$schema: "http://json-schema.org/draft-06/schema#"

title: certificatemanager v1 CertificateIssuanceConfig export schema
description: A gcloud export/import command YAML validation schema.
type: object
required:
- certificateAuthorityConfig
- keyAlgorithm
- lifetime
- rotationWindowPercentage
additionalProperties: false
properties:
  COMMENT:
    type: object
    description: User specified info ignored by gcloud import.
    additionalProperties: false
    properties:
      template-id:
        type: string
      region:
        type: string
      description:
        type: string
      date:
        type: string
      version:
        type: string
  UNKNOWN:
    type: array
    description: Unknown API fields that cannot be imported.
    items:
      type: string
  certificateAuthorityConfig:
    description: |-
      The CA that issues the workload certificate. It includes the CA address,
      type, authentication to CA service, etc.
    $ref: CertificateAuthorityConfig.yaml
  description:
    description: |-
      One or more paragraphs of text description of a CertificateIssuanceConfig.
    type: string
  keyAlgorithm:
    description: The key algorithm to use when generating the private key.
    type: string
    enum:
    - ECDSA_P256
    - ECDSA_P384
    - KEY_ALGORITHM_UNSPECIFIED
    - RSA_2048
    - RSA_3072
    - RSA_4096
  labels:
    description: Set of labels associated with a CertificateIssuanceConfig.
    $ref: LabelsValue.yaml
  lifetime:
    description: Workload certificate lifetime requested.
    type: string
  name:
    description: |-
      A user-defined name of the certificate issuance config.
      CertificateIssuanceConfig names must be unique globally and match pattern
      `projects/*/locations/*/certificateIssuanceConfigs/*`.
    type: string
  rotationWindowPercentage:
    description: |-
      Specifies the percentage of elapsed time of the certificate lifetime to
      wait before renewing the certificate. Must be a number between 1-99,
      inclusive.
    type: integer