1. Packages
  2. Packages
  3. Google Cloud (GCP) Classic
  4. API Docs
  5. certificatemanager
  6. getCertificates
Viewing docs for Google Cloud v9.23.0
published on Thursday, May 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

gcp.certificatemanager.getCertificates

gcp logo
Viewing docs for Google Cloud v9.23.0
published on Thursday, May 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

    List all certificates within Google Certificate Manager for a given project, region or filter.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const _default = gcp.certificatemanager.getCertificates({});
export const certificatesNames = _default.then(_default => .map(cert => (cert.name)));

    import pulumi
import pulumi_gcp as gcp

default = gcp.certificatemanager.get_certificates()
pulumi.export("certificatesNames", [cert.name for cert in default.certificates])

    Example coming soon!

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var @default = Gcp.CertificateManager.GetCertificates.Invoke();

    return new Dictionary<string, object?>
    {
        ["certificatesNames"] = @default.Apply(@default => .Select(cert => 
        {
            return cert.Name;
        }).ToList()),
    };
});

    Example coming soon!

    Example coming soon!

    Example coming soon!

    With A Filter

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const _default = gcp.certificatemanager.getCertificates({
    filter: "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
});
export const certificatesNames = _default.then(_default => .map(cert => (cert.name)));

    import pulumi
import pulumi_gcp as gcp

default = gcp.certificatemanager.get_certificates(filter="name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*")
pulumi.export("certificatesNames", [cert.name for cert in default.certificates])

    Example coming soon!

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var @default = Gcp.CertificateManager.GetCertificates.Invoke(new()
    {
        Filter = "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
    });

    return new Dictionary<string, object?>
    {
        ["certificatesNames"] = @default.Apply(@default => .Select(cert => 
        {
            return cert.Name;
        }).ToList()),
    };
});

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Regional Certificates With A Filter

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const _default = gcp.certificatemanager.getCertificates({
    region: "REGION",
    filter: "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
});
export const certificatesNames = _default.then(_default => .map(cert => (cert.name)));

    import pulumi
import pulumi_gcp as gcp

default = gcp.certificatemanager.get_certificates(region="REGION",
    filter="name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*")
pulumi.export("certificatesNames", [cert.name for cert in default.certificates])

    Example coming soon!

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var @default = Gcp.CertificateManager.GetCertificates.Invoke(new()
    {
        Region = "REGION",
        Filter = "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
    });

    return new Dictionary<string, object?>
    {
        ["certificatesNames"] = @default.Apply(@default => .Select(cert => 
        {
            return cert.Name;
        }).ToList()),
    };
});

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Using getCertificates

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCertificates(args: GetCertificatesArgs, opts?: InvokeOptions): Promise<GetCertificatesResult>
function getCertificatesOutput(args: GetCertificatesOutputArgs, opts?: InvokeOptions): Output<GetCertificatesResult>
    def get_certificates(filter: Optional[str] = None,
                     region: Optional[str] = None,
                     opts: Optional[InvokeOptions] = None) -> GetCertificatesResult
def get_certificates_output(filter: pulumi.Input[Optional[str]] = None,
                     region: pulumi.Input[Optional[str]] = None,
                     opts: Optional[InvokeOptions] = None) -> Output[GetCertificatesResult]
    func GetCertificates(ctx *Context, args *GetCertificatesArgs, opts ...InvokeOption) (*GetCertificatesResult, error)
func GetCertificatesOutput(ctx *Context, args *GetCertificatesOutputArgs, opts ...InvokeOption) GetCertificatesResultOutput

    > Note: This function is named GetCertificates in the Go SDK.

    public static class GetCertificates 
{
    public static Task<GetCertificatesResult> InvokeAsync(GetCertificatesArgs args, InvokeOptions? opts = null)
    public static Output<GetCertificatesResult> Invoke(GetCertificatesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetCertificatesResult> getCertificates(GetCertificatesArgs args, InvokeOptions options)
public static Output<GetCertificatesResult> getCertificates(GetCertificatesArgs args, InvokeOptions options)

    fn::invoke:
  function: gcp:certificatemanager/getCertificates:getCertificates
  arguments:
    # arguments dictionary
    data "gcp_certificatemanager_getcertificates" "name" {
    # arguments
}

    The following arguments are supported:

    Filter string
    Filter expression to restrict the certificates returned.
    Region string
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    Filter string
    Filter expression to restrict the certificates returned.
    Region string
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    filter string
    Filter expression to restrict the certificates returned.
    region string
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    filter String
    Filter expression to restrict the certificates returned.
    region String
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    filter string
    Filter expression to restrict the certificates returned.
    region string
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    filter str
    Filter expression to restrict the certificates returned.
    region str
    The region in which the resource belongs. If it is not provided, GLOBAL is used.
    filter String
    Filter expression to restrict the certificates returned.
    region String
    The region in which the resource belongs. If it is not provided, GLOBAL is used.

    getCertificates Result

    The following output properties are available:

    Certificates List<GetCertificatesCertificate>
    A list of all retrieved certificates. See gcp.certificatemanager.Certificate resource for details of the available attributes.
    Id string
    The provider-assigned unique ID for this managed resource.
    Filter string
    Region string
    Certificates []GetCertificatesCertificate
    A list of all retrieved certificates. See gcp.certificatemanager.Certificate resource for details of the available attributes.
    Id string
    The provider-assigned unique ID for this managed resource.
    Filter string
    Region string
    certificates list(object)
    A list of all retrieved certificates. See gcp.certificatemanager.Certificate resource for details of the available attributes.
    id string
    The provider-assigned unique ID for this managed resource.
    filter string
    region string
    certificates List<GetCertificatesCertificate>
    A list of all retrieved certificates. See gcp.certificatemanager.Certificate resource for details of the available attributes.
    id String
    The provider-assigned unique ID for this managed resource.
    filter String
    region String
    certificates GetCertificatesCertificate[]
    A list of all retrieved certificates. See gcp.certificatemanager.Certificate resource for details of the available attributes.
    id string
    The provider-assigned unique ID for this managed resource.
    filter string
    region string
    certificates Sequence[GetCertificatesCertificate]
    A list of all retrieved certificates. See gcp.certificatemanager.Certificate resource for details of the available attributes.
    id str
    The provider-assigned unique ID for this managed resource.
    filter str
    region str
    certificates List<Property Map>
    A list of all retrieved certificates. See gcp.certificatemanager.Certificate resource for details of the available attributes.
    id String
    The provider-assigned unique ID for this managed resource.
    filter String
    region String

    Supporting Types

    GetCertificatesCertificate

    Description string
    A human-readable description of the resource.
    EffectiveLabels Dictionary<string, string>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other clients and services.
    Labels Dictionary<string, string>

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    Location string
    The Certificate Manager location. If not specified, "global" is used.
    Manageds List<GetCertificatesCertificateManaged>
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    Name string
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    SanDnsnames List<string>
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    Scope string

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    Description string
    A human-readable description of the resource.
    EffectiveLabels map[string]string
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other clients and services.
    Labels map[string]string

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    Location string
    The Certificate Manager location. If not specified, "global" is used.
    Manageds []GetCertificatesCertificateManaged
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    Name string
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    SanDnsnames []string
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    Scope string

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    description string
    A human-readable description of the resource.
    effective_labels map(string)
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other clients and services.
    labels map(string)

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    location string
    The Certificate Manager location. If not specified, "global" is used.
    manageds list(object)
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    name string
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumi_labels map(string)
    The combination of labels configured directly on the resource and default labels configured on the provider.
    san_dnsnames list(string)
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    scope string

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    description String
    A human-readable description of the resource.
    effectiveLabels Map<String,String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other clients and services.
    labels Map<String,String>

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    location String
    The Certificate Manager location. If not specified, "global" is used.
    manageds List<GetCertificatesCertificateManaged>
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    name String
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    sanDnsnames List<String>
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    scope String

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    description string
    A human-readable description of the resource.
    effectiveLabels {[key: string]: string}
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other clients and services.
    labels {[key: string]: string}

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    location string
    The Certificate Manager location. If not specified, "global" is used.
    manageds GetCertificatesCertificateManaged[]
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    name string
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    sanDnsnames string[]
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    scope string

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    description str
    A human-readable description of the resource.
    effective_labels Mapping[str, str]
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other clients and services.
    labels Mapping[str, str]

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    location str
    The Certificate Manager location. If not specified, "global" is used.
    manageds Sequence[GetCertificatesCertificateManaged]
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    name str
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    san_dnsnames Sequence[str]
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    scope str

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    description String
    A human-readable description of the resource.
    effectiveLabels Map<String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other clients and services.
    labels Map<String>

    Set of label tags associated with the Certificate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.

    location String
    The Certificate Manager location. If not specified, "global" is used.
    manageds List<Property Map>
    Configuration and state of a Managed Certificate. Certificate Manager provisions and renews Managed Certificates automatically, for as long as it's authorized to do so.
    name String
    A user-defined name of the certificate. Certificate names must be unique The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter, and all following characters must be a dash, underscore, letter or digit.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    sanDnsnames List<String>
    The list of Subject Alternative Names of dnsName type defined in the certificate (see RFC 5280 4.2.1.6)
    scope String

    The scope of the certificate.

    DEFAULT: Certificates with default scope are served from core Google data centers. If unsure, choose this option.

    EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence. See https://cloud.google.com/vpc/docs/edge-locations.

    ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs). See https://cloud.google.com/compute/docs/regions-zones.

    CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured. See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.

    GetCertificatesCertificateManaged

    AuthorizationAttemptInfos List<GetCertificatesCertificateManagedAuthorizationAttemptInfo>
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    DnsAuthorizations List<string>
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    Domains List<string>
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    IssuanceConfig string
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    ProvisioningIssues List<GetCertificatesCertificateManagedProvisioningIssue>
    Information about issues with provisioning this Managed Certificate.
    State string
    A state of this Managed Certificate.
    AuthorizationAttemptInfos []GetCertificatesCertificateManagedAuthorizationAttemptInfo
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    DnsAuthorizations []string
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    Domains []string
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    IssuanceConfig string
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    ProvisioningIssues []GetCertificatesCertificateManagedProvisioningIssue
    Information about issues with provisioning this Managed Certificate.
    State string
    A state of this Managed Certificate.
    authorization_attempt_infos list(object)
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    dns_authorizations list(string)
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    domains list(string)
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    issuance_config string
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    provisioning_issues list(object)
    Information about issues with provisioning this Managed Certificate.
    state string
    A state of this Managed Certificate.
    authorizationAttemptInfos List<GetCertificatesCertificateManagedAuthorizationAttemptInfo>
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    dnsAuthorizations List<String>
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    domains List<String>
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    issuanceConfig String
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    provisioningIssues List<GetCertificatesCertificateManagedProvisioningIssue>
    Information about issues with provisioning this Managed Certificate.
    state String
    A state of this Managed Certificate.
    authorizationAttemptInfos GetCertificatesCertificateManagedAuthorizationAttemptInfo[]
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    dnsAuthorizations string[]
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    domains string[]
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    issuanceConfig string
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    provisioningIssues GetCertificatesCertificateManagedProvisioningIssue[]
    Information about issues with provisioning this Managed Certificate.
    state string
    A state of this Managed Certificate.
    authorization_attempt_infos Sequence[GetCertificatesCertificateManagedAuthorizationAttemptInfo]
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    dns_authorizations Sequence[str]
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    domains Sequence[str]
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    issuance_config str
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    provisioning_issues Sequence[GetCertificatesCertificateManagedProvisioningIssue]
    Information about issues with provisioning this Managed Certificate.
    state str
    A state of this Managed Certificate.
    authorizationAttemptInfos List<Property Map>
    Detailed state of the latest authorization attempt for each domain specified for this Managed Certificate.
    dnsAuthorizations List<String>
    Authorizations that will be used for performing domain authorization. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    domains List<String>
    The domains for which a managed SSL certificate will be generated. Wildcard domains are only supported with DNS challenge resolution
    issuanceConfig String
    The resource name for a CertificateIssuanceConfig used to configure private PKI certificates in the format projects//locations//certificateIssuanceConfigs/*. If this field is not set, the certificates will instead be publicly signed as documented at https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa. Either issuanceConfig or dnsAuthorizations should be specificed, but not both.
    provisioningIssues List<Property Map>
    Information about issues with provisioning this Managed Certificate.
    state String
    A state of this Managed Certificate.

    GetCertificatesCertificateManagedAuthorizationAttemptInfo

    Details string
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    Domain string
    Domain name of the authorization attempt.
    FailureReason string
    Reason for failure of the authorization attempt for the domain.
    State string
    State of the domain for managed certificate issuance.
    Details string
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    Domain string
    Domain name of the authorization attempt.
    FailureReason string
    Reason for failure of the authorization attempt for the domain.
    State string
    State of the domain for managed certificate issuance.
    details string
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    domain string
    Domain name of the authorization attempt.
    failure_reason string
    Reason for failure of the authorization attempt for the domain.
    state string
    State of the domain for managed certificate issuance.
    details String
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    domain String
    Domain name of the authorization attempt.
    failureReason String
    Reason for failure of the authorization attempt for the domain.
    state String
    State of the domain for managed certificate issuance.
    details string
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    domain string
    Domain name of the authorization attempt.
    failureReason string
    Reason for failure of the authorization attempt for the domain.
    state string
    State of the domain for managed certificate issuance.
    details str
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    domain str
    Domain name of the authorization attempt.
    failure_reason str
    Reason for failure of the authorization attempt for the domain.
    state str
    State of the domain for managed certificate issuance.
    details String
    Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'failure_reason' field.
    domain String
    Domain name of the authorization attempt.
    failureReason String
    Reason for failure of the authorization attempt for the domain.
    state String
    State of the domain for managed certificate issuance.

    GetCertificatesCertificateManagedProvisioningIssue

    Details string
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    Reason string
    Reason for provisioning failures.
    Details string
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    Reason string
    Reason for provisioning failures.
    details string
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    reason string
    Reason for provisioning failures.
    details String
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    reason String
    Reason for provisioning failures.
    details string
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    reason string
    Reason for provisioning failures.
    details str
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    reason str
    Reason for provisioning failures.
    details String
    Human readable explanation about the issue. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use 'reason' field.
    reason String
    Reason for provisioning failures.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Viewing docs for Google Cloud v9.23.0
    published on Thursday, May 7, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-gcp
      Try Pulumi Cloud free. Your team will thank you.