import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
/**
 * This resource provides the Certificate Authority resource in Oracle Cloud Infrastructure Certificates Management service.
 * Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/certificatesmgmt/latest/CertificateAuthority
 *
 * Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/certificatesManagement
 *
 * Creates a new certificate authority (CA) according to the details of the request.
 *
 * ## Import
 *
 * CertificateAuthorities can be imported using the `id`, e.g.
 *
 * ```sh
 * $ pulumi import oci:CertificatesManagement/certificateAuthority:CertificateAuthority test_certificate_authority "id"
 * ```
 */
export declare class CertificateAuthority extends pulumi.CustomResource {
    /**
     * Get an existing CertificateAuthority resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CertificateAuthorityState, opts?: pulumi.CustomResourceOptions): CertificateAuthority;
    /**
     * Returns true if the given object is an instance of CertificateAuthority.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is CertificateAuthority;
    /**
     * (Updatable) The configuration details for creating a certificate authority (CA).
     */
    readonly certificateAuthorityConfig: pulumi.Output<outputs.CertificatesManagement.CertificateAuthorityCertificateAuthorityConfig>;
    /**
     * (Updatable) A list of rules that control how the CA is used and managed.
     */
    readonly certificateAuthorityRules: pulumi.Output<outputs.CertificatesManagement.CertificateAuthorityCertificateAuthorityRule[] | undefined>;
    /**
     * (Updatable) The details of the certificate revocation list (CRL).
     */
    readonly certificateRevocationListDetails: pulumi.Output<outputs.CertificatesManagement.CertificateAuthorityCertificateRevocationListDetails | undefined>;
    /**
     * (Updatable) The compartment in which you want to create the CA.
     */
    readonly compartmentId: pulumi.Output<string>;
    /**
     * The origin of the CA.
     */
    readonly configType: pulumi.Output<string>;
    /**
     * The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
     */
    readonly currentVersions: pulumi.Output<outputs.CertificatesManagement.CertificateAuthorityCurrentVersion[]>;
    /**
     * (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: `{"foo-namespace.bar-key": "value"}`
     */
    readonly definedTags: pulumi.Output<{
        [key: string]: string;
    }>;
    /**
     * (Updatable) A brief description of the CA.
     */
    readonly description: pulumi.Output<string | undefined>;
    /**
     * (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
     */
    readonly externalKeyDescription: pulumi.Output<string | undefined>;
    /**
     * (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: `{"bar-key": "value"}`
     */
    readonly freeformTags: pulumi.Output<{
        [key: string]: string;
    }>;
    /**
     * The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
     */
    readonly issuerCertificateAuthorityId: pulumi.Output<string>;
    /**
     * The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
     */
    readonly kmsKeyId: pulumi.Output<string | undefined>;
    /**
     * Additional information about the current CA lifecycle state.
     */
    readonly lifecycleDetails: pulumi.Output<string>;
    /**
     * A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.
     *
     * ** IMPORTANT **
     * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
     */
    readonly name: pulumi.Output<string>;
    /**
     * The algorithm used to sign public key certificates that the CA issues.
     */
    readonly signingAlgorithm: pulumi.Output<string>;
    /**
     * The current lifecycle state of the certificate authority.
     */
    readonly state: pulumi.Output<string>;
    /**
     * The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
     */
    readonly subjects: pulumi.Output<outputs.CertificatesManagement.CertificateAuthoritySubject[]>;
    /**
     * A property indicating when the CA was created, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format. Example: `2019-04-03T21:10:29.600Z`
     */
    readonly timeCreated: pulumi.Output<string>;
    /**
     * An optional property indicating when to delete the CA version, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format. Example: `2019-04-03T21:10:29.600Z`
     */
    readonly timeOfDeletion: pulumi.Output<string>;
    /**
     * Create a CertificateAuthority resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: CertificateAuthorityArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering CertificateAuthority resources.
 */
export interface CertificateAuthorityState {
    /**
     * (Updatable) The configuration details for creating a certificate authority (CA).
     */
    certificateAuthorityConfig?: pulumi.Input<inputs.CertificatesManagement.CertificateAuthorityCertificateAuthorityConfig | undefined>;
    /**
     * (Updatable) A list of rules that control how the CA is used and managed.
     */
    certificateAuthorityRules?: pulumi.Input<pulumi.Input<inputs.CertificatesManagement.CertificateAuthorityCertificateAuthorityRule>[] | undefined>;
    /**
     * (Updatable) The details of the certificate revocation list (CRL).
     */
    certificateRevocationListDetails?: pulumi.Input<inputs.CertificatesManagement.CertificateAuthorityCertificateRevocationListDetails | undefined>;
    /**
     * (Updatable) The compartment in which you want to create the CA.
     */
    compartmentId?: pulumi.Input<string | undefined>;
    /**
     * The origin of the CA.
     */
    configType?: pulumi.Input<string | undefined>;
    /**
     * The metadata details of the certificate authority (CA) version. This summary object does not contain the CA contents.
     */
    currentVersions?: pulumi.Input<pulumi.Input<inputs.CertificatesManagement.CertificateAuthorityCurrentVersion>[] | undefined>;
    /**
     * (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: `{"foo-namespace.bar-key": "value"}`
     */
    definedTags?: pulumi.Input<{
        [key: string]: pulumi.Input<string>;
    } | undefined>;
    /**
     * (Updatable) A brief description of the CA.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
     */
    externalKeyDescription?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: `{"bar-key": "value"}`
     */
    freeformTags?: pulumi.Input<{
        [key: string]: pulumi.Input<string>;
    } | undefined>;
    /**
     * The OCID of the parent CA that issued this CA. If this is the root CA, then this value is null.
     */
    issuerCertificateAuthorityId?: pulumi.Input<string | undefined>;
    /**
     * The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
     */
    kmsKeyId?: pulumi.Input<string | undefined>;
    /**
     * Additional information about the current CA lifecycle state.
     */
    lifecycleDetails?: pulumi.Input<string | undefined>;
    /**
     * A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.
     *
     * ** IMPORTANT **
     * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * The algorithm used to sign public key certificates that the CA issues.
     */
    signingAlgorithm?: pulumi.Input<string | undefined>;
    /**
     * The current lifecycle state of the certificate authority.
     */
    state?: pulumi.Input<string | undefined>;
    /**
     * The subject of the certificate, which is a distinguished name that identifies the entity that owns the public key in the certificate.
     */
    subjects?: pulumi.Input<pulumi.Input<inputs.CertificatesManagement.CertificateAuthoritySubject>[] | undefined>;
    /**
     * A property indicating when the CA was created, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format. Example: `2019-04-03T21:10:29.600Z`
     */
    timeCreated?: pulumi.Input<string | undefined>;
    /**
     * An optional property indicating when to delete the CA version, expressed in [RFC 3339](https://tools.ietf.org/html/rfc3339) timestamp format. Example: `2019-04-03T21:10:29.600Z`
     */
    timeOfDeletion?: pulumi.Input<string | undefined>;
}
/**
 * The set of arguments for constructing a CertificateAuthority resource.
 */
export interface CertificateAuthorityArgs {
    /**
     * (Updatable) The configuration details for creating a certificate authority (CA).
     */
    certificateAuthorityConfig: pulumi.Input<inputs.CertificatesManagement.CertificateAuthorityCertificateAuthorityConfig>;
    /**
     * (Updatable) A list of rules that control how the CA is used and managed.
     */
    certificateAuthorityRules?: pulumi.Input<pulumi.Input<inputs.CertificatesManagement.CertificateAuthorityCertificateAuthorityRule>[] | undefined>;
    /**
     * (Updatable) The details of the certificate revocation list (CRL).
     */
    certificateRevocationListDetails?: pulumi.Input<inputs.CertificatesManagement.CertificateAuthorityCertificateRevocationListDetails | undefined>;
    /**
     * (Updatable) The compartment in which you want to create the CA.
     */
    compartmentId: pulumi.Input<string>;
    /**
     * (Updatable) Usage of predefined tag keys. These predefined keys are scoped to namespaces. Example: `{"foo-namespace.bar-key": "value"}`
     */
    definedTags?: pulumi.Input<{
        [key: string]: pulumi.Input<string>;
    } | undefined>;
    /**
     * (Updatable) A brief description of the CA.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) For externally managed CAs, a description of the externally managed private key. Avoid entering confidential information.
     */
    externalKeyDescription?: pulumi.Input<string | undefined>;
    /**
     * (Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: `{"bar-key": "value"}`
     */
    freeformTags?: pulumi.Input<{
        [key: string]: pulumi.Input<string>;
    } | undefined>;
    /**
     * The OCID of the Oracle Cloud Infrastructure Vault key used to encrypt the CA.
     */
    kmsKeyId?: pulumi.Input<string | undefined>;
    /**
     * A user-friendly name for the CA. Names are unique within a compartment. Avoid entering confidential information. Valid characters include uppercase or lowercase letters, numbers, hyphens, underscores, and periods.
     *
     * ** IMPORTANT **
     * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values
     */
    name?: pulumi.Input<string | undefined>;
}
//# sourceMappingURL=certificateAuthority.d.ts.map