Describes the way in which a [Certificate][google.cloud.security.privateca.v1.Certificate]'s [Subject][google.cloud.security.privateca.v1.Subject] and/or
[SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] will be resolved.
The default mode used in most cases. Indicates that the certificate's
[Subject][google.cloud.security.privateca.v1.Subject] and/or [SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] are specified in the certificate
request. This mode requires the caller to have the
privateca.certificates.create permission.
ReflectedSpiffe
A mode reserved for special cases. Indicates that the certificate should
have one or more SPIFFE [SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] set by the service based
on the caller's identity. This mode will ignore any explicitly specified
[Subject][google.cloud.security.privateca.v1.Subject] and/or [SubjectAltNames][google.cloud.security.privateca.v1.SubjectAltNames] in the certificate request.
This mode requires the caller to have the
privateca.certificates.createForSelf permission.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-21 UTC."],[[["The webpage documents different versions of `SubjectRequestMode`, a setting related to how a certificate's subject and alternative names are resolved, within the `Google.Cloud.Security.PrivateCA.V1` namespace, starting at version 1.0.0 and culminating at the latest version, 3.9.0."],["`SubjectRequestMode` has three defined modes: `Default`, where the subject and alternative names are specified in the request; `ReflectedSpiffe`, where the service sets SPIFFE alternative names based on the caller's identity; and `Unspecified`, which indicates that no mode has been specified."],["The `Default` mode for `SubjectRequestMode` requires the caller to have `privateca.certificates.create` permission, while `ReflectedSpiffe` mode requires `privateca.certificates.createForSelf` permission."],["The latest version of `SubjectRequestMode` can be found with version 3.9.0."]]],[]]
