1. Packages
  2. Google Cloud Native
  3. API Docs
  4. networksecurity
  5. networksecurity/v1
  6. getClientTlsPolicy

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

google-native.networksecurity/v1.getClientTlsPolicy

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

    Gets details of a single ClientTlsPolicy.

    Using getClientTlsPolicy

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getClientTlsPolicy(args: GetClientTlsPolicyArgs, opts?: InvokeOptions): Promise<GetClientTlsPolicyResult>
    function getClientTlsPolicyOutput(args: GetClientTlsPolicyOutputArgs, opts?: InvokeOptions): Output<GetClientTlsPolicyResult>
    def get_client_tls_policy(client_tls_policy_id: Optional[str] = None,
                              location: Optional[str] = None,
                              project: Optional[str] = None,
                              opts: Optional[InvokeOptions] = None) -> GetClientTlsPolicyResult
    def get_client_tls_policy_output(client_tls_policy_id: Optional[pulumi.Input[str]] = None,
                              location: Optional[pulumi.Input[str]] = None,
                              project: Optional[pulumi.Input[str]] = None,
                              opts: Optional[InvokeOptions] = None) -> Output[GetClientTlsPolicyResult]
    func LookupClientTlsPolicy(ctx *Context, args *LookupClientTlsPolicyArgs, opts ...InvokeOption) (*LookupClientTlsPolicyResult, error)
    func LookupClientTlsPolicyOutput(ctx *Context, args *LookupClientTlsPolicyOutputArgs, opts ...InvokeOption) LookupClientTlsPolicyResultOutput

    > Note: This function is named LookupClientTlsPolicy in the Go SDK.

    public static class GetClientTlsPolicy 
    {
        public static Task<GetClientTlsPolicyResult> InvokeAsync(GetClientTlsPolicyArgs args, InvokeOptions? opts = null)
        public static Output<GetClientTlsPolicyResult> Invoke(GetClientTlsPolicyInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetClientTlsPolicyResult> getClientTlsPolicy(GetClientTlsPolicyArgs args, InvokeOptions options)
    // Output-based functions aren't available in Java yet
    
    fn::invoke:
      function: google-native:networksecurity/v1:getClientTlsPolicy
      arguments:
        # arguments dictionary

    The following arguments are supported:

    getClientTlsPolicy Result

    The following output properties are available:

    ClientCertificate Pulumi.GoogleNative.NetworkSecurity.V1.Outputs.GoogleCloudNetworksecurityV1CertificateProviderResponse
    Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
    CreateTime string
    The timestamp when the resource was created.
    Description string
    Optional. Free-text description of the resource.
    Labels Dictionary<string, string>
    Optional. Set of label tags associated with the resource.
    Name string
    Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
    ServerValidationCa List<Pulumi.GoogleNative.NetworkSecurity.V1.Outputs.ValidationCAResponse>
    Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
    Sni string
    Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
    UpdateTime string
    The timestamp when the resource was updated.
    ClientCertificate GoogleCloudNetworksecurityV1CertificateProviderResponse
    Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
    CreateTime string
    The timestamp when the resource was created.
    Description string
    Optional. Free-text description of the resource.
    Labels map[string]string
    Optional. Set of label tags associated with the resource.
    Name string
    Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
    ServerValidationCa []ValidationCAResponse
    Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
    Sni string
    Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
    UpdateTime string
    The timestamp when the resource was updated.
    clientCertificate GoogleCloudNetworksecurityV1CertificateProviderResponse
    Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
    createTime String
    The timestamp when the resource was created.
    description String
    Optional. Free-text description of the resource.
    labels Map<String,String>
    Optional. Set of label tags associated with the resource.
    name String
    Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
    serverValidationCa List<ValidationCAResponse>
    Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
    sni String
    Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
    updateTime String
    The timestamp when the resource was updated.
    clientCertificate GoogleCloudNetworksecurityV1CertificateProviderResponse
    Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
    createTime string
    The timestamp when the resource was created.
    description string
    Optional. Free-text description of the resource.
    labels {[key: string]: string}
    Optional. Set of label tags associated with the resource.
    name string
    Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
    serverValidationCa ValidationCAResponse[]
    Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
    sni string
    Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
    updateTime string
    The timestamp when the resource was updated.
    client_certificate GoogleCloudNetworksecurityV1CertificateProviderResponse
    Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
    create_time str
    The timestamp when the resource was created.
    description str
    Optional. Free-text description of the resource.
    labels Mapping[str, str]
    Optional. Set of label tags associated with the resource.
    name str
    Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
    server_validation_ca Sequence[ValidationCAResponse]
    Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
    sni str
    Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
    update_time str
    The timestamp when the resource was updated.
    clientCertificate Property Map
    Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
    createTime String
    The timestamp when the resource was created.
    description String
    Optional. Free-text description of the resource.
    labels Map<String>
    Optional. Set of label tags associated with the resource.
    name String
    Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
    serverValidationCa List<Property Map>
    Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
    sni String
    Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
    updateTime String
    The timestamp when the resource was updated.

    Supporting Types

    CertificateProviderInstanceResponse

    PluginInstance string
    Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
    PluginInstance string
    Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
    pluginInstance String
    Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
    pluginInstance string
    Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
    plugin_instance str
    Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
    pluginInstance String
    Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.

    GoogleCloudNetworksecurityV1CertificateProviderResponse

    CertificateProviderInstance Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    GrpcEndpoint Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the cert and private key.
    CertificateProviderInstance CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    GrpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the cert and private key.
    certificateProviderInstance CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    grpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the cert and private key.
    certificateProviderInstance CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    grpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the cert and private key.
    certificate_provider_instance CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    grpc_endpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the cert and private key.
    certificateProviderInstance Property Map
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    grpcEndpoint Property Map
    gRPC specific configuration to access the gRPC server to obtain the cert and private key.

    GoogleCloudNetworksecurityV1GrpcEndpointResponse

    TargetUri string
    The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
    TargetUri string
    The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
    targetUri String
    The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
    targetUri string
    The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
    target_uri str
    The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
    targetUri String
    The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".

    ValidationCAResponse

    CertificateProviderInstance Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    GrpcEndpoint Pulumi.GoogleNative.NetworkSecurity.V1.Inputs.GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the CA certificate.
    CertificateProviderInstance CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    GrpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the CA certificate.
    certificateProviderInstance CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    grpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the CA certificate.
    certificateProviderInstance CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    grpcEndpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the CA certificate.
    certificate_provider_instance CertificateProviderInstanceResponse
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    grpc_endpoint GoogleCloudNetworksecurityV1GrpcEndpointResponse
    gRPC specific configuration to access the gRPC server to obtain the CA certificate.
    certificateProviderInstance Property Map
    The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
    grpcEndpoint Property Map
    gRPC specific configuration to access the gRPC server to obtain the CA certificate.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi