gcloud privateca subordinates get-csr

NAME
gcloud privateca subordinates get-csr - get the CSR for a subordinate certificate authority that has not yet been activated
SYNOPSIS
gcloud privateca subordinates get-csr(CERTIFICATE_AUTHORITY :--location=LOCATION--pool=POOL)[GCLOUD_WIDE_FLAG …]
DESCRIPTION
Gets the PEM-encoded CSR for a subordinate certificate authority that isawaiting user activation. The CSR should be signed by the issuing CertificateAuthority and uploaded back using thesubordinates activatecommand.
EXAMPLES
To download the CSR for the 'server-tls-1' CA into a file called'server-tls-1.csr':
gcloudprivatecasubordinatesget-csrserver-tls-1--location=us-west1--pool=my-pool >server-tls-1.csr
POSITIONAL ARGUMENTS
CERTIFICATE AUTHORITY resource - The certificate authority for which to get theCSR. The arguments in this group can be used to specify the attributes of thisresource. (NOTE) Some attributes are not given arguments in this group but canbe set in other ways.

To set theproject attribute:

  • provide the argumentCERTIFICATE_AUTHORITY on the command line witha fully specified name;
  • provide the argument--project on the command line;
  • set the propertycore/project.

This must be specified.

CERTIFICATE_AUTHORITY
ID of the CERTIFICATE_AUTHORITY or fully qualified identifier for theCERTIFICATE_AUTHORITY.

To set thecertificate_authority attribute:

  • provide the argumentCERTIFICATE_AUTHORITY on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--location=LOCATION
The location of the CERTIFICATE_AUTHORITY.

To set thelocation attribute:

  • provide the argumentCERTIFICATE_AUTHORITY on the command line witha fully specified name;
  • provide the argument--location on the command line;
  • set the propertyprivateca/location.
--pool=POOL
The parent CA Pool of the CERTIFICATE_AUTHORITY.

To set thepool attribute:

  • provide the argumentCERTIFICATE_AUTHORITY on the command line witha fully specified name;
  • provide the argument--pool on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.