com.pulumi.digitalocean.kotlin.CertificateArgs.kt Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of pulumi-digitalocean-kotlin Show documentation
Show all versions of pulumi-digitalocean-kotlin Show documentation
Build cloud applications and infrastructure by combining the safety and reliability of infrastructure as code with the power of the Kotlin programming language.
@file:Suppress("NAME_SHADOWING", "DEPRECATION")
package com.pulumi.digitalocean.kotlin
import com.pulumi.core.Either
import com.pulumi.core.Output
import com.pulumi.core.Output.of
import com.pulumi.digitalocean.CertificateArgs.builder
import com.pulumi.digitalocean.kotlin.enums.CertificateType
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiTagMarker
import kotlin.String
import kotlin.Suppress
import kotlin.collections.List
import kotlin.jvm.JvmName
/**
* Provides a DigitalOcean Certificate resource that allows you to manage
* certificates for configuring TLS termination in Load Balancers.
* Certificates created with this resource can be referenced in your
* Load Balancer configuration via their ID. The certificate can either
* be a custom one provided by you or automatically generated one with
* Let's Encrypt.
* ## Example Usage
* ### Custom Certificate
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as digitalocean from "@pulumi/digitalocean";
* import * as std from "@pulumi/std";
* const cert = new digitalocean.Certificate("cert", {
* name: "custom-example",
* type: digitalocean.CertificateType.Custom,
* privateKey: std.file({
* input: "/Users/myuser/certs/privkey.pem",
* }).then(invoke => invoke.result),
* leafCertificate: std.file({
* input: "/Users/myuser/certs/cert.pem",
* }).then(invoke => invoke.result),
* certificateChain: std.file({
* input: "/Users/myuser/certs/fullchain.pem",
* }).then(invoke => invoke.result),
* });
* ```
* ```python
* import pulumi
* import pulumi_digitalocean as digitalocean
* import pulumi_std as std
* cert = digitalocean.Certificate("cert",
* name="custom-example",
* type=digitalocean.CertificateType.CUSTOM,
* private_key=std.file(input="/Users/myuser/certs/privkey.pem").result,
* leaf_certificate=std.file(input="/Users/myuser/certs/cert.pem").result,
* certificate_chain=std.file(input="/Users/myuser/certs/fullchain.pem").result)
* ```
* ```csharp
* using System.Collections.Generic;
* using System.Linq;
* using Pulumi;
* using DigitalOcean = Pulumi.DigitalOcean;
* using Std = Pulumi.Std;
* return await Deployment.RunAsync(() =>
* {
* var cert = new DigitalOcean.Certificate("cert", new()
* {
* Name = "custom-example",
* Type = DigitalOcean.CertificateType.Custom,
* PrivateKey = Std.File.Invoke(new()
* {
* Input = "/Users/myuser/certs/privkey.pem",
* }).Apply(invoke => invoke.Result),
* LeafCertificate = Std.File.Invoke(new()
* {
* Input = "/Users/myuser/certs/cert.pem",
* }).Apply(invoke => invoke.Result),
* CertificateChain = Std.File.Invoke(new()
* {
* Input = "/Users/myuser/certs/fullchain.pem",
* }).Apply(invoke => invoke.Result),
* });
* });
* ```
* ```go
* package main
* import (
* "github.com/pulumi/pulumi-digitalocean/sdk/v4/go/digitalocean"
* "github.com/pulumi/pulumi-std/sdk/go/std"
* "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
* )
* func main() {
* pulumi.Run(func(ctx *pulumi.Context) error {
* invokeFile, err := std.File(ctx, &std.FileArgs{
* Input: "/Users/myuser/certs/privkey.pem",
* }, nil)
* if err != nil {
* return err
* }
* invokeFile1, err := std.File(ctx, &std.FileArgs{
* Input: "/Users/myuser/certs/cert.pem",
* }, nil)
* if err != nil {
* return err
* }
* invokeFile2, err := std.File(ctx, &std.FileArgs{
* Input: "/Users/myuser/certs/fullchain.pem",
* }, nil)
* if err != nil {
* return err
* }
* _, err = digitalocean.NewCertificate(ctx, "cert", &digitalocean.CertificateArgs{
* Name: pulumi.String("custom-example"),
* Type: pulumi.String(digitalocean.CertificateTypeCustom),
* PrivateKey: pulumi.String(invokeFile.Result),
* LeafCertificate: pulumi.String(invokeFile1.Result),
* CertificateChain: pulumi.String(invokeFile2.Result),
* })
* if err != nil {
* return err
* }
* return nil
* })
* }
* ```
* ```java
* package generated_program;
* import com.pulumi.Context;
* import com.pulumi.Pulumi;
* import com.pulumi.core.Output;
* import com.pulumi.digitalocean.Certificate;
* import com.pulumi.digitalocean.CertificateArgs;
* import java.util.List;
* import java.util.ArrayList;
* import java.util.Map;
* import java.io.File;
* import java.nio.file.Files;
* import java.nio.file.Paths;
* public class App {
* public static void main(String[] args) {
* Pulumi.run(App::stack);
* }
* public static void stack(Context ctx) {
* var cert = new Certificate("cert", CertificateArgs.builder()
* .name("custom-example")
* .type("custom")
* .privateKey(StdFunctions.file(FileArgs.builder()
* .input("/Users/myuser/certs/privkey.pem")
* .build()).result())
* .leafCertificate(StdFunctions.file(FileArgs.builder()
* .input("/Users/myuser/certs/cert.pem")
* .build()).result())
* .certificateChain(StdFunctions.file(FileArgs.builder()
* .input("/Users/myuser/certs/fullchain.pem")
* .build()).result())
* .build());
* }
* }
* ```
* ```yaml
* resources:
* cert:
* type: digitalocean:Certificate
* properties:
* name: custom-example
* type: custom
* privateKey:
* fn::invoke:
* Function: std:file
* Arguments:
* input: /Users/myuser/certs/privkey.pem
* Return: result
* leafCertificate:
* fn::invoke:
* Function: std:file
* Arguments:
* input: /Users/myuser/certs/cert.pem
* Return: result
* certificateChain:
* fn::invoke:
* Function: std:file
* Arguments:
* input: /Users/myuser/certs/fullchain.pem
* Return: result
* ```
*
* ### Let's Encrypt Certificate
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as digitalocean from "@pulumi/digitalocean";
* const cert = new digitalocean.Certificate("cert", {
* name: "le-example",
* type: digitalocean.CertificateType.LetsEncrypt,
* domains: ["example.com"],
* });
* ```
* ```python
* import pulumi
* import pulumi_digitalocean as digitalocean
* cert = digitalocean.Certificate("cert",
* name="le-example",
* type=digitalocean.CertificateType.LETS_ENCRYPT,
* domains=["example.com"])
* ```
* ```csharp
* using System.Collections.Generic;
* using System.Linq;
* using Pulumi;
* using DigitalOcean = Pulumi.DigitalOcean;
* return await Deployment.RunAsync(() =>
* {
* var cert = new DigitalOcean.Certificate("cert", new()
* {
* Name = "le-example",
* Type = DigitalOcean.CertificateType.LetsEncrypt,
* Domains = new[]
* {
* "example.com",
* },
* });
* });
* ```
* ```go
* package main
* import (
* "github.com/pulumi/pulumi-digitalocean/sdk/v4/go/digitalocean"
* "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
* )
* func main() {
* pulumi.Run(func(ctx *pulumi.Context) error {
* _, err := digitalocean.NewCertificate(ctx, "cert", &digitalocean.CertificateArgs{
* Name: pulumi.String("le-example"),
* Type: pulumi.String(digitalocean.CertificateTypeLetsEncrypt),
* Domains: pulumi.StringArray{
* pulumi.String("example.com"),
* },
* })
* if err != nil {
* return err
* }
* return nil
* })
* }
* ```
* ```java
* package generated_program;
* import com.pulumi.Context;
* import com.pulumi.Pulumi;
* import com.pulumi.core.Output;
* import com.pulumi.digitalocean.Certificate;
* import com.pulumi.digitalocean.CertificateArgs;
* import java.util.List;
* import java.util.ArrayList;
* import java.util.Map;
* import java.io.File;
* import java.nio.file.Files;
* import java.nio.file.Paths;
* public class App {
* public static void main(String[] args) {
* Pulumi.run(App::stack);
* }
* public static void stack(Context ctx) {
* var cert = new Certificate("cert", CertificateArgs.builder()
* .name("le-example")
* .type("lets_encrypt")
* .domains("example.com")
* .build());
* }
* }
* ```
* ```yaml
* resources:
* cert:
* type: digitalocean:Certificate
* properties:
* name: le-example
* type: lets_encrypt
* domains:
* - example.com
* ```
*
* ### Use with Other Resources
* Both custom and Let's Encrypt certificates can be used with other resources
* including the `digitalocean.LoadBalancer` and `digitalocean.Cdn` resources.
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as digitalocean from "@pulumi/digitalocean";
* const cert = new digitalocean.Certificate("cert", {
* name: "le-example",
* type: digitalocean.CertificateType.LetsEncrypt,
* domains: ["example.com"],
* });
* // Create a new Load Balancer with TLS termination
* const _public = new digitalocean.LoadBalancer("public", {
* name: "secure-loadbalancer-1",
* region: digitalocean.Region.NYC3,
* dropletTag: "backend",
* forwardingRules: [{
* entryPort: 443,
* entryProtocol: "https",
* targetPort: 80,
* targetProtocol: "http",
* certificateName: cert.name,
* }],
* });
* ```
* ```python
* import pulumi
* import pulumi_digitalocean as digitalocean
* cert = digitalocean.Certificate("cert",
* name="le-example",
* type=digitalocean.CertificateType.LETS_ENCRYPT,
* domains=["example.com"])
* # Create a new Load Balancer with TLS termination
* public = digitalocean.LoadBalancer("public",
* name="secure-loadbalancer-1",
* region=digitalocean.Region.NYC3,
* droplet_tag="backend",
* forwarding_rules=[{
* "entry_port": 443,
* "entry_protocol": "https",
* "target_port": 80,
* "target_protocol": "http",
* "certificate_name": cert.name,
* }])
* ```
* ```csharp
* using System.Collections.Generic;
* using System.Linq;
* using Pulumi;
* using DigitalOcean = Pulumi.DigitalOcean;
* return await Deployment.RunAsync(() =>
* {
* var cert = new DigitalOcean.Certificate("cert", new()
* {
* Name = "le-example",
* Type = DigitalOcean.CertificateType.LetsEncrypt,
* Domains = new[]
* {
* "example.com",
* },
* });
* // Create a new Load Balancer with TLS termination
* var @public = new DigitalOcean.LoadBalancer("public", new()
* {
* Name = "secure-loadbalancer-1",
* Region = DigitalOcean.Region.NYC3,
* DropletTag = "backend",
* ForwardingRules = new[]
* {
* new DigitalOcean.Inputs.LoadBalancerForwardingRuleArgs
* {
* EntryPort = 443,
* EntryProtocol = "https",
* TargetPort = 80,
* TargetProtocol = "http",
* CertificateName = cert.Name,
* },
* },
* });
* });
* ```
* ```go
* package main
* import (
* "github.com/pulumi/pulumi-digitalocean/sdk/v4/go/digitalocean"
* "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
* )
* func main() {
* pulumi.Run(func(ctx *pulumi.Context) error {
* cert, err := digitalocean.NewCertificate(ctx, "cert", &digitalocean.CertificateArgs{
* Name: pulumi.String("le-example"),
* Type: pulumi.String(digitalocean.CertificateTypeLetsEncrypt),
* Domains: pulumi.StringArray{
* pulumi.String("example.com"),
* },
* })
* if err != nil {
* return err
* }
* // Create a new Load Balancer with TLS termination
* _, err = digitalocean.NewLoadBalancer(ctx, "public", &digitalocean.LoadBalancerArgs{
* Name: pulumi.String("secure-loadbalancer-1"),
* Region: pulumi.String(digitalocean.RegionNYC3),
* DropletTag: pulumi.String("backend"),
* ForwardingRules: digitalocean.LoadBalancerForwardingRuleArray{
* &digitalocean.LoadBalancerForwardingRuleArgs{
* EntryPort: pulumi.Int(443),
* EntryProtocol: pulumi.String("https"),
* TargetPort: pulumi.Int(80),
* TargetProtocol: pulumi.String("http"),
* CertificateName: cert.Name,
* },
* },
* })
* if err != nil {
* return err
* }
* return nil
* })
* }
* ```
* ```java
* package generated_program;
* import com.pulumi.Context;
* import com.pulumi.Pulumi;
* import com.pulumi.core.Output;
* import com.pulumi.digitalocean.Certificate;
* import com.pulumi.digitalocean.CertificateArgs;
* import com.pulumi.digitalocean.LoadBalancer;
* import com.pulumi.digitalocean.LoadBalancerArgs;
* import com.pulumi.digitalocean.inputs.LoadBalancerForwardingRuleArgs;
* import java.util.List;
* import java.util.ArrayList;
* import java.util.Map;
* import java.io.File;
* import java.nio.file.Files;
* import java.nio.file.Paths;
* public class App {
* public static void main(String[] args) {
* Pulumi.run(App::stack);
* }
* public static void stack(Context ctx) {
* var cert = new Certificate("cert", CertificateArgs.builder()
* .name("le-example")
* .type("lets_encrypt")
* .domains("example.com")
* .build());
* // Create a new Load Balancer with TLS termination
* var public_ = new LoadBalancer("public", LoadBalancerArgs.builder()
* .name("secure-loadbalancer-1")
* .region("nyc3")
* .dropletTag("backend")
* .forwardingRules(LoadBalancerForwardingRuleArgs.builder()
* .entryPort(443)
* .entryProtocol("https")
* .targetPort(80)
* .targetProtocol("http")
* .certificateName(cert.name())
* .build())
* .build());
* }
* }
* ```
* ```yaml
* resources:
* cert:
* type: digitalocean:Certificate
* properties:
* name: le-example
* type: lets_encrypt
* domains:
* - example.com
* # Create a new Load Balancer with TLS termination
* public:
* type: digitalocean:LoadBalancer
* properties:
* name: secure-loadbalancer-1
* region: nyc3
* dropletTag: backend
* forwardingRules:
* - entryPort: 443
* entryProtocol: https
* targetPort: 80
* targetProtocol: http
* certificateName: ${cert.name}
* ```
*
* ## Import
* Certificates can be imported using the certificate `name`, e.g.
* ```sh
* $ pulumi import digitalocean:index/certificate:Certificate mycertificate cert-01
* ```
* @property certificateChain The full PEM-formatted trust chain
* between the certificate authority's certificate and your domain's TLS
* certificate. Only valid when type is `custom`.
* @property domains List of fully qualified domain names (FQDNs) for
* which the certificate will be issued. The domains must be managed using
* DigitalOcean's DNS. Only valid when type is `lets_encrypt`.
* @property leafCertificate The contents of a PEM-formatted public
* TLS certificate. Only valid when type is `custom`.
* @property name The name of the certificate for identification.
* @property privateKey The contents of a PEM-formatted private-key
* corresponding to the SSL certificate. Only valid when type is `custom`.
* @property type The type of certificate to provision. Can be either
* `custom` or `lets_encrypt`. Defaults to `custom`.
*/
public data class CertificateArgs(
public val certificateChain: Output? = null,
public val domains: Output>? = null,
public val leafCertificate: Output? = null,
public val name: Output? = null,
public val privateKey: Output? = null,
public val type: Output>? = null,
) : ConvertibleToJava {
override fun toJava(): com.pulumi.digitalocean.CertificateArgs =
com.pulumi.digitalocean.CertificateArgs.builder()
.certificateChain(certificateChain?.applyValue({ args0 -> args0 }))
.domains(domains?.applyValue({ args0 -> args0.map({ args0 -> args0 }) }))
.leafCertificate(leafCertificate?.applyValue({ args0 -> args0 }))
.name(name?.applyValue({ args0 -> args0 }))
.privateKey(privateKey?.applyValue({ args0 -> args0 }))
.type(
type?.applyValue({ args0 ->
args0.transform({ args0 -> args0 }, { args0 ->
args0.let({ args0 ->
args0.toJava()
})
})
}),
).build()
}
/**
* Builder for [CertificateArgs].
*/
@PulumiTagMarker
public class CertificateArgsBuilder internal constructor() {
private var certificateChain: Output? = null
private var domains: Output>? = null
private var leafCertificate: Output? = null
private var name: Output? = null
private var privateKey: Output? = null
private var type: Output>? = null
/**
* @param value The full PEM-formatted trust chain
* between the certificate authority's certificate and your domain's TLS
* certificate. Only valid when type is `custom`.
*/
@JvmName("xfafaitgnubmxwjw")
public suspend fun certificateChain(`value`: Output) {
this.certificateChain = value
}
/**
* @param value List of fully qualified domain names (FQDNs) for
* which the certificate will be issued. The domains must be managed using
* DigitalOcean's DNS. Only valid when type is `lets_encrypt`.
*/
@JvmName("eacyagtyxtbsrusl")
public suspend fun domains(`value`: Output>) {
this.domains = value
}
@JvmName("jhxaiapakcpiemad")
public suspend fun domains(vararg values: Output) {
this.domains = Output.all(values.asList())
}
/**
* @param values List of fully qualified domain names (FQDNs) for
* which the certificate will be issued. The domains must be managed using
* DigitalOcean's DNS. Only valid when type is `lets_encrypt`.
*/
@JvmName("fncnkhlbmegbfeqv")
public suspend fun domains(values: List>) {
this.domains = Output.all(values)
}
/**
* @param value The contents of a PEM-formatted public
* TLS certificate. Only valid when type is `custom`.
*/
@JvmName("xgxlqytqipuxibtg")
public suspend fun leafCertificate(`value`: Output) {
this.leafCertificate = value
}
/**
* @param value The name of the certificate for identification.
*/
@JvmName("dyvcypkqjjjevkpi")
public suspend fun name(`value`: Output) {
this.name = value
}
/**
* @param value The contents of a PEM-formatted private-key
* corresponding to the SSL certificate. Only valid when type is `custom`.
*/
@JvmName("plllbtaisuellvcg")
public suspend fun privateKey(`value`: Output) {
this.privateKey = value
}
/**
* @param value The type of certificate to provision. Can be either
* `custom` or `lets_encrypt`. Defaults to `custom`.
*/
@JvmName("owwtqfwyiwpbgvpj")
public suspend fun type(`value`: Output>) {
this.type = value
}
/**
* @param value The full PEM-formatted trust chain
* between the certificate authority's certificate and your domain's TLS
* certificate. Only valid when type is `custom`.
*/
@JvmName("orymoomulvykhcfy")
public suspend fun certificateChain(`value`: String?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.certificateChain = mapped
}
/**
* @param value List of fully qualified domain names (FQDNs) for
* which the certificate will be issued. The domains must be managed using
* DigitalOcean's DNS. Only valid when type is `lets_encrypt`.
*/
@JvmName("ndcldwjesoseecma")
public suspend fun domains(`value`: List?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.domains = mapped
}
/**
* @param values List of fully qualified domain names (FQDNs) for
* which the certificate will be issued. The domains must be managed using
* DigitalOcean's DNS. Only valid when type is `lets_encrypt`.
*/
@JvmName("rpogvppnyjipbrak")
public suspend fun domains(vararg values: String) {
val toBeMapped = values.toList()
val mapped = toBeMapped.let({ args0 -> of(args0) })
this.domains = mapped
}
/**
* @param value The contents of a PEM-formatted public
* TLS certificate. Only valid when type is `custom`.
*/
@JvmName("vcynraqjobnamkuy")
public suspend fun leafCertificate(`value`: String?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.leafCertificate = mapped
}
/**
* @param value The name of the certificate for identification.
*/
@JvmName("rjiqdkyyyocrmort")
public suspend fun name(`value`: String?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.name = mapped
}
/**
* @param value The contents of a PEM-formatted private-key
* corresponding to the SSL certificate. Only valid when type is `custom`.
*/
@JvmName("vojxufcvnaxhfxsl")
public suspend fun privateKey(`value`: String?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.privateKey = mapped
}
/**
* @param value The type of certificate to provision. Can be either
* `custom` or `lets_encrypt`. Defaults to `custom`.
*/
@JvmName("dcjycoxpxaoiskgp")
public suspend fun type(`value`: Either?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.type = mapped
}
/**
* @param value The type of certificate to provision. Can be either
* `custom` or `lets_encrypt`. Defaults to `custom`.
*/
@JvmName("gwvigvuahfforiau")
public fun type(`value`: String) {
val toBeMapped = Either.ofLeft(value)
val mapped = toBeMapped.let({ args0 -> of(args0) })
this.type = mapped
}
/**
* @param value The type of certificate to provision. Can be either
* `custom` or `lets_encrypt`. Defaults to `custom`.
*/
@JvmName("diplfcsujybdpjxk")
public fun type(`value`: CertificateType) {
val toBeMapped = Either.ofRight(value)
val mapped = toBeMapped.let({ args0 -> of(args0) })
this.type = mapped
}
internal fun build(): CertificateArgs = CertificateArgs(
certificateChain = certificateChain,
domains = domains,
leafCertificate = leafCertificate,
name = name,
privateKey = privateKey,
type = type,
)
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy