View Source GoogleApi.PrivateCA.V1.Model.CertificateIdentityConstraints (google_api_private_ca v0.15.0)

Describes constraints on a Certificate's Subject and SubjectAltNames.

Attributes

  • allowSubjectAltNamesPassthrough (type: boolean(), default: nil) - Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.
  • allowSubjectPassthrough (type: boolean(), default: nil) - Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.
  • celExpression (type: GoogleApi.PrivateCA.V1.Model.Expr.t, default: nil) - Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel

Summary

Functions

Unwrap a decoded JSON object into its complex fields.

Types

@type t() :: %GoogleApi.PrivateCA.V1.Model.CertificateIdentityConstraints{
  allowSubjectAltNamesPassthrough: boolean() | nil,
  allowSubjectPassthrough: boolean() | nil,
  celExpression: GoogleApi.PrivateCA.V1.Model.Expr.t() | nil
}

Functions

@spec decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.