Skip to content

Latest commit

 

History

History
60 lines (43 loc) · 2.7 KB

confluent_certificate_authority.md

File metadata and controls

60 lines (43 loc) · 2.7 KB
Raw
page_title subcategory description
confluent_certificate_authority Resource - terraform-provider-confluent

confluent_certificate_authority Resource

General Availability

confluent_certificate_authority provides a Certificate Authority resource that enables creating, editing, and deleting Certificate Authorities on Confluent Cloud.

Example Usage

resource "confluent_certificate_authority" "main" {
  display_name = "my_certificate_authority"
  description = "description"
  certificate_chain_filename = "certificate.pem"
  certificate_chain = "***REDACTED***"
}

Argument Reference

The following arguments are supported:

  • display_name - (Required String) The name of the Certificate Authority.
  • description - (Required String) A description of the Certificate Authority.
  • certificate_chain_filename - (Required String) The name of the certificate file.
  • certificate_chain - (Required String, Sensitive) A base64 encoded string containing the signing certificate chain.
  • crl_url - (Optional String) The url from which to fetch the CRL for the certificate authority.
  • crl_chain - (Optional String, Sensitive) A base64 encoded string containing the CRL for this certificate authority.

Attributes Reference

In addition to the preceding arguments, the following attributes are exported:

  • fingerprints (Required List of Strings) The fingerprints for each certificate in the certificate chain.
  • expiration_dates (Required List of Strings) The expiration dates of certificates in the chain.
  • serial_numbers (Required List of Strings) The serial numbers for each certificate in the certificate chain.
  • crl_source - (Optional String) The source specifies whether the Certificate Revocation List (CRL) is updated from either local file uploaded (LOCAL) or from url of CRL (URL).
  • crl_updated_at - (Optional String) The timestamp for when CRL was last updated.

Import

-> Note: CONFLUENT_CLOUD_API_KEY and CONFLUENT_CLOUD_API_SECRET environment variables must be set before importing a Certificate Authority.

You can import a Certificate Authority by using Certificate Authority ID, for example:

$ export CONFLUENT_CLOUD_API_KEY="<cloud_api_key>"
$ export CONFLUENT_CLOUD_API_SECRET="<cloud_api_secret>"
$ terraform import confluent_certificate_authority.main op-abc123

!> Warning: Do not forget to delete terminal command history afterwards for security purposes.