Class CertificateIdentityConstraints (0.3.0)

Version 0.3.0

• 1.14.0 (latest)
• 1.13.1
• 1.12.2
• 1.11.0
• 1.10.3
• 1.9.0
• 1.8.1
• 1.7.1
• 1.6.1
• 1.5.0
• 1.4.3
• 1.3.2
• 1.2.4
• 1.1.0
• 1.0.6
• 0.4.0
• 0.3.0
• 0.1.1

CertificateIdentityConstraints(
    mapping=None, *, ignore_unknown_fields=False, **kwargs
)

Describes constraints on a Certificate's Subject and SubjectAltNames.

Attributes
Name	Description
cel_expression	google.type.expr_pb2.Expr Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority- service/docs/cel-guide
allow_subject_passthrough	bool Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded. The bool is optional to indicate an unset field, which suggests a forgotten value that needs to be set by the caller.
allow_subject_alt_names_passthrough	bool Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded. The bool is optional to indicate an unset field, which suggests a forgotten value that needs to be set by the caller.