terraform-provider/docs/resources/cert_manager_internal_ca.md

page_title, subcategory, description

page_title	subcategory	description
kms_cert_manager_internal_ca Resource - terraform-provider	Certificate Management	Create and manage internal certificate authorities (root or intermediate) in Hanzo KMS. Only Machine Identity authentication is supported for this resource.

kms_cert_manager_internal_ca (Resource)

Create and manage internal certificate authorities (root or intermediate) in Hanzo KMS. Only Machine Identity authentication is supported for this resource.

Example Usage

resource "kms_project" "pki" {
  name        = "PKI Project"
  slug        = "pki-project"
  type        = "cert-manager"
  description = "Project for managing SSL/TLS certificates"
}

# Root CA example
resource "kms_cert_manager_internal_ca" "root" {
  project_slug = kms_project.pki.slug

  type          = "root"
  name          = "enterprise-root-ca"
  common_name   = "Enterprise Root Certificate Authority"
  organization  = "Acme Corp"
  ou            = "IT Security"
  country       = "US"
  province      = "California"
  locality      = "San Francisco"
  key_algorithm = "RSA_2048"
}

# Intermediate CA example
resource "kms_cert_manager_internal_ca" "issuing" {
  project_slug = kms_project.pki.slug

  type          = "intermediate"
  name          = "enterprise-issuing-ca"
  common_name   = "Enterprise Issuing Certificate Authority"
  organization  = "Acme Corp"
  ou            = "IT Security"
  country       = "US"
  province      = "California"
  locality      = "San Francisco"
  key_algorithm = "RSA_2048"
}

Schema

Required

• name (String) The name of the CA
• project_slug (String) The slug of the cert-manager project
• type (String) The type of the CA. Supported values: root, intermediate

Optional

• common_name (String) The common name (CN) of the CA certificate
• country (String) The country (C) of the CA certificate
• key_algorithm (String) The key algorithm for the CA. Supported values: RSA_2048, RSA_3072, RSA_4096, EC_prime256v1, EC_secp384r1, EC_secp521r1. Defaults to 'RSA_2048'.
• locality (String) The locality (L) of the CA certificate
• organization (String) The organization (O) of the CA certificate
• ou (String) The organizational unit (OU) of the CA certificate
• province (String) The state/province (ST) of the CA certificate
• status (String) The status of the CA. Supported values: active, disabled. Defaults to 'active'.

Read-Only

• id (String) The ID of the CA

Import

Import is supported using the following syntax:

# This will import the internal CA by its ID
terraform import kms_cert_manager_internal_ca.example <ca_id>