gcloud alpha compute ssl-certificates create

NAME
gcloud alpha compute ssl-certificates create - create a Compute Engine SSL certificate
SYNOPSIS
gcloud alpha compute ssl-certificates createNAME(--domains=DOMAIN,[DOMAIN,…]    |--certificate=LOCAL_FILE_PATH--private-key=LOCAL_FILE_PATH)[--description=DESCRIPTION][--global    |--region=REGION][GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA)gcloud alpha compute ssl-certificates createcreates SSL certificate resources, which you can use in a target HTTPS or targetSSL proxy. An SSL certificate resource consists of a certificate and privatekey. The private key is encrypted before it is stored.

You can create either a managed or a self-managed SslCertificate resource. Amanaged SslCertificate is provisioned and renewed for you. A self-managedcertificate is created by passing the certificate obtained from CertificateAuthority through--certificate and--private-keyflags.

EXAMPLES
To create a self-managed certificate resource 'my-cert' from a certificateplaced under path 'foo/cert' and a private key placed under path 'foo/pk', run:
gcloudalphacomputessl-certificatescreatemy-cert--certificate=foo/cert--private-key=foo/pk
POSITIONAL ARGUMENTS
NAME
Name of the SSL certificate to create.
REQUIRED FLAGS
Flags for managed or self-managed certificate.

Exactly one of these must be specified:

--domains=DOMAIN,[DOMAIN,…]
List of domains to create a managed certificate for.
Flags for self-managed certificate
--certificate=LOCAL_FILE_PATH
Path to a local certificate file to create a self-managed certificate. Thecertificate must be in PEM format. The certificate chain must be no greater than5 certs long. The chain must include at least one intermediate cert.

This flag argument must be specified if any of the other arguments in this groupare specified.

--private-key=LOCAL_FILE_PATH
Path to a local private key file. The private key must be in PEM format and mustuse RSA or ECDSA encryption.

This flag argument must be specified if any of the other arguments in this groupare specified.

OPTIONAL FLAGS
--description=DESCRIPTION
An optional, textual description for the SSL certificate.
At most one of these can be specified:
--global
If set, the SSL certificate is global.
--region=REGION
Region of the SSL certificate to create. If not specified, you might be promptedto select a region (interactive mode only).

To avoid prompting when this flag is omitted, you can set thecompute/region property:

gcloudconfigsetcompute/regionREGION

A list of regions can be fetched by running:

gcloudcomputeregionslist

To unset the property, run:

gcloudconfigunsetcompute/region

Alternatively, the region can be stored in the environment variableCLOUDSDK_COMPUTE_REGION.

GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudcomputessl-certificatescreate
gcloudbetacomputessl-certificatescreate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.