Class CaPool (1.12.1)

CaPool(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A CaPool represents a group of CertificateAuthorities that form a trust anchor. A CaPool can be used to manage issuance policies for one or more CertificateAuthority resources and to rotate CA certificates in and out of the trust anchor.

Attributes

Name Description
name str
Output only. The resource name for this CaPool in the format projects/*/locations/*/caPools/*.
tier google.cloud.security.privateca_v1.types.CaPool.Tier
Required. Immutable. The Tier of this CaPool.
issuance_policy google.cloud.security.privateca_v1.types.CaPool.IssuancePolicy
Optional. The IssuancePolicy to control how Certificates will be issued from this CaPool.
publishing_options google.cloud.security.privateca_v1.types.CaPool.PublishingOptions
Optional. The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
labels MutableMapping[str, str]
Optional. Labels with user-defined metadata.

Classes

IssuancePolicy

IssuancePolicy(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Defines controls over all certificate issuance within a CaPool.

LabelsEntry

LabelsEntry(mapping=None, *, ignore_unknown_fields=False, **kwargs)

The abstract base class for a message.

Parameters
Name Description
kwargs dict

Keys and values corresponding to the fields of the message.

mapping Union[dict, .Message]

A dictionary or message to be used to determine the values for this message.

ignore_unknown_fields Optional(bool)

If True, do not raise errors for unknown fields. Only applied if mapping is a mapping type or there are keyword parameters.

PublishingOptions

PublishingOptions(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Options relating to the publication of each CertificateAuthority's CA certificate and CRLs and their inclusion as extensions in issued Certificates. The options set here apply to certificates issued by any CertificateAuthority in the CaPool.

Tier

Tier(value)

The tier of a CaPool, indicating its supported functionality and/or billing SKU.