gcloud beta certificate-manager issuance-configs create

NAME
gcloud beta certificate-manager issuance-configs create - create a Certificate Issuance Config
SYNOPSIS
gcloud beta certificate-manager issuance-configs create(CERTIFICATE_ISSUANCE_CONFIG :--location=LOCATION)--ca-pool=CA_POOL[--async][--description=DESCRIPTION][--key-algorithm=KEY_ALGORITHM; default="rsa-2048"][--labels=[KEY=VALUE,…]][--lifetime=LIFETIME; default="P30D"][--rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE; default=66][GCLOUD_WIDE_FLAG]
DESCRIPTION
(BETA) Create a new Certificate Issuance Config.
EXAMPLES
To create a Certificate Issuance Config calledmy-cic, run:
gcloudbetacertificate-managerissuance-configscreatemy-cic--ca-pool=my-ca-pool
POSITIONAL ARGUMENTS
CertificateIssuanceConfig resource - Name of the Certificate Issuance Config tocreate. The arguments in this group can be used to specify the attributes ofthis resource. (NOTE) Some attributes are not given arguments in this group butcan be set in other ways.

To set theproject attribute:

  • provide the argumentcertificate_issuance_config on the commandline with a fully specified name;
  • provide the argument--project on the command line;
  • set the propertycore/project.

This must be specified.

CERTIFICATE_ISSUANCE_CONFIG
ID of the certificateIssuanceConfig or fully qualified identifier for thecertificateIssuanceConfig.

To set thecertificate_issuance_config attribute:

  • provide the argumentcertificate_issuance_config on the commandline.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--location=LOCATION
Certificate Manager location.

To set thelocation attribute:

  • provide the argumentcertificate_issuance_config on the commandline with a fully specified name;
  • provide the argument--location on the command line;
  • default value of location is [global].
REQUIRED FLAGS
--ca-pool=CA_POOL
CA Pool used for issuing certificates. For example:
gcloudbetacertificate-managerissuance-configscreate--ca-pool=projects/test-project/locations/us-west1/caPools/my-ca-pool
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to complete.
--description=DESCRIPTION
Human-readable description of the resource.
--key-algorithm=KEY_ALGORITHM; default="rsa-2048"
Key algorithm to use when generating the private key. Defaults torsa-2048.KEY_ALGORITHM must be one of:ecdsa-p256,rsa-2048.
--labels=[KEY=VALUE,…]
List of label KEY=VALUE pairs to add.

Keys must start with a lowercase character and contain only hyphens(-), underscores (_), lowercase characters, andnumbers. Values must contain only hyphens (-), underscores(_), lowercase characters, and numbers.

--lifetime=LIFETIME; default="P30D"
Lifetime of issued certificates in ISO 8601 format. Usegcloud topic datetimesfor details. Defaults toP30D.
--rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE; default=66
How long along the lifetime of the ceritificate to renew, expressed as apercentage. Defaults to66.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

API REFERENCE
This command uses thecertificatemanager/v1 API. The fulldocumentation for this API can be found at:https://cloud.google.com/certificate-manager
NOTES
This command is currently in beta and might change without notice. Thesevariants are also available:
gcloudcertificate-managerissuance-configscreate
gcloudalphacertificate-managerissuance-configscreate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.