Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
google-native.networksecurity/v1.getClientTlsPolicy
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
Gets details of a single ClientTlsPolicy.
Using getClientTlsPolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getClientTlsPolicy(args: GetClientTlsPolicyArgs, opts?: InvokeOptions): Promise<GetClientTlsPolicyResult>
function getClientTlsPolicyOutput(args: GetClientTlsPolicyOutputArgs, opts?: InvokeOptions): Output<GetClientTlsPolicyResult>def get_client_tls_policy(client_tls_policy_id: Optional[str] = None,
                          location: Optional[str] = None,
                          project: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetClientTlsPolicyResult
def get_client_tls_policy_output(client_tls_policy_id: Optional[pulumi.Input[str]] = None,
                          location: Optional[pulumi.Input[str]] = None,
                          project: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetClientTlsPolicyResult]func LookupClientTlsPolicy(ctx *Context, args *LookupClientTlsPolicyArgs, opts ...InvokeOption) (*LookupClientTlsPolicyResult, error)
func LookupClientTlsPolicyOutput(ctx *Context, args *LookupClientTlsPolicyOutputArgs, opts ...InvokeOption) LookupClientTlsPolicyResultOutput> Note: This function is named LookupClientTlsPolicy in the Go SDK.
public static class GetClientTlsPolicy 
{
    public static Task<GetClientTlsPolicyResult> InvokeAsync(GetClientTlsPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetClientTlsPolicyResult> Invoke(GetClientTlsPolicyInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetClientTlsPolicyResult> getClientTlsPolicy(GetClientTlsPolicyArgs args, InvokeOptions options)
public static Output<GetClientTlsPolicyResult> getClientTlsPolicy(GetClientTlsPolicyArgs args, InvokeOptions options)
fn::invoke:
  function: google-native:networksecurity/v1:getClientTlsPolicy
  arguments:
    # arguments dictionaryThe following arguments are supported:
- ClientTls stringPolicy Id 
- Location string
- Project string
- ClientTls stringPolicy Id 
- Location string
- Project string
- clientTls StringPolicy Id 
- location String
- project String
- clientTls stringPolicy Id 
- location string
- project string
- client_tls_ strpolicy_ id 
- location str
- project str
- clientTls StringPolicy Id 
- location String
- project String
getClientTlsPolicy Result
The following output properties are available:
- ClientCertificate Pulumi.Google Native. Network Security. V1. Outputs. Google Cloud Networksecurity V1Certificate Provider Response 
- Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
- CreateTime string
- The timestamp when the resource was created.
- Description string
- Optional. Free-text description of the resource.
- Labels Dictionary<string, string>
- Optional. Set of label tags associated with the resource.
- Name string
- Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
- ServerValidation List<Pulumi.Ca Google Native. Network Security. V1. Outputs. Validation CAResponse> 
- Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
- Sni string
- Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- UpdateTime string
- The timestamp when the resource was updated.
- ClientCertificate GoogleCloud Networksecurity V1Certificate Provider Response 
- Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
- CreateTime string
- The timestamp when the resource was created.
- Description string
- Optional. Free-text description of the resource.
- Labels map[string]string
- Optional. Set of label tags associated with the resource.
- Name string
- Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
- ServerValidation []ValidationCa CAResponse 
- Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
- Sni string
- Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- UpdateTime string
- The timestamp when the resource was updated.
- clientCertificate GoogleCloud Networksecurity V1Certificate Provider Response 
- Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
- createTime String
- The timestamp when the resource was created.
- description String
- Optional. Free-text description of the resource.
- labels Map<String,String>
- Optional. Set of label tags associated with the resource.
- name String
- Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
- serverValidation List<ValidationCa CAResponse> 
- Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
- sni String
- Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- updateTime String
- The timestamp when the resource was updated.
- clientCertificate GoogleCloud Networksecurity V1Certificate Provider Response 
- Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
- createTime string
- The timestamp when the resource was created.
- description string
- Optional. Free-text description of the resource.
- labels {[key: string]: string}
- Optional. Set of label tags associated with the resource.
- name string
- Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
- serverValidation ValidationCa CAResponse[] 
- Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
- sni string
- Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- updateTime string
- The timestamp when the resource was updated.
- client_certificate GoogleCloud Networksecurity V1Certificate Provider Response 
- Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
- create_time str
- The timestamp when the resource was created.
- description str
- Optional. Free-text description of the resource.
- labels Mapping[str, str]
- Optional. Set of label tags associated with the resource.
- name str
- Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
- server_validation_ Sequence[Validationca CAResponse] 
- Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
- sni str
- Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- update_time str
- The timestamp when the resource was updated.
- clientCertificate Property Map
- Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
- createTime String
- The timestamp when the resource was created.
- description String
- Optional. Free-text description of the resource.
- labels Map<String>
- Optional. Set of label tags associated with the resource.
- name String
- Name of the ClientTlsPolicy resource. It matches the pattern projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}
- serverValidation List<Property Map>Ca 
- Optional. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
- sni String
- Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
- updateTime String
- The timestamp when the resource was updated.
Supporting Types
CertificateProviderInstanceResponse   
- PluginInstance string
- Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- PluginInstance string
- Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- pluginInstance String
- Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- pluginInstance string
- Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- plugin_instance str
- Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
- pluginInstance String
- Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
GoogleCloudNetworksecurityV1CertificateProviderResponse     
- CertificateProvider Pulumi.Instance Google Native. Network Security. V1. Inputs. Certificate Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- GrpcEndpoint Pulumi.Google Native. Network Security. V1. Inputs. Google Cloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the cert and private key.
- CertificateProvider CertificateInstance Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- GrpcEndpoint GoogleCloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the cert and private key.
- certificateProvider CertificateInstance Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- grpcEndpoint GoogleCloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the cert and private key.
- certificateProvider CertificateInstance Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- grpcEndpoint GoogleCloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the cert and private key.
- certificate_provider_ Certificateinstance Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- grpc_endpoint GoogleCloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the cert and private key.
- certificateProvider Property MapInstance 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- grpcEndpoint Property Map
- gRPC specific configuration to access the gRPC server to obtain the cert and private key.
GoogleCloudNetworksecurityV1GrpcEndpointResponse     
- TargetUri string
- The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- TargetUri string
- The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- targetUri String
- The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- targetUri string
- The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- target_uri str
- The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
- targetUri String
- The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
ValidationCAResponse 
- CertificateProvider Pulumi.Instance Google Native. Network Security. V1. Inputs. Certificate Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- GrpcEndpoint Pulumi.Google Native. Network Security. V1. Inputs. Google Cloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the CA certificate.
- CertificateProvider CertificateInstance Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- GrpcEndpoint GoogleCloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the CA certificate.
- certificateProvider CertificateInstance Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- grpcEndpoint GoogleCloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the CA certificate.
- certificateProvider CertificateInstance Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- grpcEndpoint GoogleCloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the CA certificate.
- certificate_provider_ Certificateinstance Provider Instance Response 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- grpc_endpoint GoogleCloud Networksecurity V1Grpc Endpoint Response 
- gRPC specific configuration to access the gRPC server to obtain the CA certificate.
- certificateProvider Property MapInstance 
- The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information.
- grpcEndpoint Property Map
- gRPC specific configuration to access the gRPC server to obtain the CA certificate.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi