CertificateIdentityConstraints(
mapping=None, *, ignore_unknown_fields=False, **kwargs
)Describes constraints on a Certificate's Subject and SubjectAltNames.
.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
Attributes |
|
|---|---|
| Name | Description |
cel_expression |
google.type.expr_pb2.Expr
Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel |
allow_subject_passthrough |
bool
Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded. This field is a member of oneof_ _allow_subject_passthrough.
|
allow_subject_alt_names_passthrough |
bool
Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded. This field is a member of oneof_ _allow_subject_alt_names_passthrough.
|