We recommend using Azure Native.
azure.keyvault.CertificateIssuer
Explore with Pulumi AI
Manages a Key Vault Certificate Issuer.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const current = azure.core.getClientConfig({});
const example = new azure.core.ResourceGroup("example", {
name: "example-resources",
location: "West Europe",
});
const exampleKeyVault = new azure.keyvault.KeyVault("example", {
name: "examplekeyvault",
location: example.location,
resourceGroupName: example.name,
skuName: "standard",
tenantId: current.then(current => current.tenantId),
});
const exampleCertificateIssuer = new azure.keyvault.CertificateIssuer("example", {
name: "example-issuer",
orgId: "ExampleOrgName",
keyVaultId: exampleKeyVault.id,
providerName: "DigiCert",
accountId: "0000",
password: "example-password",
});
import pulumi
import pulumi_azure as azure
current = azure.core.get_client_config()
example = azure.core.ResourceGroup("example",
name="example-resources",
location="West Europe")
example_key_vault = azure.keyvault.KeyVault("example",
name="examplekeyvault",
location=example.location,
resource_group_name=example.name,
sku_name="standard",
tenant_id=current.tenant_id)
example_certificate_issuer = azure.keyvault.CertificateIssuer("example",
name="example-issuer",
org_id="ExampleOrgName",
key_vault_id=example_key_vault.id,
provider_name="DigiCert",
account_id="0000",
password="example-password")
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
current, err := core.GetClientConfig(ctx, nil, nil)
if err != nil {
return err
}
example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
Name: pulumi.String("example-resources"),
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
Name: pulumi.String("examplekeyvault"),
Location: example.Location,
ResourceGroupName: example.Name,
SkuName: pulumi.String("standard"),
TenantId: pulumi.String(current.TenantId),
})
if err != nil {
return err
}
_, err = keyvault.NewCertificateIssuer(ctx, "example", &keyvault.CertificateIssuerArgs{
Name: pulumi.String("example-issuer"),
OrgId: pulumi.String("ExampleOrgName"),
KeyVaultId: exampleKeyVault.ID(),
ProviderName: pulumi.String("DigiCert"),
AccountId: pulumi.String("0000"),
Password: pulumi.String("example-password"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var current = Azure.Core.GetClientConfig.Invoke();
var example = new Azure.Core.ResourceGroup("example", new()
{
Name = "example-resources",
Location = "West Europe",
});
var exampleKeyVault = new Azure.KeyVault.KeyVault("example", new()
{
Name = "examplekeyvault",
Location = example.Location,
ResourceGroupName = example.Name,
SkuName = "standard",
TenantId = current.Apply(getClientConfigResult => getClientConfigResult.TenantId),
});
var exampleCertificateIssuer = new Azure.KeyVault.CertificateIssuer("example", new()
{
Name = "example-issuer",
OrgId = "ExampleOrgName",
KeyVaultId = exampleKeyVault.Id,
ProviderName = "DigiCert",
AccountId = "0000",
Password = "example-password",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.CoreFunctions;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.keyvault.KeyVault;
import com.pulumi.azure.keyvault.KeyVaultArgs;
import com.pulumi.azure.keyvault.CertificateIssuer;
import com.pulumi.azure.keyvault.CertificateIssuerArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var current = CoreFunctions.getClientConfig();
var example = new ResourceGroup("example", ResourceGroupArgs.builder()
.name("example-resources")
.location("West Europe")
.build());
var exampleKeyVault = new KeyVault("exampleKeyVault", KeyVaultArgs.builder()
.name("examplekeyvault")
.location(example.location())
.resourceGroupName(example.name())
.skuName("standard")
.tenantId(current.applyValue(getClientConfigResult -> getClientConfigResult.tenantId()))
.build());
var exampleCertificateIssuer = new CertificateIssuer("exampleCertificateIssuer", CertificateIssuerArgs.builder()
.name("example-issuer")
.orgId("ExampleOrgName")
.keyVaultId(exampleKeyVault.id())
.providerName("DigiCert")
.accountId("0000")
.password("example-password")
.build());
}
}
resources:
example:
type: azure:core:ResourceGroup
properties:
name: example-resources
location: West Europe
exampleKeyVault:
type: azure:keyvault:KeyVault
name: example
properties:
name: examplekeyvault
location: ${example.location}
resourceGroupName: ${example.name}
skuName: standard
tenantId: ${current.tenantId}
exampleCertificateIssuer:
type: azure:keyvault:CertificateIssuer
name: example
properties:
name: example-issuer
orgId: ExampleOrgName
keyVaultId: ${exampleKeyVault.id}
providerName: DigiCert
accountId: '0000'
password: example-password
variables:
current:
fn::invoke:
Function: azure:core:getClientConfig
Arguments: {}
Create CertificateIssuer Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new CertificateIssuer(name: string, args: CertificateIssuerArgs, opts?: CustomResourceOptions);
@overload
def CertificateIssuer(resource_name: str,
args: CertificateIssuerArgs,
opts: Optional[ResourceOptions] = None)
@overload
def CertificateIssuer(resource_name: str,
opts: Optional[ResourceOptions] = None,
key_vault_id: Optional[str] = None,
provider_name: Optional[str] = None,
account_id: Optional[str] = None,
admins: Optional[Sequence[CertificateIssuerAdminArgs]] = None,
name: Optional[str] = None,
org_id: Optional[str] = None,
password: Optional[str] = None)
func NewCertificateIssuer(ctx *Context, name string, args CertificateIssuerArgs, opts ...ResourceOption) (*CertificateIssuer, error)
public CertificateIssuer(string name, CertificateIssuerArgs args, CustomResourceOptions? opts = null)
public CertificateIssuer(String name, CertificateIssuerArgs args)
public CertificateIssuer(String name, CertificateIssuerArgs args, CustomResourceOptions options)
type: azure:keyvault:CertificateIssuer
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args CertificateIssuerArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CertificateIssuerArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CertificateIssuerArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CertificateIssuerArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CertificateIssuerArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var certificateIssuerResource = new Azure.KeyVault.CertificateIssuer("certificateIssuerResource", new()
{
KeyVaultId = "string",
ProviderName = "string",
AccountId = "string",
Admins = new[]
{
new Azure.KeyVault.Inputs.CertificateIssuerAdminArgs
{
EmailAddress = "string",
FirstName = "string",
LastName = "string",
Phone = "string",
},
},
Name = "string",
OrgId = "string",
Password = "string",
});
example, err := keyvault.NewCertificateIssuer(ctx, "certificateIssuerResource", &keyvault.CertificateIssuerArgs{
KeyVaultId: pulumi.String("string"),
ProviderName: pulumi.String("string"),
AccountId: pulumi.String("string"),
Admins: keyvault.CertificateIssuerAdminArray{
&keyvault.CertificateIssuerAdminArgs{
EmailAddress: pulumi.String("string"),
FirstName: pulumi.String("string"),
LastName: pulumi.String("string"),
Phone: pulumi.String("string"),
},
},
Name: pulumi.String("string"),
OrgId: pulumi.String("string"),
Password: pulumi.String("string"),
})
var certificateIssuerResource = new CertificateIssuer("certificateIssuerResource", CertificateIssuerArgs.builder()
.keyVaultId("string")
.providerName("string")
.accountId("string")
.admins(CertificateIssuerAdminArgs.builder()
.emailAddress("string")
.firstName("string")
.lastName("string")
.phone("string")
.build())
.name("string")
.orgId("string")
.password("string")
.build());
certificate_issuer_resource = azure.keyvault.CertificateIssuer("certificateIssuerResource",
key_vault_id="string",
provider_name="string",
account_id="string",
admins=[azure.keyvault.CertificateIssuerAdminArgs(
email_address="string",
first_name="string",
last_name="string",
phone="string",
)],
name="string",
org_id="string",
password="string")
const certificateIssuerResource = new azure.keyvault.CertificateIssuer("certificateIssuerResource", {
keyVaultId: "string",
providerName: "string",
accountId: "string",
admins: [{
emailAddress: "string",
firstName: "string",
lastName: "string",
phone: "string",
}],
name: "string",
orgId: "string",
password: "string",
});
type: azure:keyvault:CertificateIssuer
properties:
accountId: string
admins:
- emailAddress: string
firstName: string
lastName: string
phone: string
keyVaultId: string
name: string
orgId: string
password: string
providerName: string
CertificateIssuer Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The CertificateIssuer resource accepts the following input properties:
- Key
Vault stringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- Provider
Name string - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
. - Account
Id string - The account number with the third-party Certificate Issuer.
- Admins
List<Certificate
Issuer Admin> - One or more
admin
blocks as defined below. - Name string
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- Org
Id string - The ID of the organization as provided to the issuer.
- Password string
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- Key
Vault stringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- Provider
Name string - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
. - Account
Id string - The account number with the third-party Certificate Issuer.
- Admins
[]Certificate
Issuer Admin Args - One or more
admin
blocks as defined below. - Name string
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- Org
Id string - The ID of the organization as provided to the issuer.
- Password string
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- key
Vault StringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- provider
Name String - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
. - account
Id String - The account number with the third-party Certificate Issuer.
- admins
List<Certificate
Issuer Admin> - One or more
admin
blocks as defined below. - name String
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- org
Id String - The ID of the organization as provided to the issuer.
- password String
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- key
Vault stringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- provider
Name string - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
. - account
Id string - The account number with the third-party Certificate Issuer.
- admins
Certificate
Issuer Admin[] - One or more
admin
blocks as defined below. - name string
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- org
Id string - The ID of the organization as provided to the issuer.
- password string
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- key_
vault_ strid - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- provider_
name str - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
. - account_
id str - The account number with the third-party Certificate Issuer.
- admins
Sequence[Certificate
Issuer Admin Args] - One or more
admin
blocks as defined below. - name str
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- org_
id str - The ID of the organization as provided to the issuer.
- password str
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- key
Vault StringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- provider
Name String - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
. - account
Id String - The account number with the third-party Certificate Issuer.
- admins List<Property Map>
- One or more
admin
blocks as defined below. - name String
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- org
Id String - The ID of the organization as provided to the issuer.
- password String
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
Outputs
All input properties are implicitly available as output properties. Additionally, the CertificateIssuer resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing CertificateIssuer Resource
Get an existing CertificateIssuer resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: CertificateIssuerState, opts?: CustomResourceOptions): CertificateIssuer
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[str] = None,
admins: Optional[Sequence[CertificateIssuerAdminArgs]] = None,
key_vault_id: Optional[str] = None,
name: Optional[str] = None,
org_id: Optional[str] = None,
password: Optional[str] = None,
provider_name: Optional[str] = None) -> CertificateIssuer
func GetCertificateIssuer(ctx *Context, name string, id IDInput, state *CertificateIssuerState, opts ...ResourceOption) (*CertificateIssuer, error)
public static CertificateIssuer Get(string name, Input<string> id, CertificateIssuerState? state, CustomResourceOptions? opts = null)
public static CertificateIssuer get(String name, Output<String> id, CertificateIssuerState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Id string - The account number with the third-party Certificate Issuer.
- Admins
List<Certificate
Issuer Admin> - One or more
admin
blocks as defined below. - Key
Vault stringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- Name string
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- Org
Id string - The ID of the organization as provided to the issuer.
- Password string
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- Provider
Name string - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
.
- Account
Id string - The account number with the third-party Certificate Issuer.
- Admins
[]Certificate
Issuer Admin Args - One or more
admin
blocks as defined below. - Key
Vault stringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- Name string
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- Org
Id string - The ID of the organization as provided to the issuer.
- Password string
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- Provider
Name string - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
.
- account
Id String - The account number with the third-party Certificate Issuer.
- admins
List<Certificate
Issuer Admin> - One or more
admin
blocks as defined below. - key
Vault StringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- name String
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- org
Id String - The ID of the organization as provided to the issuer.
- password String
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- provider
Name String - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
.
- account
Id string - The account number with the third-party Certificate Issuer.
- admins
Certificate
Issuer Admin[] - One or more
admin
blocks as defined below. - key
Vault stringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- name string
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- org
Id string - The ID of the organization as provided to the issuer.
- password string
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- provider
Name string - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
.
- account_
id str - The account number with the third-party Certificate Issuer.
- admins
Sequence[Certificate
Issuer Admin Args] - One or more
admin
blocks as defined below. - key_
vault_ strid - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- name str
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- org_
id str - The ID of the organization as provided to the issuer.
- password str
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- provider_
name str - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
.
- account
Id String - The account number with the third-party Certificate Issuer.
- admins List<Property Map>
- One or more
admin
blocks as defined below. - key
Vault StringId - The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
- name String
- The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
- org
Id String - The ID of the organization as provided to the issuer.
- password String
- The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
- provider
Name String - The name of the third-party Certificate Issuer. Possible values are:
DigiCert
,GlobalSign
,OneCertV2-PrivateCA
,OneCertV2-PublicCA
andSslAdminV2
.
Supporting Types
CertificateIssuerAdmin, CertificateIssuerAdminArgs
- Email
Address string - E-mail address of the admin.
- First
Name string - First name of the admin.
- Last
Name string - Last name of the admin.
- Phone string
- Phone number of the admin.
- Email
Address string - E-mail address of the admin.
- First
Name string - First name of the admin.
- Last
Name string - Last name of the admin.
- Phone string
- Phone number of the admin.
- email
Address String - E-mail address of the admin.
- first
Name String - First name of the admin.
- last
Name String - Last name of the admin.
- phone String
- Phone number of the admin.
- email
Address string - E-mail address of the admin.
- first
Name string - First name of the admin.
- last
Name string - Last name of the admin.
- phone string
- Phone number of the admin.
- email_
address str - E-mail address of the admin.
- first_
name str - First name of the admin.
- last_
name str - Last name of the admin.
- phone str
- Phone number of the admin.
- email
Address String - E-mail address of the admin.
- first
Name String - First name of the admin.
- last
Name String - Last name of the admin.
- phone String
- Phone number of the admin.
Import
Key Vault Certificate Issuers can be imported using the resource id
, e.g.
$ pulumi import azure:keyvault/certificateIssuer:CertificateIssuer example "https://key-vault-name.vault.azure.net/certificates/issuers/example"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
azurerm
Terraform Provider.