1# Copyright 2022 Google LLC
2#
3# Licensed under the Apache License, Version 2.0 (the "License");
4# you may not use this file except in compliance with the License.
5# You may obtain a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS,
11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12# See the License for the specific language governing permissions and
13# limitations under the License.
14
15apiVersion: privateca.cnrm.cloud.google.com/v1beta1
16kind: PrivateCACertificate
17metadata:
18 name: privatecacertificate-sample-complex
19 labels:
20 key: value
21spec:
22 location: "us-central1"
23 certificateAuthorityRef:
24 name: privatecacertificate-dep-complex
25 caPoolRef:
26 name: privatecacertificate-dep-complex
27 lifetime: "860s"
28 config:
29 subjectConfig:
30 subject:
31 commonName: "san1.example.com"
32 subjectAltName:
33 dnsNames:
34 - "san1.example.com"
35 uris:
36 - "http://www.ietf.org/rfc/rfc3986.txt"
37 emailAddresses:
38 - test_example@google.com
39 ipAddresses:
40 - "127.0.0.1"
41 x509Config:
42 caOptions:
43 isCa: false
44 keyUsage:
45 baseKeyUsage:
46 digitalSignature: true
47 contentCommitment: true
48 keyEncipherment: true
49 dataEncipherment: true
50 keyAgreement: true
51 crlSign: true
52 encipherOnly: true
53 decipherOnly: true
54 extendedKeyUsage:
55 serverAuth: true
56 clientAuth: true
57 codeSigning: true
58 emailProtection: true
59 timeStamping: true
60 ocspSigning: true
61 publicKey:
62 format: "PEM"
63 key: "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"
64 projectRef:
65 # Replace ${PROJECT_ID?} with your project ID.
66 external: projects/${PROJECT_ID?}
View as plain text