Package google.cloud.gkehub.workloadcertificate.v1alpha
Stay organized with collections
Save and categorize content based on your preferences.
FeatureSpec
Workload Certificate: The Hub-wide input for the WorkloadCertificate feature.
| Fields |
provision_google_ca |
FeatureSpec.GoogleCAProvisioning
Immutable. Specifies CA configuration.
|
default_config |
MembershipSpec
Specifies default membership spec. Users can override the default in the member_configs for each member.
|
GoogleCAProvisioning
Specifies if a default Google managed CA should be provisioned. If UNSPECIFIED, Google managed CA feature is disabled. If set to UNSPECIFIED/DISABLED, the "certificate_authority_config" field in WorkloadCertificateConfig must specify a CA endpoint.
| Enums |
GOOGLE_CA_PROVISIONING_UNSPECIFIED |
Disable default Google managed CA. |
DISABLED |
Disable default Google managed CA. |
ENABLED |
Use default Google managed CA. |
ENABLED_WITH_MANAGED_CA |
Workload certificate feature is enabled, and the entire certificate provisioning process is managed by Google with managed CAS which is more secure than the default CA. |
ENABLED_WITH_DEFAULT_CA |
Workload certificate feature is enabled, and the entire certificate provisioning process is using the default CA which is free. |
MembershipSpec
Workload Certificate: The membership-specific input for WorkloadCertificate feature.
CertificateManagement
Specifies whether or not the feature is enabled on the member cluster.
| Enums |
CERTIFICATE_MANAGEMENT_UNSPECIFIED |
Disable workload certificate feature. |
DISABLED |
Disable workload certificate feature. |
ENABLED |
Enable workload certificate feature. |
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-06-12 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-12 UTC."],[],[],null,["# Package google.cloud.gkehub.workloadcertificate.v1alpha\n\nIndex\n-----\n\n- [FeatureSpec](/kubernetes-engine/fleet-management/docs/reference/rpc/google.cloud.gkehub.workloadcertificate.v1alpha#google.cloud.gkehub.workloadcertificate.v1alpha.FeatureSpec) (message)\n- [FeatureSpec.GoogleCAProvisioning](/kubernetes-engine/fleet-management/docs/reference/rpc/google.cloud.gkehub.workloadcertificate.v1alpha#google.cloud.gkehub.workloadcertificate.v1alpha.FeatureSpec.GoogleCAProvisioning) (enum)\n- [MembershipSpec](/kubernetes-engine/fleet-management/docs/reference/rpc/google.cloud.gkehub.workloadcertificate.v1alpha#google.cloud.gkehub.workloadcertificate.v1alpha.MembershipSpec) (message)\n- [MembershipSpec.CertificateManagement](/kubernetes-engine/fleet-management/docs/reference/rpc/google.cloud.gkehub.workloadcertificate.v1alpha#google.cloud.gkehub.workloadcertificate.v1alpha.MembershipSpec.CertificateManagement) (enum)\n\nFeatureSpec\n-----------\n\n**Workload Certificate**: The Hub-wide input for the WorkloadCertificate feature.\n\nGoogleCAProvisioning\n--------------------\n\nSpecifies if a default Google managed CA should be provisioned. If UNSPECIFIED, Google managed CA feature is disabled. If set to UNSPECIFIED/DISABLED, the \"certificate_authority_config\" field in WorkloadCertificateConfig must specify a CA endpoint.\n\nMembershipSpec\n--------------\n\n**Workload Certificate**: The membership-specific input for WorkloadCertificate feature.\n\nCertificateManagement\n---------------------\n\nSpecifies whether or not the feature is enabled on the member cluster."]]
