Describes the way in which a
Certificate's
Subject and/or
SubjectAltNames
will be resolved.
Enums
Name
Description
SUBJECT_REQUEST_MODE_UNSPECIFIED
Not specified.
DEFAULT
The default mode used in most cases. Indicates that the certificate's Subject and/or SubjectAltNames are specified in the certificate request. This mode requires the caller to have the `privateca.certificates.create` permission.
REFLECTED_SPIFFE
A mode reserved for special cases. Indicates that the certificate should have one SPIFFE SubjectAltNames set by the service based on the caller's identity. This mode will ignore any explicitly specified Subject and/or SubjectAltNames in the certificate request. This mode requires the caller to have the `privateca.certificates.createForSelf` permission.
