import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
export declare class CertManagerCertificatePolicy extends pulumi.CustomResource {
    /**
     * Get an existing CertManagerCertificatePolicy resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CertManagerCertificatePolicyState, opts?: pulumi.CustomResourceOptions): CertManagerCertificatePolicy;
    /**
     * Returns true if the given object is an instance of CertManagerCertificatePolicy.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is CertManagerCertificatePolicy;
    /**
     * Algorithm constraints for the certificate policy. Omit the block to accept any algorithm; each list restricts its own kind independently and needs at least one value when set.
     */
    readonly algorithms: pulumi.Output<outputs.CertManagerCertificatePolicyAlgorithms | undefined>;
    /**
     * Basic constraints policy for the certificate policy, controlling whether issued certificates may act as certificate authorities.
     */
    readonly basicConstraints: pulumi.Output<outputs.CertManagerCertificatePolicyBasicConstraints | undefined>;
    /**
     * The description of the certificate policy (max 255 characters). Omit the attribute instead of passing an empty string.
     */
    readonly description: pulumi.Output<string | undefined>;
    /**
     * Extended key usage policies for the certificate policy. When this block is present, requested extended key usages must be within the union of allowed and required; setting allowed and required to empty lists denies all extended key usages. Omit the block for no constraint.
     */
    readonly extendedKeyUsages: pulumi.Output<outputs.CertManagerCertificatePolicyExtendedKeyUsages | undefined>;
    /**
     * Key usage policies for the certificate policy. When this block is present, requested key usages must be within the union of allowed and required; setting allowed and required to empty lists denies all key usages. Omit the block for no constraint.
     */
    readonly keyUsages: pulumi.Output<outputs.CertManagerCertificatePolicyKeyUsages | undefined>;
    /**
     * The name of the certificate policy. Must be in slug format: lowercase letters and numbers, separated by single hyphens (e.g. 'web-server-policy').
     */
    readonly name: pulumi.Output<string>;
    /**
     * Subject alternative name (SAN) policies for the certificate policy
     */
    readonly sans: pulumi.Output<outputs.CertManagerCertificatePolicySan[] | undefined>;
    /**
     * Subject attribute policies for the certificate policy. Each block constrains a single subject DN attribute (e.g. common_name, organization). Values are matched against the corresponding attribute parsed from the CSR; the '*' wildcard matches any sequence of characters (including dots).<span pulumi-lang-nodejs=" commonName " pulumi-lang-dotnet=" CommonName " pulumi-lang-go=" commonName " pulumi-lang-python=" common_name " pulumi-lang-yaml=" commonName " pulumi-lang-java=" commonName " pulumi-lang-hcl=" common_name "> commonName </span>matches the CN attribute only.<span pulumi-lang-nodejs=" domainComponent " pulumi-lang-dotnet=" DomainComponent " pulumi-lang-go=" domainComponent " pulumi-lang-python=" domain_component " pulumi-lang-yaml=" domainComponent " pulumi-lang-java=" domainComponent " pulumi-lang-hcl=" domain_component "> domainComponent </span>(DC) is an independent attribute matched separately from common_name: a certificate may carry multiple DC values, and each is matched individually against this block.
     */
    readonly subjects: pulumi.Output<outputs.CertManagerCertificatePolicySubject[] | undefined>;
    /**
     * Validity constraints for the certificate policy
     */
    readonly validity: pulumi.Output<outputs.CertManagerCertificatePolicyValidity | undefined>;
    /**
     * Create a CertManagerCertificatePolicy resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args?: CertManagerCertificatePolicyArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering CertManagerCertificatePolicy resources.
 */
export interface CertManagerCertificatePolicyState {
    /**
     * Algorithm constraints for the certificate policy. Omit the block to accept any algorithm; each list restricts its own kind independently and needs at least one value when set.
     */
    algorithms?: pulumi.Input<inputs.CertManagerCertificatePolicyAlgorithms | undefined>;
    /**
     * Basic constraints policy for the certificate policy, controlling whether issued certificates may act as certificate authorities.
     */
    basicConstraints?: pulumi.Input<inputs.CertManagerCertificatePolicyBasicConstraints | undefined>;
    /**
     * The description of the certificate policy (max 255 characters). Omit the attribute instead of passing an empty string.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * Extended key usage policies for the certificate policy. When this block is present, requested extended key usages must be within the union of allowed and required; setting allowed and required to empty lists denies all extended key usages. Omit the block for no constraint.
     */
    extendedKeyUsages?: pulumi.Input<inputs.CertManagerCertificatePolicyExtendedKeyUsages | undefined>;
    /**
     * Key usage policies for the certificate policy. When this block is present, requested key usages must be within the union of allowed and required; setting allowed and required to empty lists denies all key usages. Omit the block for no constraint.
     */
    keyUsages?: pulumi.Input<inputs.CertManagerCertificatePolicyKeyUsages | undefined>;
    /**
     * The name of the certificate policy. Must be in slug format: lowercase letters and numbers, separated by single hyphens (e.g. 'web-server-policy').
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * Subject alternative name (SAN) policies for the certificate policy
     */
    sans?: pulumi.Input<pulumi.Input<inputs.CertManagerCertificatePolicySan>[] | undefined>;
    /**
     * Subject attribute policies for the certificate policy. Each block constrains a single subject DN attribute (e.g. common_name, organization). Values are matched against the corresponding attribute parsed from the CSR; the '*' wildcard matches any sequence of characters (including dots).<span pulumi-lang-nodejs=" commonName " pulumi-lang-dotnet=" CommonName " pulumi-lang-go=" commonName " pulumi-lang-python=" common_name " pulumi-lang-yaml=" commonName " pulumi-lang-java=" commonName " pulumi-lang-hcl=" common_name "> commonName </span>matches the CN attribute only.<span pulumi-lang-nodejs=" domainComponent " pulumi-lang-dotnet=" DomainComponent " pulumi-lang-go=" domainComponent " pulumi-lang-python=" domain_component " pulumi-lang-yaml=" domainComponent " pulumi-lang-java=" domainComponent " pulumi-lang-hcl=" domain_component "> domainComponent </span>(DC) is an independent attribute matched separately from common_name: a certificate may carry multiple DC values, and each is matched individually against this block.
     */
    subjects?: pulumi.Input<pulumi.Input<inputs.CertManagerCertificatePolicySubject>[] | undefined>;
    /**
     * Validity constraints for the certificate policy
     */
    validity?: pulumi.Input<inputs.CertManagerCertificatePolicyValidity | undefined>;
}
/**
 * The set of arguments for constructing a CertManagerCertificatePolicy resource.
 */
export interface CertManagerCertificatePolicyArgs {
    /**
     * Algorithm constraints for the certificate policy. Omit the block to accept any algorithm; each list restricts its own kind independently and needs at least one value when set.
     */
    algorithms?: pulumi.Input<inputs.CertManagerCertificatePolicyAlgorithms | undefined>;
    /**
     * Basic constraints policy for the certificate policy, controlling whether issued certificates may act as certificate authorities.
     */
    basicConstraints?: pulumi.Input<inputs.CertManagerCertificatePolicyBasicConstraints | undefined>;
    /**
     * The description of the certificate policy (max 255 characters). Omit the attribute instead of passing an empty string.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * Extended key usage policies for the certificate policy. When this block is present, requested extended key usages must be within the union of allowed and required; setting allowed and required to empty lists denies all extended key usages. Omit the block for no constraint.
     */
    extendedKeyUsages?: pulumi.Input<inputs.CertManagerCertificatePolicyExtendedKeyUsages | undefined>;
    /**
     * Key usage policies for the certificate policy. When this block is present, requested key usages must be within the union of allowed and required; setting allowed and required to empty lists denies all key usages. Omit the block for no constraint.
     */
    keyUsages?: pulumi.Input<inputs.CertManagerCertificatePolicyKeyUsages | undefined>;
    /**
     * The name of the certificate policy. Must be in slug format: lowercase letters and numbers, separated by single hyphens (e.g. 'web-server-policy').
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * Subject alternative name (SAN) policies for the certificate policy
     */
    sans?: pulumi.Input<pulumi.Input<inputs.CertManagerCertificatePolicySan>[] | undefined>;
    /**
     * Subject attribute policies for the certificate policy. Each block constrains a single subject DN attribute (e.g. common_name, organization). Values are matched against the corresponding attribute parsed from the CSR; the '*' wildcard matches any sequence of characters (including dots).<span pulumi-lang-nodejs=" commonName " pulumi-lang-dotnet=" CommonName " pulumi-lang-go=" commonName " pulumi-lang-python=" common_name " pulumi-lang-yaml=" commonName " pulumi-lang-java=" commonName " pulumi-lang-hcl=" common_name "> commonName </span>matches the CN attribute only.<span pulumi-lang-nodejs=" domainComponent " pulumi-lang-dotnet=" DomainComponent " pulumi-lang-go=" domainComponent " pulumi-lang-python=" domain_component " pulumi-lang-yaml=" domainComponent " pulumi-lang-java=" domainComponent " pulumi-lang-hcl=" domain_component "> domainComponent </span>(DC) is an independent attribute matched separately from common_name: a certificate may carry multiple DC values, and each is matched individually against this block.
     */
    subjects?: pulumi.Input<pulumi.Input<inputs.CertManagerCertificatePolicySubject>[] | undefined>;
    /**
     * Validity constraints for the certificate policy
     */
    validity?: pulumi.Input<inputs.CertManagerCertificatePolicyValidity | undefined>;
}
//# sourceMappingURL=certManagerCertificatePolicy.d.ts.map