Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. compute
  5. CaExternalAccountKey
Google Cloud v8.27.0 published on Thursday, Apr 17, 2025 by Pulumi
pulumi/pulumi-gcp

gcp.compute.CaExternalAccountKey

Explore with Pulumi AI

Google Cloud v8.27.0 published on Thursday, Apr 17, 2025 by Pulumi
pulumi/pulumi-gcp

A representation of an ExternalAccountKey used for external account binding within ACME.

To get more information about ExternalAccountKey, see:

Warning: This resource is create-only and could not be read from the API. On delete, the resource would be removed from the state. You must use an EAB secret within 7 days of obtaining it. The EAB secret is invalidated if you don’t use it within 7 days. The ACME account registered by using an EAB secret has no expiration.

Example Usage

Public Ca External Account Key

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const prod = new gcp.compute.CaExternalAccountKey("prod", {project: "my-project-name"});
Copy
import pulumi
import pulumi_gcp as gcp

prod = gcp.compute.CaExternalAccountKey("prod", project="my-project-name")
Copy
package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := compute.NewCaExternalAccountKey(ctx, "prod", &compute.CaExternalAccountKeyArgs{
			Project: pulumi.String("my-project-name"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var prod = new Gcp.Compute.CaExternalAccountKey("prod", new()
    {
        Project = "my-project-name",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.CaExternalAccountKey;
import com.pulumi.gcp.compute.CaExternalAccountKeyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var prod = new CaExternalAccountKey("prod", CaExternalAccountKeyArgs.builder()
            .project("my-project-name")
            .build());

    }
}
Copy
resources:
  prod:
    type: gcp:compute:CaExternalAccountKey
    properties:
      project: my-project-name
Copy

Create CaExternalAccountKey Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new CaExternalAccountKey(name: string, args?: CaExternalAccountKeyArgs, opts?: CustomResourceOptions);
@overload
def CaExternalAccountKey(resource_name: str,
                         args: Optional[CaExternalAccountKeyArgs] = None,
                         opts: Optional[ResourceOptions] = None)

@overload
def CaExternalAccountKey(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         location: Optional[str] = None,
                         project: Optional[str] = None)
func NewCaExternalAccountKey(ctx *Context, name string, args *CaExternalAccountKeyArgs, opts ...ResourceOption) (*CaExternalAccountKey, error)
public CaExternalAccountKey(string name, CaExternalAccountKeyArgs? args = null, CustomResourceOptions? opts = null)
public CaExternalAccountKey(String name, CaExternalAccountKeyArgs args)
public CaExternalAccountKey(String name, CaExternalAccountKeyArgs args, CustomResourceOptions options)

type: gcp:compute:CaExternalAccountKey
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args CaExternalAccountKeyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args CaExternalAccountKeyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args CaExternalAccountKeyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args CaExternalAccountKeyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. CaExternalAccountKeyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var caExternalAccountKeyResource = new Gcp.Compute.CaExternalAccountKey("caExternalAccountKeyResource", new()
{
    Location = "string",
    Project = "string",
});
Copy
example, err := compute.NewCaExternalAccountKey(ctx, "caExternalAccountKeyResource", &compute.CaExternalAccountKeyArgs{
	Location: pulumi.String("string"),
	Project:  pulumi.String("string"),
})
Copy
var caExternalAccountKeyResource = new CaExternalAccountKey("caExternalAccountKeyResource", CaExternalAccountKeyArgs.builder()
    .location("string")
    .project("string")
    .build());
Copy
ca_external_account_key_resource = gcp.compute.CaExternalAccountKey("caExternalAccountKeyResource",
    location="string",
    project="string")
Copy
const caExternalAccountKeyResource = new gcp.compute.CaExternalAccountKey("caExternalAccountKeyResource", {
    location: "string",
    project: "string",
});
Copy
type: gcp:compute:CaExternalAccountKey
properties:
    location: string
    project: string
Copy

CaExternalAccountKey Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The CaExternalAccountKey resource accepts the following input properties:

Location Changes to this property will trigger replacement. string
Location for the externalAccountKey. Currently only global is supported.
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
Location Changes to this property will trigger replacement. string
Location for the externalAccountKey. Currently only global is supported.
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
location Changes to this property will trigger replacement. String
Location for the externalAccountKey. Currently only global is supported.
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
location Changes to this property will trigger replacement. string
Location for the externalAccountKey. Currently only global is supported.
project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
location Changes to this property will trigger replacement. str
Location for the externalAccountKey. Currently only global is supported.
project Changes to this property will trigger replacement. str
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
location Changes to this property will trigger replacement. String
Location for the externalAccountKey. Currently only global is supported.
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

Outputs

All input properties are implicitly available as output properties. Additionally, the CaExternalAccountKey resource produces the following output properties:

B64MacKey string
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

B64urlMacKey string
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
Id string
The provider-assigned unique ID for this managed resource.
KeyId string
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
Name string
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
B64MacKey string
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

B64urlMacKey string
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
Id string
The provider-assigned unique ID for this managed resource.
KeyId string
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
Name string
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
b64MacKey String
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

b64urlMacKey String
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
id String
The provider-assigned unique ID for this managed resource.
keyId String
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
name String
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
b64MacKey string
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

b64urlMacKey string
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
id string
The provider-assigned unique ID for this managed resource.
keyId string
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
name string
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
b64_mac_key str
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

b64url_mac_key str
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
id str
The provider-assigned unique ID for this managed resource.
key_id str
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
name str
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
b64MacKey String
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

b64urlMacKey String
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
id String
The provider-assigned unique ID for this managed resource.
keyId String
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
name String
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.

Look up Existing CaExternalAccountKey Resource

Get an existing CaExternalAccountKey resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: CaExternalAccountKeyState, opts?: CustomResourceOptions): CaExternalAccountKey
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        b64_mac_key: Optional[str] = None,
        b64url_mac_key: Optional[str] = None,
        key_id: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        project: Optional[str] = None) -> CaExternalAccountKey
func GetCaExternalAccountKey(ctx *Context, name string, id IDInput, state *CaExternalAccountKeyState, opts ...ResourceOption) (*CaExternalAccountKey, error)
public static CaExternalAccountKey Get(string name, Input<string> id, CaExternalAccountKeyState? state, CustomResourceOptions? opts = null)
public static CaExternalAccountKey get(String name, Output<String> id, CaExternalAccountKeyState state, CustomResourceOptions options)
resources:  _:    type: gcp:compute:CaExternalAccountKey    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
B64MacKey string
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

B64urlMacKey string
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
KeyId string
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
Location Changes to this property will trigger replacement. string
Location for the externalAccountKey. Currently only global is supported.
Name string
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
B64MacKey string
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

B64urlMacKey string
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
KeyId string
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
Location Changes to this property will trigger replacement. string
Location for the externalAccountKey. Currently only global is supported.
Name string
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
b64MacKey String
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

b64urlMacKey String
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
keyId String
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
location Changes to this property will trigger replacement. String
Location for the externalAccountKey. Currently only global is supported.
name String
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
b64MacKey string
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

b64urlMacKey string
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
keyId string
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
location Changes to this property will trigger replacement. string
Location for the externalAccountKey. Currently only global is supported.
name string
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
b64_mac_key str
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

b64url_mac_key str
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
key_id str
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
location Changes to this property will trigger replacement. str
Location for the externalAccountKey. Currently only global is supported.
name str
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
project Changes to this property will trigger replacement. str
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
b64MacKey String
(Deprecated) Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.

Deprecated: b64_mac_key is deprecated and will be removed in a future major release. Use b64url_mac_key instead.

b64urlMacKey String
Base64-URL-encoded HS256 key. It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created.' Note: This property is sensitive and will not be displayed in the plan.
keyId String
It is generated by the PublicCertificateAuthorityService when the ExternalAccountKey is created. Note: This property is sensitive and will not be displayed in the plan.
location Changes to this property will trigger replacement. String
Location for the externalAccountKey. Currently only global is supported.
name String
Resource name. projects/{project}/locations/{location}/externalAccountKeys/{keyId}.
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

Import

This resource does not support import.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Google Cloud (GCP) Classic pulumi/pulumi-gcp
License
Apache-2.0
Notes
This Pulumi package is based on the google-beta Terraform Provider.
Google Cloud v8.27.0 published on Thursday, Apr 17, 2025 by Pulumi
pulumi/pulumi-gcp