Class: Google::Cloud::Security::PrivateCA::V1::CertificateAuthority::KeyVersionSpec

Inherits:

Object

Object
Google::Cloud::Security::PrivateCA::V1::CertificateAuthority::KeyVersionSpec

show all

Extended by:: Protobuf::MessageExts::ClassMethods

Includes:: Protobuf::MessageExts

Defined in:: proto_docs/google/cloud/security/privateca/v1/resources.rb

Overview

A Cloud KMS key configuration that a CertificateAuthority will use.

Instance Attribute Summary collapse

#algorithm ⇒ ::Google::Cloud::Security::PrivateCA::V1::CertificateAuthority::SignHashAlgorithm
The algorithm to use for creating a managed Cloud KMS key for a for a simplified experience.
#cloud_kms_key_version ⇒ ::String
The resource name for an existing Cloud KMS CryptoKeyVersion in the format projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*.

Instance Attribute Details

#algorithm ⇒ `::Google::Cloud::Security::PrivateCA::V1::CertificateAuthority::SignHashAlgorithm`

Returns The algorithm to use for creating a managed Cloud KMS key for a for a simplified experience. All managed keys will be have their [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] as HSM.

Note: The following fields are mutually exclusive: algorithm, cloud_kms_key_version. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns:

(::Google::Cloud::Security::PrivateCA::V1::CertificateAuthority::SignHashAlgorithm) —
The algorithm to use for creating a managed Cloud KMS key for a for a simplified experience. All managed keys will be have their [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] as HSM.

Note: The following fields are mutually exclusive: algorithm, cloud_kms_key_version. If a field in that set is populated, all other fields in the set will automatically be cleared.

# File 'proto_docs/google/cloud/security/privateca/v1/resources.rb', line 189

class KeyVersionSpec
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#cloud_kms_key_version ⇒ `::String`

Returns The resource name for an existing Cloud KMS CryptoKeyVersion in the format projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*. This option enables full flexibility in the key's capabilities and properties.

Note: The following fields are mutually exclusive: cloud_kms_key_version, algorithm. If a field in that set is populated, all other fields in the set will automatically be cleared.