...
1# Copyright 2021 Google LLC
2#
3# Licensed under the Apache License, Version 2.0 (the "License");
4# you may not use this file except in compliance with the License.
5# You may obtain a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS,
11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12# See the License for the specific language governing permissions and
13# limitations under the License.
14
15apiVersion: privateca.cnrm.cloud.google.com/v1beta1
16kind: PrivateCACertificateTemplate
17metadata:
18 labels:
19 label-two: "value-two"
20 name: privatecacertificatetemplate-sample
21spec:
22 projectRef:
23 # Replace ${PROJECT_ID?} with your project ID
24 external: "projects/${PROJECT_ID?}"
25 location: "us-central1"
26 predefinedValues:
27 keyUsage:
28 baseKeyUsage:
29 digitalSignature: true
30 contentCommitment: true
31 keyEncipherment: true
32 dataEncipherment: true
33 keyAgreement: true
34 certSign: false
35 crlSign: false
36 encipherOnly: true
37 decipherOnly: true
38 extendedKeyUsage:
39 serverAuth: true
40 clientAuth: true
41 codeSigning: true
42 emailProtection: true
43 timeStamping: true
44 ocspSigning: true
45 unknownExtendedKeyUsages:
46 - objectIdPath:
47 - 1
48 - 6
49 caOptions:
50 isCa: false
51 maxIssuerPathLength: 6
52 policyIds:
53 - objectIdPath:
54 - 1
55 - 6
56 aiaOcspServers:
57 - string
58 additionalExtensions:
59 - objectId:
60 objectIdPath:
61 - 1
62 - 6
63 critical: true
64 value: c3RyaW5nCg==
65 identityConstraints:
66 celExpression:
67 title: Sample expression
68 description: Always true
69 expression: 'true'
70 location: any.file.anywhere
71 allowSubjectPassthrough: true
72 allowSubjectAltNamesPassthrough: true
73 passthroughExtensions:
74 knownExtensions:
75 - EXTENDED_KEY_USAGE
76 additionalExtensions:
77 - objectIdPath:
78 - 1
79 - 6
80 description: An basic sample certificate template
View as plain text