imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-18 23:08:48 +00:00
Code Activity

gcloud: Wed Mar 16 08:47:18 UTC 2022

Browse source
This commit is contained in:
Automated 2022-03-16 08:47:18 +00:00
parent 7d82d0fc32
commit 971306823a
187 changed files with 3248 additions and 630 deletions
Download patch file Download diff file Expand all files Collapse all files

24
gcloud/beta/privateca/roots/create
View file

@ -25,34 +25,34 @@ EXAMPLES
To create a root CA that supports one layer of subordinates:
$ gcloud beta privateca roots create prod-root \
--kms-key-version="projects/joonix-pki/locations/us-west1/keyRin\
gs/kr1/cryptoKeys/k1/cryptoKeyVersions/1" \
--subject="CN=Joonix Production Root CA, O=Google" \
--kms-key-version="projects/my-project-pki/locations/us-west1/ke\
yRings/kr1/cryptoKeys/k1/cryptoKeyVersions/1" \
--subject="CN=Example Production Root CA, O=Google" \
--max-chain-length=1
To create a root CA and restrict what it can issue:
$ gcloud beta privateca roots create prod-root \
--kms-key-version="projects/joonix-pki/locations/us-west1/keyRin\
gs/kr1/cryptoKeys/k1/cryptoKeyVersions/1" \
--subject="CN=Joonix Production Root CA, O=Google" \
--kms-key-version="projects/my-project-pki/locations/us-west1/ke\
yRings/kr1/cryptoKeys/k1/cryptoKeyVersions/1" \
--subject="CN=Example Production Root CA, O=Google" \
--issuance-policy=policy.yaml
To create a root CA that doesn't publicly publish CA certificate and CRLs:
$ gcloud beta privateca roots create root-2 \
--kms-key-version="projects/joonix-pki/locations/us-west1/keyRin\
gs/kr1/cryptoKeys/k1/cryptoKeyVersions/1" \
--subject="CN=Joonix Production Root CA, O=Google" \
--kms-key-version="projects/my-project-pki/locations/us-west1/ke\
yRings/kr1/cryptoKeys/k1/cryptoKeyVersions/1" \
--subject="CN=Example Production Root CA, O=Google" \
--issuance-policy=policy.yaml --no-publish-ca-cert \
--no-publish-crl
To create a root CA that is based on an existing CA:
$ gcloud beta privateca roots create prod-root \
--kms-key-version="projects/joonix-pki/locations/us-west1/keyRin\
gs/kr1/cryptoKeys/k1/cryptoKeyVersions/1" --from-ca=source-root \
--from-ca-location=us-central1
--kms-key-version="projects/my-project-pki/locations/us-west1/ke\
yRings/kr1/cryptoKeys/k1/cryptoKeyVersions/1" \
--from-ca=source-root --from-ca-location=us-central1
POSITIONAL ARGUMENTS
Certificate Authority resource - The name of the root CA to create. The