:"obectID,omitempty" tf:"obect_id"`
}

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsages) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsages.

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsages) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsagesObectID

type CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsagesObectID struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// +optional
	ObjectIDPath []int64 `json:"objectIDPath,omitempty" tf:"object_id_path"`
}

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsagesObectID) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsagesObectID.

func (*CertificateSpecCertificateDescriptionConfigValuesKeyUsageUnknownExtendedKeyUsagesObectID) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionPublicKey

type CertificateSpecCertificateDescriptionPublicKey struct {
	// The format of the public key. Currently, only PEM format is supported.
	// +optional
	Format *string `json:"format,omitempty" tf:"format"`
	// Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.
	// +optional
	Key *string `json:"key,omitempty" tf:"key"`
}

func (*CertificateSpecCertificateDescriptionPublicKey) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionPublicKey.

func (*CertificateSpecCertificateDescriptionPublicKey) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionSubjectDescription

type CertificateSpecCertificateDescriptionSubjectDescription struct {
	// The serial number encoded in lowercase hexadecimal.
	// +optional
	HexSerialNumber *string `json:"hexSerialNumber,omitempty" tf:"hex_serial_number"`
	// For convenience, the actual lifetime of an issued certificate. Corresponds to 'notAfterTime' - 'notBeforeTime'.
	// +optional
	Lifetime *string `json:"lifetime,omitempty" tf:"lifetime"`
	// The time at which the certificate expires.
	// +optional
	NotAfterTime *string `json:"notAfterTime,omitempty" tf:"not_after_time"`
	// The time at which the certificate becomes valid.
	// +optional
	NotBeforeTime *string `json:"notBeforeTime,omitempty" tf:"not_before_time"`
	// Contains distinguished name fields such as the location and organization.
	// +optional
	Subject []CertificateSpecCertificateDescriptionSubjectDescriptionSubject `json:"subject,omitempty" tf:"subject"`
	// The subject alternative name fields.
	// +optional
	SubjectAltName []CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltName `json:"subjectAltName,omitempty" tf:"subject_alt_name"`
}

func (*CertificateSpecCertificateDescriptionSubjectDescription) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionSubjectDescription.

func (*CertificateSpecCertificateDescriptionSubjectDescription) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionSubjectDescriptionSubject

type CertificateSpecCertificateDescriptionSubjectDescriptionSubject struct {
	// The "common name" of the distinguished name.
	// +optional
	CommonName *string `json:"commonName,omitempty" tf:"common_name"`
	// The country code of the subject.
	// +optional
	CountryCode *string `json:"countryCode,omitempty" tf:"country_code"`
	// The locality or city of the subject.
	// +optional
	Locality *string `json:"locality,omitempty" tf:"locality"`
	// The organization of the subject.
	// +optional
	Organization *string `json:"organization,omitempty" tf:"organization"`
	// The organizationalUnit of the subject.
	// +optional
	OrganizationalUnit *string `json:"organizationalUnit,omitempty" tf:"organizational_unit"`
	// The postalCode or city of the subject.
	// +optional
	PostalCode *string `json:"postalCode,omitempty" tf:"postal_code"`
	// The province of the subject.
	// +optional
	Province *string `json:"province,omitempty" tf:"province"`
	// The streetAddress or city of the subject.
	// +optional
	StreetAddress *string `json:"streetAddress,omitempty" tf:"street_address"`
}

func (*CertificateSpecCertificateDescriptionSubjectDescriptionSubject) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionSubjectDescriptionSubject.

func (*CertificateSpecCertificateDescriptionSubjectDescriptionSubject) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltName

type CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltName struct {
	// Contains additional subject alternative name values.
	// +optional
	CustomSans []CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSans `json:"customSans,omitempty" tf:"custom_sans"`
	// Contains only valid, fully-qualified host names.
	// +optional
	DnsNames []string `json:"dnsNames,omitempty" tf:"dns_names"`
	// Contains only valid RFC 2822 E-mail addresses.
	// +optional
	EmailAddresses []string `json:"emailAddresses,omitempty" tf:"email_addresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	// +optional
	IpAddresses []string `json:"ipAddresses,omitempty" tf:"ip_addresses"`
	// Contains only valid RFC 3986 URIs.
	// +optional
	Uris []string `json:"uris,omitempty" tf:"uris"`
}

func (*CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltName) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltName.

func (*CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltName) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSans

type CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSans struct {
	// Required. Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).
	// +optional
	Critical *bool `json:"critical,omitempty" tf:"critical"`
	// Describes how some of the technical fields in a certificate should be populated.
	// +optional
	ObectID []CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSansObectID `json:"obectID,omitempty" tf:"obect_id"`
	// The value of this X.509 extension.
	// +optional
	Value *string `json:"value,omitempty" tf:"value"`
}

func (*CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSans) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSans.

func (*CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSans) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSansObectID

type CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSansObectID struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// +optional
	ObjectIDPath []int64 `json:"objectIDPath,omitempty" tf:"object_id_path"`
}

func (*CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSansObectID) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSansObectID.

func (*CertificateSpecCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSansObectID) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecCertificateDescriptionSubjectKeyID

type CertificateSpecCertificateDescriptionSubjectKeyID struct {
	// Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.
	// +optional
	KeyID *string `json:"keyID,omitempty" tf:"key_id"`
}

func (*CertificateSpecCertificateDescriptionSubjectKeyID) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecCertificateDescriptionSubjectKeyID.

func (*CertificateSpecCertificateDescriptionSubjectKeyID) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfig

type CertificateSpecConfig struct {
	// A PublicKey describes a public key.
	PublicKey *CertificateSpecConfigPublicKey `json:"publicKey" tf:"public_key"`
	// Specifies some of the values in a certificate that are related to the subject.
	SubjectConfig *CertificateSpecConfigSubjectConfig `json:"subjectConfig" tf:"subject_config"`
	// Describes how some of the technical X.509 fields in a certificate should be populated.
	X509Config *CertificateSpecConfigX509Config `json:"x509Config" tf:"x509_config"`
}

func (*CertificateSpecConfig) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfig.

func (*CertificateSpecConfig) DeepCopyInto

func (in *CertificateSpecConfig) DeepCopyInto(out *CertificateSpecConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigCodec

type CertificateSpecConfigCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigCodec) Decode

func (CertificateSpecConfigCodec) Encode

func (CertificateSpecConfigCodec) IsEmpty

type CertificateSpecConfigPublicKey

type CertificateSpecConfigPublicKey struct {
	// The format of the public key. Currently, only PEM format is supported. Possible values: ["KEY_TYPE_UNSPECIFIED", "PEM"]
	Format *string `json:"format" tf:"format"`
	// Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.
	// +optional
	Key *string `json:"key,omitempty" tf:"key"`
}

func (*CertificateSpecConfigPublicKey) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigPublicKey.

func (*CertificateSpecConfigPublicKey) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigPublicKeyCodec

type CertificateSpecConfigPublicKeyCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigPublicKeyCodec) Decode

func (CertificateSpecConfigPublicKeyCodec) Encode

func (CertificateSpecConfigPublicKeyCodec) IsEmpty

type CertificateSpecConfigSubjectConfig

type CertificateSpecConfigSubjectConfig struct {
	// Contains distinguished name fields such as the location and organization.
	Subject *CertificateSpecConfigSubjectConfigSubject `json:"subject" tf:"subject"`
	// The subject alternative name fields.
	// +optional
	SubjectAltName *CertificateSpecConfigSubjectConfigSubjectAltName `json:"subjectAltName,omitempty" tf:"subject_alt_name"`
}

func (*CertificateSpecConfigSubjectConfig) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigSubjectConfig.

func (*CertificateSpecConfigSubjectConfig) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigSubjectConfigCodec

type CertificateSpecConfigSubjectConfigCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigSubjectConfigCodec) Decode

func (CertificateSpecConfigSubjectConfigCodec) Encode

func (CertificateSpecConfigSubjectConfigCodec) IsEmpty

type CertificateSpecConfigSubjectConfigSubject

type CertificateSpecConfigSubjectConfigSubject struct {
	// The common name of the distinguished name.
	CommonName *string `json:"commonName" tf:"common_name"`
	// The country code of the subject.
	// +optional
	CountryCode *string `json:"countryCode,omitempty" tf:"country_code"`
	// The locality or city of the subject.
	// +optional
	Locality *string `json:"locality,omitempty" tf:"locality"`
	// The organization of the subject.
	Organization *string `json:"organization" tf:"organization"`
	// The organizational unit of the subject.
	// +optional
	OrganizationalUnit *string `json:"organizationalUnit,omitempty" tf:"organizational_unit"`
	// The postal code of the subject.
	// +optional
	PostalCode *string `json:"postalCode,omitempty" tf:"postal_code"`
	// The province, territory, or regional state of the subject.
	// +optional
	Province *string `json:"province,omitempty" tf:"province"`
	// The street address of the subject.
	// +optional
	StreetAddress *string `json:"streetAddress,omitempty" tf:"street_address"`
}

func (*CertificateSpecConfigSubjectConfigSubject) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigSubjectConfigSubject.

func (*CertificateSpecConfigSubjectConfigSubject) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigSubjectConfigSubjectAltName

type CertificateSpecConfigSubjectConfigSubjectAltName struct {
	// Contains only valid, fully-qualified host names.
	// +optional
	DnsNames []string `json:"dnsNames,omitempty" tf:"dns_names"`
	// Contains only valid RFC 2822 E-mail addresses.
	// +optional
	EmailAddresses []string `json:"emailAddresses,omitempty" tf:"email_addresses"`
	// Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
	// +optional
	IpAddresses []string `json:"ipAddresses,omitempty" tf:"ip_addresses"`
	// Contains only valid RFC 3986 URIs.
	// +optional
	Uris []string `json:"uris,omitempty" tf:"uris"`
}

func (*CertificateSpecConfigSubjectConfigSubjectAltName) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigSubjectConfigSubjectAltName.

func (*CertificateSpecConfigSubjectConfigSubjectAltName) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigSubjectConfigSubjectAltNameCodec

type CertificateSpecConfigSubjectConfigSubjectAltNameCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigSubjectConfigSubjectAltNameCodec) Decode

func (CertificateSpecConfigSubjectConfigSubjectAltNameCodec) Encode

func (CertificateSpecConfigSubjectConfigSubjectAltNameCodec) IsEmpty

type CertificateSpecConfigSubjectConfigSubjectCodec

type CertificateSpecConfigSubjectConfigSubjectCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigSubjectConfigSubjectCodec) Decode

func (CertificateSpecConfigSubjectConfigSubjectCodec) Encode

func (CertificateSpecConfigSubjectConfigSubjectCodec) IsEmpty

type CertificateSpecConfigX509Config

type CertificateSpecConfigX509Config struct {
	// Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
	// +optional
	AdditionalExtensions []CertificateSpecConfigX509ConfigAdditionalExtensions `json:"additionalExtensions,omitempty" tf:"additional_extensions"`
	// Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
	// "Authority Information Access" extension in the certificate.
	// +optional
	AiaOcspServers []string `json:"aiaOcspServers,omitempty" tf:"aia_ocsp_servers"`
	// Describes values that are relevant in a CA certificate.
	// +optional
	CaOptions *CertificateSpecConfigX509ConfigCaOptions `json:"caOptions,omitempty" tf:"ca_options"`
	// Indicates the intended use for keys that correspond to a certificate.
	KeyUsage *CertificateSpecConfigX509ConfigKeyUsage `json:"keyUsage" tf:"key_usage"`
	// Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// +optional
	PolicyIDS []CertificateSpecConfigX509ConfigPolicyIDS `json:"policyIDS,omitempty" tf:"policy_ids"`
}

func (*CertificateSpecConfigX509Config) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigX509Config.

func (*CertificateSpecConfigX509Config) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigX509ConfigAdditionalExtensions

type CertificateSpecConfigX509ConfigAdditionalExtensions struct {
	// Indicates whether or not this extension is critical (i.e., if the client does not know how to
	// handle this extension, the client should consider this to be an error).
	Critical *bool `json:"critical" tf:"critical"`
	// Describes values that are relevant in a CA certificate.
	ObjectID *CertificateSpecConfigX509ConfigAdditionalExtensionsObjectID `json:"objectID" tf:"object_id"`
	// The value of this X.509 extension. A base64-encoded string.
	Value *string `json:"value" tf:"value"`
}

func (*CertificateSpecConfigX509ConfigAdditionalExtensions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigX509ConfigAdditionalExtensions.

func (*CertificateSpecConfigX509ConfigAdditionalExtensions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigX509ConfigAdditionalExtensionsObjectID

type CertificateSpecConfigX509ConfigAdditionalExtensionsObjectID struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateSpecConfigX509ConfigAdditionalExtensionsObjectID) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigX509ConfigAdditionalExtensionsObjectID.

func (*CertificateSpecConfigX509ConfigAdditionalExtensionsObjectID) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigX509ConfigAdditionalExtensionsObjectIDCodec

type CertificateSpecConfigX509ConfigAdditionalExtensionsObjectIDCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigX509ConfigAdditionalExtensionsObjectIDCodec) Decode

func (CertificateSpecConfigX509ConfigAdditionalExtensionsObjectIDCodec) Encode

func (CertificateSpecConfigX509ConfigAdditionalExtensionsObjectIDCodec) IsEmpty

type CertificateSpecConfigX509ConfigCaOptions

type CertificateSpecConfigX509ConfigCaOptions struct {
	// When true, the "CA" in Basic Constraints extension will be set to true.
	// +optional
	IsCa *bool `json:"isCa,omitempty" tf:"is_ca"`
	// Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
	// subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
	// +optional
	MaxIssuerPathLength *int64 `json:"maxIssuerPathLength,omitempty" tf:"max_issuer_path_length"`
	// When true, the "CA" in Basic Constraints extension will be set to false.
	// If both 'is_ca' and 'non_ca' are unset, the extension will be omitted from the CA certificate.
	// +optional
	NonCa *bool `json:"nonCa,omitempty" tf:"non_ca"`
	// When true, the "path length constraint" in Basic Constraints extension will be set to 0.
	// if both 'max_issuer_path_length' and 'zero_max_issuer_path_length' are unset,
	// the max path length will be omitted from the CA certificate.
	// +optional
	ZeroMaxIssuerPathLength *bool `json:"zeroMaxIssuerPathLength,omitempty" tf:"zero_max_issuer_path_length"`
}

func (*CertificateSpecConfigX509ConfigCaOptions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigX509ConfigCaOptions.

func (*CertificateSpecConfigX509ConfigCaOptions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigX509ConfigCaOptionsCodec

type CertificateSpecConfigX509ConfigCaOptionsCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigX509ConfigCaOptionsCodec) Decode

func (CertificateSpecConfigX509ConfigCaOptionsCodec) Encode

func (CertificateSpecConfigX509ConfigCaOptionsCodec) IsEmpty

type CertificateSpecConfigX509ConfigCodec

type CertificateSpecConfigX509ConfigCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigX509ConfigCodec) Decode

func (CertificateSpecConfigX509ConfigCodec) Encode

func (CertificateSpecConfigX509ConfigCodec) IsEmpty

type CertificateSpecConfigX509ConfigKeyUsage

type CertificateSpecConfigX509ConfigKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	BaseKeyUsage *CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsage `json:"baseKeyUsage" tf:"base_key_usage"`
	// Describes high-level ways in which a key may be used.
	ExtendedKeyUsage *CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsage `json:"extendedKeyUsage" tf:"extended_key_usage"`
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	// +optional
	UnknownExtendedKeyUsages []CertificateSpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages `json:"unknownExtendedKeyUsages,omitempty" tf:"unknown_extended_key_usages"`
}

func (*CertificateSpecConfigX509ConfigKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigX509ConfigKeyUsage.

func (*CertificateSpecConfigX509ConfigKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsage

type CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	// +optional
	CertSign *bool `json:"certSign,omitempty" tf:"cert_sign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	// +optional
	ContentCommitment *bool `json:"contentCommitment,omitempty" tf:"content_commitment"`
	// The key may be used sign certificate revocation lists.
	// +optional
	CrlSign *bool `json:"crlSign,omitempty" tf:"crl_sign"`
	// The key may be used to encipher data.
	// +optional
	DataEncipherment *bool `json:"dataEncipherment,omitempty" tf:"data_encipherment"`
	// The key may be used to decipher only.
	// +optional
	DecipherOnly *bool `json:"decipherOnly,omitempty" tf:"decipher_only"`
	// The key may be used for digital signatures.
	// +optional
	DigitalSignature *bool `json:"digitalSignature,omitempty" tf:"digital_signature"`
	// The key may be used to encipher only.
	// +optional
	EncipherOnly *bool `json:"encipherOnly,omitempty" tf:"encipher_only"`
	// The key may be used in a key agreement protocol.
	// +optional
	KeyAgreement *bool `json:"keyAgreement,omitempty" tf:"key_agreement"`
	// The key may be used to encipher other keys.
	// +optional
	KeyEncipherment *bool `json:"keyEncipherment,omitempty" tf:"key_encipherment"`
}

func (*CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsage.

func (*CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsageCodec

type CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsageCodec) Decode

func (CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsageCodec) Encode

func (CertificateSpecConfigX509ConfigKeyUsageBaseKeyUsageCodec) IsEmpty

type CertificateSpecConfigX509ConfigKeyUsageCodec

type CertificateSpecConfigX509ConfigKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigX509ConfigKeyUsageCodec) Decode

func (CertificateSpecConfigX509ConfigKeyUsageCodec) Encode

func (CertificateSpecConfigX509ConfigKeyUsageCodec) IsEmpty

type CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsage

type CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	// +optional
	ClientAuth *bool `json:"clientAuth,omitempty" tf:"client_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	// +optional
	CodeSigning *bool `json:"codeSigning,omitempty" tf:"code_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	// +optional
	EmailProtection *bool `json:"emailProtection,omitempty" tf:"email_protection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	// +optional
	OcspSigning *bool `json:"ocspSigning,omitempty" tf:"ocsp_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	// +optional
	ServerAuth *bool `json:"serverAuth,omitempty" tf:"server_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	// +optional
	TimeStamping *bool `json:"timeStamping,omitempty" tf:"time_stamping"`
}

func (*CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsage.

func (*CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec

type CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec) Decode

func (CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec) Encode

func (CertificateSpecConfigX509ConfigKeyUsageExtendedKeyUsageCodec) IsEmpty

type CertificateSpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages

type CertificateSpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateSpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages.

func (*CertificateSpecConfigX509ConfigKeyUsageUnknownExtendedKeyUsages) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecConfigX509ConfigPolicyIDS

type CertificateSpecConfigX509ConfigPolicyIDS struct {
	// An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateSpecConfigX509ConfigPolicyIDS) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecConfigX509ConfigPolicyIDS.

func (*CertificateSpecConfigX509ConfigPolicyIDS) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecResource

type CertificateSpecResource struct {
	Timeouts *base.ResourceTimeout `json:"timeouts,omitempty" tf:"timeouts"`

	ID string `json:"id,omitempty" tf:"id,omitempty"`

	// Certificate Authority name.
	// +optional
	CertificateAuthority *string `json:"certificateAuthority,omitempty" tf:"certificate_authority"`
	// Output only. Details regarding the revocation of this Certificate. This Certificate is considered revoked if and only if this field is present.
	// +optional
	CertificateDescription []CertificateSpecCertificateDescription `json:"certificateDescription,omitempty" tf:"certificate_description"`
	// The resource name for a CertificateTemplate used to issue this certificate,
	// in the format 'projects/*/locations/*/certificateTemplates/*'. If this is specified,
	// the caller must have the necessary permission to use this template. If this is
	// omitted, no template will be used. This template must be in the same location
	// as the Certificate.
	// +optional
	CertificateTemplate *string `json:"certificateTemplate,omitempty" tf:"certificate_template"`
	// The config used to create a self-signed X.509 certificate or CSR.
	// +optional
	Config *CertificateSpecConfig `json:"config,omitempty" tf:"config"`
	// The time that this resource was created on the server.
	// This is in RFC3339 text format.
	// +optional
	CreateTime *string `json:"createTime,omitempty" tf:"create_time"`
	// Labels with user-defined metadata to apply to this resource.
	// +optional
	Labels *map[string]string `json:"labels,omitempty" tf:"labels"`
	// The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
	// "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
	// fractional digits, terminated by 's'. Example: "3.5s".
	// +optional
	Lifetime *string `json:"lifetime,omitempty" tf:"lifetime"`
	// Location of the Certificate. A full list of valid locations can be found by
	// running 'gcloud privateca locations list'.
	Location *string `json:"location" tf:"location"`
	// The name for this Certificate.
	Name *string `json:"name" tf:"name"`
	// Output only. The pem-encoded, signed X.509 certificate.
	// +optional
	PemCertificate *string `json:"pemCertificate,omitempty" tf:"pem_certificate"`
	// Required. Expected to be in leaf-to-root order according to RFC 5246.
	// +optional
	PemCertificates []string `json:"pemCertificates,omitempty" tf:"pem_certificates"`
	// Immutable. A pem-encoded X.509 certificate signing request (CSR).
	// +optional
	PemCsr *string `json:"pemCsr,omitempty" tf:"pem_csr"`
	// The name of the CaPool this Certificate belongs to.
	Pool *string `json:"pool" tf:"pool"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	// Output only. Details regarding the revocation of this Certificate. This Certificate is
	// considered revoked if and only if this field is present.
	// +optional
	RevocationDetails []CertificateSpecRevocationDetails `json:"revocationDetails,omitempty" tf:"revocation_details"`
	// Output only. The time at which this CertificateAuthority was updated.
	// This is in RFC3339 text format.
	// +optional
	UpdateTime *string `json:"updateTime,omitempty" tf:"update_time"`
}

func (*CertificateSpecResource) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecResource.

func (*CertificateSpecResource) DeepCopyInto

func (in *CertificateSpecResource) DeepCopyInto(out *CertificateSpecResource)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateSpecRevocationDetails

type CertificateSpecRevocationDetails struct {
	// Indicates why a Certificate was revoked.
	// +optional
	RevocationState *string `json:"revocationState,omitempty" tf:"revocation_state"`
	// The time at which this Certificate was revoked.
	// +optional
	RevocationTime *string `json:"revocationTime,omitempty" tf:"revocation_time"`
}

func (*CertificateSpecRevocationDetails) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSpecRevocationDetails.

func (*CertificateSpecRevocationDetails) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateStatus

type CertificateStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

func (*CertificateStatus) DeepCopy

func (in *CertificateStatus) DeepCopy() *CertificateStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateStatus.

func (*CertificateStatus) DeepCopyInto

func (in *CertificateStatus) DeepCopyInto(out *CertificateStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplate

type CertificateTemplate struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              CertificateTemplateSpec   `json:"spec,omitempty"`
	Status            CertificateTemplateStatus `json:"status,omitempty"`
}

func (*CertificateTemplate) DeepCopy

func (in *CertificateTemplate) DeepCopy() *CertificateTemplate

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplate.

func (*CertificateTemplate) DeepCopyInto

func (in *CertificateTemplate) DeepCopyInto(out *CertificateTemplate)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateTemplate) DeepCopyObject

func (in *CertificateTemplate) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*CertificateTemplate) SetupWebhookWithManager

func (r *CertificateTemplate) SetupWebhookWithManager(mgr ctrl.Manager) error

func (*CertificateTemplate) ValidateCreate

func (r *CertificateTemplate) ValidateCreate() error

ValidateCreate implements webhook.Validator so a webhook will be registered for the type

func (*CertificateTemplate) ValidateDelete

func (r *CertificateTemplate) ValidateDelete() error

ValidateDelete implements webhook.Validator so a webhook will be registered for the type

func (*CertificateTemplate) ValidateUpdate

func (r *CertificateTemplate) ValidateUpdate(old runtime.Object) error

ValidateUpdate implements webhook.Validator so a webhook will be registered for the type

type CertificateTemplateList

type CertificateTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of CertificateTemplate CRD objects
	Items []CertificateTemplate `json:"items,omitempty"`
}

CertificateTemplateList is a list of CertificateTemplates

func (*CertificateTemplateList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateList.

func (*CertificateTemplateList) DeepCopyInto

func (in *CertificateTemplateList) DeepCopyInto(out *CertificateTemplateList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateTemplateList) DeepCopyObject

func (in *CertificateTemplateList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type CertificateTemplateSpec

type CertificateTemplateSpec struct {
	State *CertificateTemplateSpecResource `json:"state,omitempty" tf:"-"`

	Resource CertificateTemplateSpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

func (*CertificateTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpec.

func (*CertificateTemplateSpec) DeepCopyInto

func (in *CertificateTemplateSpec) DeepCopyInto(out *CertificateTemplateSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecIdentityConstraints

type CertificateTemplateSpecIdentityConstraints struct {
	// Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.
	AllowSubjectAltNamesPassthrough *bool `json:"allowSubjectAltNamesPassthrough" tf:"allow_subject_alt_names_passthrough"`
	// Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.
	AllowSubjectPassthrough *bool `json:"allowSubjectPassthrough" tf:"allow_subject_passthrough"`
	// Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel
	// +optional
	CelExpression *CertificateTemplateSpecIdentityConstraintsCelExpression `json:"celExpression,omitempty" tf:"cel_expression"`
}

func (*CertificateTemplateSpecIdentityConstraints) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecIdentityConstraints.

func (*CertificateTemplateSpecIdentityConstraints) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecIdentityConstraintsCelExpression

type CertificateTemplateSpecIdentityConstraintsCelExpression struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	// +optional
	Description *string `json:"description,omitempty" tf:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	// +optional
	Expression *string `json:"expression,omitempty" tf:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	// +optional
	Location *string `json:"location,omitempty" tf:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	// +optional
	Title *string `json:"title,omitempty" tf:"title"`
}

func (*CertificateTemplateSpecIdentityConstraintsCelExpression) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecIdentityConstraintsCelExpression.

func (*CertificateTemplateSpecIdentityConstraintsCelExpression) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecIdentityConstraintsCelExpressionCodec

type CertificateTemplateSpecIdentityConstraintsCelExpressionCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateTemplateSpecIdentityConstraintsCelExpressionCodec) Decode

func (CertificateTemplateSpecIdentityConstraintsCelExpressionCodec) Encode

func (CertificateTemplateSpecIdentityConstraintsCelExpressionCodec) IsEmpty

type CertificateTemplateSpecIdentityConstraintsCodec

type CertificateTemplateSpecIdentityConstraintsCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateTemplateSpecIdentityConstraintsCodec) Decode

func (CertificateTemplateSpecIdentityConstraintsCodec) Encode

func (CertificateTemplateSpecIdentityConstraintsCodec) IsEmpty

type CertificateTemplateSpecPassthroughExtensions

type CertificateTemplateSpecPassthroughExtensions struct {
	// Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with known_extensions to determine the full set of X.509 extensions.
	// +optional
	AdditionalExtensions []CertificateTemplateSpecPassthroughExtensionsAdditionalExtensions `json:"additionalExtensions,omitempty" tf:"additional_extensions"`
	// Optional. A set of named X.509 extensions. Will be combined with additional_extensions to determine the full set of X.509 extensions.
	// +optional
	KnownExtensions []string `json:"knownExtensions,omitempty" tf:"known_extensions"`
}

func (*CertificateTemplateSpecPassthroughExtensions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPassthroughExtensions.

func (*CertificateTemplateSpecPassthroughExtensions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPassthroughExtensionsAdditionalExtensions

type CertificateTemplateSpecPassthroughExtensionsAdditionalExtensions struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateTemplateSpecPassthroughExtensionsAdditionalExtensions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPassthroughExtensionsAdditionalExtensions.

func (*CertificateTemplateSpecPassthroughExtensionsAdditionalExtensions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPassthroughExtensionsCodec

type CertificateTemplateSpecPassthroughExtensionsCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateTemplateSpecPassthroughExtensionsCodec) Decode

func (CertificateTemplateSpecPassthroughExtensionsCodec) Encode

func (CertificateTemplateSpecPassthroughExtensionsCodec) IsEmpty

type CertificateTemplateSpecPredefinedValues

type CertificateTemplateSpecPredefinedValues struct {
	// Optional. Describes custom X.509 extensions.
	// +optional
	AdditionalExtensions []CertificateTemplateSpecPredefinedValuesAdditionalExtensions `json:"additionalExtensions,omitempty" tf:"additional_extensions"`
	// Optional. Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.
	// +optional
	AiaOcspServers []string `json:"aiaOcspServers,omitempty" tf:"aia_ocsp_servers"`
	// Optional. Describes options in this X509Parameters that are relevant in a CA certificate.
	// +optional
	CaOptions *CertificateTemplateSpecPredefinedValuesCaOptions `json:"caOptions,omitempty" tf:"ca_options"`
	// Optional. Indicates the intended use for keys that correspond to a certificate.
	// +optional
	KeyUsage *CertificateTemplateSpecPredefinedValuesKeyUsage `json:"keyUsage,omitempty" tf:"key_usage"`
	// Optional. Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
	// +optional
	PolicyIDS []CertificateTemplateSpecPredefinedValuesPolicyIDS `json:"policyIDS,omitempty" tf:"policy_ids"`
}

func (*CertificateTemplateSpecPredefinedValues) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPredefinedValues.

func (*CertificateTemplateSpecPredefinedValues) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPredefinedValuesAdditionalExtensions

type CertificateTemplateSpecPredefinedValuesAdditionalExtensions struct {
	// Optional. Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).
	// +optional
	Critical *bool `json:"critical,omitempty" tf:"critical"`
	// Required. The OID for this X.509 extension.
	ObjectID *CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectID `json:"objectID" tf:"object_id"`
	// Required. The value of this X.509 extension.
	Value *string `json:"value" tf:"value"`
}

func (*CertificateTemplateSpecPredefinedValuesAdditionalExtensions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPredefinedValuesAdditionalExtensions.

func (*CertificateTemplateSpecPredefinedValuesAdditionalExtensions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectID

type CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectID struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectID) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectID.

func (*CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectID) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectIDCodec

type CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectIDCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectIDCodec) Decode

func (CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectIDCodec) Encode

func (CertificateTemplateSpecPredefinedValuesAdditionalExtensionsObjectIDCodec) IsEmpty

type CertificateTemplateSpecPredefinedValuesCaOptions

type CertificateTemplateSpecPredefinedValuesCaOptions struct {
	// Optional. Refers to the "CA" X.509 extension, which is a boolean value. When this value is missing, the extension will be omitted from the CA certificate.
	// +optional
	IsCa *bool `json:"isCa,omitempty" tf:"is_ca"`
	// Optional. Refers to the path length restriction X.509 extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. If this value is missing, the max path length will be omitted from the CA certificate.
	// +optional
	MaxIssuerPathLength *int64 `json:"maxIssuerPathLength,omitempty" tf:"max_issuer_path_length"`
}

func (*CertificateTemplateSpecPredefinedValuesCaOptions) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPredefinedValuesCaOptions.

func (*CertificateTemplateSpecPredefinedValuesCaOptions) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPredefinedValuesCaOptionsCodec

type CertificateTemplateSpecPredefinedValuesCaOptionsCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateTemplateSpecPredefinedValuesCaOptionsCodec) Decode

func (CertificateTemplateSpecPredefinedValuesCaOptionsCodec) Encode

func (CertificateTemplateSpecPredefinedValuesCaOptionsCodec) IsEmpty

type CertificateTemplateSpecPredefinedValuesCodec

type CertificateTemplateSpecPredefinedValuesCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateTemplateSpecPredefinedValuesCodec) Decode

func (CertificateTemplateSpecPredefinedValuesCodec) Encode

func (CertificateTemplateSpecPredefinedValuesCodec) IsEmpty

type CertificateTemplateSpecPredefinedValuesKeyUsage

type CertificateTemplateSpecPredefinedValuesKeyUsage struct {
	// Describes high-level ways in which a key may be used.
	// +optional
	BaseKeyUsage *CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsage `json:"baseKeyUsage,omitempty" tf:"base_key_usage"`
	// Detailed scenarios in which a key may be used.
	// +optional
	ExtendedKeyUsage *CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsage `json:"extendedKeyUsage,omitempty" tf:"extended_key_usage"`
	// Used to describe extended key usages that are not listed in the KeyUsage.ExtendedKeyUsageOptions message.
	// +optional
	UnknownExtendedKeyUsages []CertificateTemplateSpecPredefinedValuesKeyUsageUnknownExtendedKeyUsages `json:"unknownExtendedKeyUsages,omitempty" tf:"unknown_extended_key_usages"`
}

func (*CertificateTemplateSpecPredefinedValuesKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPredefinedValuesKeyUsage.

func (*CertificateTemplateSpecPredefinedValuesKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsage

type CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsage struct {
	// The key may be used to sign certificates.
	// +optional
	CertSign *bool `json:"certSign,omitempty" tf:"cert_sign"`
	// The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
	// +optional
	ContentCommitment *bool `json:"contentCommitment,omitempty" tf:"content_commitment"`
	// The key may be used sign certificate revocation lists.
	// +optional
	CrlSign *bool `json:"crlSign,omitempty" tf:"crl_sign"`
	// The key may be used to encipher data.
	// +optional
	DataEncipherment *bool `json:"dataEncipherment,omitempty" tf:"data_encipherment"`
	// The key may be used to decipher only.
	// +optional
	DecipherOnly *bool `json:"decipherOnly,omitempty" tf:"decipher_only"`
	// The key may be used for digital signatures.
	// +optional
	DigitalSignature *bool `json:"digitalSignature,omitempty" tf:"digital_signature"`
	// The key may be used to encipher only.
	// +optional
	EncipherOnly *bool `json:"encipherOnly,omitempty" tf:"encipher_only"`
	// The key may be used in a key agreement protocol.
	// +optional
	KeyAgreement *bool `json:"keyAgreement,omitempty" tf:"key_agreement"`
	// The key may be used to encipher other keys.
	// +optional
	KeyEncipherment *bool `json:"keyEncipherment,omitempty" tf:"key_encipherment"`
}

func (*CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsage.

func (*CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsageCodec

type CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsageCodec) Decode

func (CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsageCodec) Encode

func (CertificateTemplateSpecPredefinedValuesKeyUsageBaseKeyUsageCodec) IsEmpty

type CertificateTemplateSpecPredefinedValuesKeyUsageCodec

type CertificateTemplateSpecPredefinedValuesKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateTemplateSpecPredefinedValuesKeyUsageCodec) Decode

func (CertificateTemplateSpecPredefinedValuesKeyUsageCodec) Encode

func (CertificateTemplateSpecPredefinedValuesKeyUsageCodec) IsEmpty

type CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsage

type CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsage struct {
	// Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
	// +optional
	ClientAuth *bool `json:"clientAuth,omitempty" tf:"client_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
	// +optional
	CodeSigning *bool `json:"codeSigning,omitempty" tf:"code_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
	// +optional
	EmailProtection *bool `json:"emailProtection,omitempty" tf:"email_protection"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
	// +optional
	OcspSigning *bool `json:"ocspSigning,omitempty" tf:"ocsp_signing"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
	// +optional
	ServerAuth *bool `json:"serverAuth,omitempty" tf:"server_auth"`
	// Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
	// +optional
	TimeStamping *bool `json:"timeStamping,omitempty" tf:"time_stamping"`
}

func (*CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsage) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsage.

func (*CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsage) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsageCodec

type CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsageCodec struct {
}

+k8s:deepcopy-gen=false

func (CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsageCodec) Decode

func (CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsageCodec) Encode

func (CertificateTemplateSpecPredefinedValuesKeyUsageExtendedKeyUsageCodec) IsEmpty

type CertificateTemplateSpecPredefinedValuesKeyUsageUnknownExtendedKeyUsages

type CertificateTemplateSpecPredefinedValuesKeyUsageUnknownExtendedKeyUsages struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateTemplateSpecPredefinedValuesKeyUsageUnknownExtendedKeyUsages) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPredefinedValuesKeyUsageUnknownExtendedKeyUsages.

func (*CertificateTemplateSpecPredefinedValuesKeyUsageUnknownExtendedKeyUsages) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecPredefinedValuesPolicyIDS

type CertificateTemplateSpecPredefinedValuesPolicyIDS struct {
	// Required. The parts of an OID path. The most significant parts of the path come first.
	ObjectIDPath []int64 `json:"objectIDPath" tf:"object_id_path"`
}

func (*CertificateTemplateSpecPredefinedValuesPolicyIDS) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecPredefinedValuesPolicyIDS.

func (*CertificateTemplateSpecPredefinedValuesPolicyIDS) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateSpecResource

type CertificateTemplateSpecResource struct {
	Timeouts *base.ResourceTimeout `json:"timeouts,omitempty" tf:"timeouts"`

	ID string `json:"id,omitempty" tf:"id,omitempty"`

	// Output only. The time at which this CertificateTemplate was created.
	// +optional
	CreateTime *string `json:"createTime,omitempty" tf:"create_time"`
	// Optional. A human-readable description of scenarios this template is intended for.
	// +optional
	Description *string `json:"description,omitempty" tf:"description"`
	// Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is omitted, then this template will not add restrictions on a certificate's identity.
	// +optional
	IdentityConstraints *CertificateTemplateSpecIdentityConstraints `json:"identityConstraints,omitempty" tf:"identity_constraints"`
	// Optional. Labels with user-defined metadata.
	// +optional
	Labels *map[string]string `json:"labels,omitempty" tf:"labels"`
	// The location for the resource
	Location *string `json:"location" tf:"location"`
	// The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
	Name *string `json:"name" tf:"name"`
	// Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate. If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
	// +optional
	PassthroughExtensions *CertificateTemplateSpecPassthroughExtensions `json:"passthroughExtensions,omitempty" tf:"passthrough_extensions"`
	// Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the certificate request includes conflicting values for the same properties, they will be overwritten by the values defined here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the certificate issuance request will fail.
	// +optional
	PredefinedValues *CertificateTemplateSpecPredefinedValues `json:"predefinedValues,omitempty" tf:"predefined_values"`
	// The project for the resource
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	// Output only. The time at which this CertificateTemplate was updated.
	// +optional
	UpdateTime *string `json:"updateTime,omitempty" tf:"update_time"`
}

func (*CertificateTemplateSpecResource) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateSpecResource.

func (*CertificateTemplateSpecResource) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateTemplateStatus

type CertificateTemplateStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

func (*CertificateTemplateStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateTemplateStatus.

func (*CertificateTemplateStatus) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL