trust_configs

Creates, updates, deletes, gets or lists a trust_configs resource.

Overview

Name	trust_configs
Type	Resource
Id	google.certificatemanager.trust_configs

Fields

The following fields are returned by SELECT queries:

get

Name	Datatype	Description
name	string	Identifier. A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern projects/*/locations/*/trustConfigs/*.
allowlistedCertificates	array	Optional. A certificate matching an allowlisted certificate is always considered valid as long as the certificate is parseable, proof of private key possession is established, and constraints on the certificate's SAN field are met.
createTime	string (google-datetime)	Output only. The creation timestamp of a TrustConfig.
description	string	Optional. One or more paragraphs of text description of a TrustConfig.
etag	string	This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
labels	object	Optional. Set of labels associated with a TrustConfig.
spiffeTrustStores	object	Optional. Defines a mapping from a trust domain to a TrustStore. This is used for SPIFFE certificate validation.
tags	object	Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing"
trustStores	array	Optional. Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.
updateTime	string (google-datetime)	Output only. The last update timestamp of a TrustConfig.

list

Name	Datatype	Description
name	string	Identifier. A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern projects/*/locations/*/trustConfigs/*.
allowlistedCertificates	array	Optional. A certificate matching an allowlisted certificate is always considered valid as long as the certificate is parseable, proof of private key possession is established, and constraints on the certificate's SAN field are met.
createTime	string (google-datetime)	Output only. The creation timestamp of a TrustConfig.
description	string	Optional. One or more paragraphs of text description of a TrustConfig.
etag	string	This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
labels	object	Optional. Set of labels associated with a TrustConfig.
spiffeTrustStores	object	Optional. Defines a mapping from a trust domain to a TrustStore. This is used for SPIFFE certificate validation.
tags	object	Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing"
trustStores	array	Optional. Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.
updateTime	string (google-datetime)	Output only. The last update timestamp of a TrustConfig.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	projectsId, locationsId, trustConfigsId		Gets details of a single TrustConfig.
list	select	projectsId, locationsId	filter, pageSize, pageToken, orderBy	Lists TrustConfigs in a given project and location.
create	insert	projectsId, locationsId	trustConfigId	Creates a new TrustConfig in a given project and location.
patch	update	projectsId, locationsId, trustConfigsId	updateMask	Updates a TrustConfig.
delete	delete	projectsId, locationsId, trustConfigsId	etag	Deletes a single TrustConfig.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
locationsId	string
projectsId	string
trustConfigsId	string
etag	string
filter	string
orderBy	string
pageSize	integer (int32)
pageToken	string
trustConfigId	string
updateMask	string (google-fieldmask)

SELECT examples

get

Gets details of a single TrustConfig.

SELECT
name,
allowlistedCertificates,
createTime,
description,
etag,
labels,
spiffeTrustStores,
tags,
trustStores,
updateTime
FROM google.certificatemanager.trust_configs
WHERE projectsId = '{{ projectsId }}' -- required
AND locationsId = '{{ locationsId }}' -- required
AND trustConfigsId = '{{ trustConfigsId }}' -- required
;

list

Lists TrustConfigs in a given project and location.

SELECT
name,
allowlistedCertificates,
createTime,
description,
etag,
labels,
spiffeTrustStores,
tags,
trustStores,
updateTime
FROM google.certificatemanager.trust_configs
WHERE projectsId = '{{ projectsId }}' -- required
AND locationsId = '{{ locationsId }}' -- required
AND filter = '{{ filter }}'
AND pageSize = '{{ pageSize }}'
AND pageToken = '{{ pageToken }}'
AND orderBy = '{{ orderBy }}'
;

INSERT examples

create

Creates a new TrustConfig in a given project and location.

INSERT INTO google.certificatemanager.trust_configs (
data__labels,
data__spiffeTrustStores,
data__allowlistedCertificates,
data__description,
data__etag,
data__trustStores,
data__name,
data__tags,
projectsId,
locationsId,
trustConfigId
)
SELECT 
'{{ labels }}',
'{{ spiffeTrustStores }}',
'{{ allowlistedCertificates }}',
'{{ description }}',
'{{ etag }}',
'{{ trustStores }}',
'{{ name }}',
'{{ tags }}',
'{{ projectsId }}',
'{{ locationsId }}',
'{{ trustConfigId }}'
RETURNING
name,
done,
error,
metadata,
response
;

Manifest

# Description fields are for documentation purposes
- name: trust_configs
props:
  - name: projectsId
    value: "{{ projectsId }}"
    description: Required parameter for the trust_configs resource.
  - name: locationsId
    value: "{{ locationsId }}"
    description: Required parameter for the trust_configs resource.
  - name: labels
    value: "{{ labels }}"
    description: |
      Optional. Set of labels associated with a TrustConfig.
  - name: spiffeTrustStores
    value: "{{ spiffeTrustStores }}"
    description: |
      Optional. Defines a mapping from a trust domain to a TrustStore. This is used for SPIFFE certificate validation.
  - name: allowlistedCertificates
    description: |
      Optional. A certificate matching an allowlisted certificate is always considered valid as long as the certificate is parseable, proof of private key possession is established, and constraints on the certificate's SAN field are met.
    value:
      - pemCertificate: "{{ pemCertificate }}"
  - name: description
    value: "{{ description }}"
    description: |
      Optional. One or more paragraphs of text description of a TrustConfig.
  - name: etag
    value: "{{ etag }}"
    description: |
      This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
  - name: trustStores
    description: |
      Optional. Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.
    value:
      - trustAnchors: "{{ trustAnchors }}"
        intermediateCas: "{{ intermediateCas }}"
  - name: name
    value: "{{ name }}"
    description: |
      Identifier. A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern `projects/*/locations/*/trustConfigs/*`.
  - name: tags
    value: "{{ tags }}"
    description: |
      Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing"
  - name: trustConfigId
    value: "{{ trustConfigId }}"

UPDATE examples

patch

Updates a TrustConfig.

UPDATE google.certificatemanager.trust_configs
SET 
data__labels = '{{ labels }}',
data__spiffeTrustStores = '{{ spiffeTrustStores }}',
data__allowlistedCertificates = '{{ allowlistedCertificates }}',
data__description = '{{ description }}',
data__etag = '{{ etag }}',
data__trustStores = '{{ trustStores }}',
data__name = '{{ name }}',
data__tags = '{{ tags }}'
WHERE 
projectsId = '{{ projectsId }}' --required
AND locationsId = '{{ locationsId }}' --required
AND trustConfigsId = '{{ trustConfigsId }}' --required
AND updateMask = '{{ updateMask}}'
RETURNING
name,
done,
error,
metadata,
response;

DELETE examples

delete

Deletes a single TrustConfig.

DELETE FROM google.certificatemanager.trust_configs
WHERE projectsId = '{{ projectsId }}' --required
AND locationsId = '{{ locationsId }}' --required
AND trustConfigsId = '{{ trustConfigsId }}' --required
AND etag = '{{ etag }}'
;