Package com.google.cloud.security.privateca.v1

Class CaPool.IssuancePolicy.Builder

java.lang.Object
com.google.protobuf.AbstractMessageLite.Builder
com.google.protobuf.AbstractMessage.Builder<BuilderT>
com.google.protobuf.GeneratedMessage.Builder<CaPool.IssuancePolicy.Builder>
com.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.Builder
All Implemented Interfaces:
CaPool.IssuancePolicyOrBuilder, com.google.protobuf.Message.Builder, com.google.protobuf.MessageLite.Builder, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Cloneable
Enclosing class:
CaPool.IssuancePolicy
public static final class CaPool.IssuancePolicy.Builder extends com.google.protobuf.GeneratedMessage.Builder<CaPool.IssuancePolicy.Builder> implements CaPool.IssuancePolicyOrBuilder
 Defines controls over all certificate issuance within a
 [CaPool][google.cloud.security.privateca.v1.CaPool].
Protobuf type google.cloud.security.privateca.v1.CaPool.IssuancePolicy

  • Method Details

    • getDescriptor

      public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

    • internalGetFieldAccessorTable

      protected com.google.protobuf.GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
      Specified by:
      internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessage.Builder<CaPool.IssuancePolicy.Builder>

    • clear

      public CaPool.IssuancePolicy.Builder clear()
      Specified by:
      clear in interface com.google.protobuf.Message.Builder
      Specified by:
      clear in interface com.google.protobuf.MessageLite.Builder
      Overrides:
      clear in class com.google.protobuf.GeneratedMessage.Builder<CaPool.IssuancePolicy.Builder>

    • getDescriptorForType

      public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
      Specified by:
      getDescriptorForType in interface com.google.protobuf.Message.Builder
      Specified by:
      getDescriptorForType in interface com.google.protobuf.MessageOrBuilder
      Overrides:
      getDescriptorForType in class com.google.protobuf.GeneratedMessage.Builder<CaPool.IssuancePolicy.Builder>

    • getDefaultInstanceForType

      public CaPool.IssuancePolicy getDefaultInstanceForType()
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder

    • build

      public CaPool.IssuancePolicy build()
      Specified by:
      build in interface com.google.protobuf.Message.Builder
      Specified by:
      build in interface com.google.protobuf.MessageLite.Builder

    • buildPartial

      public CaPool.IssuancePolicy buildPartial()
      Specified by:
      buildPartial in interface com.google.protobuf.Message.Builder
      Specified by:
      buildPartial in interface com.google.protobuf.MessageLite.Builder

    • mergeFrom

      public CaPool.IssuancePolicy.Builder mergeFrom(com.google.protobuf.Message other)
      Specified by:
      mergeFrom in interface com.google.protobuf.Message.Builder
      Overrides:
      mergeFrom in class com.google.protobuf.AbstractMessage.Builder<CaPool.IssuancePolicy.Builder>

    • mergeFrom

      public CaPool.IssuancePolicy.Builder mergeFrom(CaPool.IssuancePolicy other)

    • isInitialized

      public final boolean isInitialized()
      Specified by:
      isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
      Overrides:
      isInitialized in class com.google.protobuf.GeneratedMessage.Builder<CaPool.IssuancePolicy.Builder>

    • mergeFrom

      public CaPool.IssuancePolicy.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Specified by:
      mergeFrom in interface com.google.protobuf.Message.Builder
      Specified by:
      mergeFrom in interface com.google.protobuf.MessageLite.Builder
      Overrides:
      mergeFrom in class com.google.protobuf.AbstractMessage.Builder<CaPool.IssuancePolicy.Builder>
      Throws:
      IOException

    • getAllowedKeyTypesList

      public List<CaPool.IssuancePolicy.AllowedKeyType> getAllowedKeyTypesList()
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAllowedKeyTypesList in interface CaPool.IssuancePolicyOrBuilder

    • getAllowedKeyTypesCount

      public int getAllowedKeyTypesCount()
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAllowedKeyTypesCount in interface CaPool.IssuancePolicyOrBuilder

    • getAllowedKeyTypes

      public CaPool.IssuancePolicy.AllowedKeyType getAllowedKeyTypes(int index)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAllowedKeyTypes in interface CaPool.IssuancePolicyOrBuilder

    • setAllowedKeyTypes

      public CaPool.IssuancePolicy.Builder setAllowedKeyTypes(int index, CaPool.IssuancePolicy.AllowedKeyType value)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • setAllowedKeyTypes

      public CaPool.IssuancePolicy.Builder setAllowedKeyTypes(int index, CaPool.IssuancePolicy.AllowedKeyType.Builder builderForValue)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • addAllowedKeyTypes

      public CaPool.IssuancePolicy.Builder addAllowedKeyTypes(CaPool.IssuancePolicy.AllowedKeyType value)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • addAllowedKeyTypes

      public CaPool.IssuancePolicy.Builder addAllowedKeyTypes(int index, CaPool.IssuancePolicy.AllowedKeyType value)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • addAllowedKeyTypes

      public CaPool.IssuancePolicy.Builder addAllowedKeyTypes(CaPool.IssuancePolicy.AllowedKeyType.Builder builderForValue)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • addAllowedKeyTypes

      public CaPool.IssuancePolicy.Builder addAllowedKeyTypes(int index, CaPool.IssuancePolicy.AllowedKeyType.Builder builderForValue)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • addAllAllowedKeyTypes

      public CaPool.IssuancePolicy.Builder addAllAllowedKeyTypes(Iterable<? extends CaPool.IssuancePolicy.AllowedKeyType> values)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • clearAllowedKeyTypes

      public CaPool.IssuancePolicy.Builder clearAllowedKeyTypes()
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • removeAllowedKeyTypes

      public CaPool.IssuancePolicy.Builder removeAllowedKeyTypes(int index)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • getAllowedKeyTypesBuilder

      public CaPool.IssuancePolicy.AllowedKeyType.Builder getAllowedKeyTypesBuilder(int index)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • getAllowedKeyTypesOrBuilder

      public CaPool.IssuancePolicy.AllowedKeyTypeOrBuilder getAllowedKeyTypesOrBuilder(int index)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAllowedKeyTypesOrBuilder in interface CaPool.IssuancePolicyOrBuilder

    • getAllowedKeyTypesOrBuilderList

      public List<? extends CaPool.IssuancePolicy.AllowedKeyTypeOrBuilder> getAllowedKeyTypesOrBuilderList()
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAllowedKeyTypesOrBuilderList in interface CaPool.IssuancePolicyOrBuilder

    • addAllowedKeyTypesBuilder

      public CaPool.IssuancePolicy.AllowedKeyType.Builder addAllowedKeyTypesBuilder()
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • addAllowedKeyTypesBuilder

      public CaPool.IssuancePolicy.AllowedKeyType.Builder addAllowedKeyTypesBuilder(int index)
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • getAllowedKeyTypesBuilderList

      public List<CaPool.IssuancePolicy.AllowedKeyType.Builder> getAllowedKeyTypesBuilderList()
       Optional. If any
 [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType]
 is specified, then the certificate request's public key must match one of
 the key types listed here. Otherwise, any key may be used.
      repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];

    • hasBackdateDuration

      public boolean hasBackdateDuration()
       Optional. The duration to backdate all certificates issued from this
 [CaPool][google.cloud.security.privateca.v1.CaPool]. If not set, the
 certificates will be issued with a not_before_time of the issuance time
 (i.e. the current time). If set, the certificates will be issued with a
 not_before_time of the issuance time minus the backdate_duration. The
 not_after_time will be adjusted to preserve the requested lifetime. The
 backdate_duration must be less than or equal to 48 hours.
      .google.protobuf.Duration backdate_duration = 7 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      hasBackdateDuration in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      Whether the backdateDuration field is set.

    • getBackdateDuration

      public com.google.protobuf.Duration getBackdateDuration()
       Optional. The duration to backdate all certificates issued from this
 [CaPool][google.cloud.security.privateca.v1.CaPool]. If not set, the
 certificates will be issued with a not_before_time of the issuance time
 (i.e. the current time). If set, the certificates will be issued with a
 not_before_time of the issuance time minus the backdate_duration. The
 not_after_time will be adjusted to preserve the requested lifetime. The
 backdate_duration must be less than or equal to 48 hours.
      .google.protobuf.Duration backdate_duration = 7 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getBackdateDuration in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      The backdateDuration.

    • setBackdateDuration

      public CaPool.IssuancePolicy.Builder setBackdateDuration(com.google.protobuf.Duration value)
       Optional. The duration to backdate all certificates issued from this
 [CaPool][google.cloud.security.privateca.v1.CaPool]. If not set, the
 certificates will be issued with a not_before_time of the issuance time
 (i.e. the current time). If set, the certificates will be issued with a
 not_before_time of the issuance time minus the backdate_duration. The
 not_after_time will be adjusted to preserve the requested lifetime. The
 backdate_duration must be less than or equal to 48 hours.
      .google.protobuf.Duration backdate_duration = 7 [(.google.api.field_behavior) = OPTIONAL];

    • setBackdateDuration

      public CaPool.IssuancePolicy.Builder setBackdateDuration(com.google.protobuf.Duration.Builder builderForValue)
       Optional. The duration to backdate all certificates issued from this
 [CaPool][google.cloud.security.privateca.v1.CaPool]. If not set, the
 certificates will be issued with a not_before_time of the issuance time
 (i.e. the current time). If set, the certificates will be issued with a
 not_before_time of the issuance time minus the backdate_duration. The
 not_after_time will be adjusted to preserve the requested lifetime. The
 backdate_duration must be less than or equal to 48 hours.
      .google.protobuf.Duration backdate_duration = 7 [(.google.api.field_behavior) = OPTIONAL];

    • mergeBackdateDuration

      public CaPool.IssuancePolicy.Builder mergeBackdateDuration(com.google.protobuf.Duration value)
       Optional. The duration to backdate all certificates issued from this
 [CaPool][google.cloud.security.privateca.v1.CaPool]. If not set, the
 certificates will be issued with a not_before_time of the issuance time
 (i.e. the current time). If set, the certificates will be issued with a
 not_before_time of the issuance time minus the backdate_duration. The
 not_after_time will be adjusted to preserve the requested lifetime. The
 backdate_duration must be less than or equal to 48 hours.
      .google.protobuf.Duration backdate_duration = 7 [(.google.api.field_behavior) = OPTIONAL];

    • clearBackdateDuration

      public CaPool.IssuancePolicy.Builder clearBackdateDuration()
       Optional. The duration to backdate all certificates issued from this
 [CaPool][google.cloud.security.privateca.v1.CaPool]. If not set, the
 certificates will be issued with a not_before_time of the issuance time
 (i.e. the current time). If set, the certificates will be issued with a
 not_before_time of the issuance time minus the backdate_duration. The
 not_after_time will be adjusted to preserve the requested lifetime. The
 backdate_duration must be less than or equal to 48 hours.
      .google.protobuf.Duration backdate_duration = 7 [(.google.api.field_behavior) = OPTIONAL];

    • getBackdateDurationBuilder

      public com.google.protobuf.Duration.Builder getBackdateDurationBuilder()
       Optional. The duration to backdate all certificates issued from this
 [CaPool][google.cloud.security.privateca.v1.CaPool]. If not set, the
 certificates will be issued with a not_before_time of the issuance time
 (i.e. the current time). If set, the certificates will be issued with a
 not_before_time of the issuance time minus the backdate_duration. The
 not_after_time will be adjusted to preserve the requested lifetime. The
 backdate_duration must be less than or equal to 48 hours.
      .google.protobuf.Duration backdate_duration = 7 [(.google.api.field_behavior) = OPTIONAL];

    • getBackdateDurationOrBuilder

      public com.google.protobuf.DurationOrBuilder getBackdateDurationOrBuilder()
       Optional. The duration to backdate all certificates issued from this
 [CaPool][google.cloud.security.privateca.v1.CaPool]. If not set, the
 certificates will be issued with a not_before_time of the issuance time
 (i.e. the current time). If set, the certificates will be issued with a
 not_before_time of the issuance time minus the backdate_duration. The
 not_after_time will be adjusted to preserve the requested lifetime. The
 backdate_duration must be less than or equal to 48 hours.
      .google.protobuf.Duration backdate_duration = 7 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getBackdateDurationOrBuilder in interface CaPool.IssuancePolicyOrBuilder

    • hasMaximumLifetime

      public boolean hasMaximumLifetime()
       Optional. The maximum lifetime allowed for issued
 [Certificates][google.cloud.security.privateca.v1.Certificate]. Note that
 if the issuing
 [CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
 expires before a
 [Certificate][google.cloud.security.privateca.v1.Certificate] resource's
 requested maximum_lifetime, the effective lifetime will be explicitly
 truncated to match it.
      .google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      hasMaximumLifetime in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      Whether the maximumLifetime field is set.

    • getMaximumLifetime

      public com.google.protobuf.Duration getMaximumLifetime()
       Optional. The maximum lifetime allowed for issued
 [Certificates][google.cloud.security.privateca.v1.Certificate]. Note that
 if the issuing
 [CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
 expires before a
 [Certificate][google.cloud.security.privateca.v1.Certificate] resource's
 requested maximum_lifetime, the effective lifetime will be explicitly
 truncated to match it.
      .google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getMaximumLifetime in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      The maximumLifetime.

    • setMaximumLifetime

      public CaPool.IssuancePolicy.Builder setMaximumLifetime(com.google.protobuf.Duration value)
       Optional. The maximum lifetime allowed for issued
 [Certificates][google.cloud.security.privateca.v1.Certificate]. Note that
 if the issuing
 [CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
 expires before a
 [Certificate][google.cloud.security.privateca.v1.Certificate] resource's
 requested maximum_lifetime, the effective lifetime will be explicitly
 truncated to match it.
      .google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];

    • setMaximumLifetime

      public CaPool.IssuancePolicy.Builder setMaximumLifetime(com.google.protobuf.Duration.Builder builderForValue)
       Optional. The maximum lifetime allowed for issued
 [Certificates][google.cloud.security.privateca.v1.Certificate]. Note that
 if the issuing
 [CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
 expires before a
 [Certificate][google.cloud.security.privateca.v1.Certificate] resource's
 requested maximum_lifetime, the effective lifetime will be explicitly
 truncated to match it.
      .google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];

    • mergeMaximumLifetime

      public CaPool.IssuancePolicy.Builder mergeMaximumLifetime(com.google.protobuf.Duration value)
       Optional. The maximum lifetime allowed for issued
 [Certificates][google.cloud.security.privateca.v1.Certificate]. Note that
 if the issuing
 [CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
 expires before a
 [Certificate][google.cloud.security.privateca.v1.Certificate] resource's
 requested maximum_lifetime, the effective lifetime will be explicitly
 truncated to match it.
      .google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];

    • clearMaximumLifetime

      public CaPool.IssuancePolicy.Builder clearMaximumLifetime()
       Optional. The maximum lifetime allowed for issued
 [Certificates][google.cloud.security.privateca.v1.Certificate]. Note that
 if the issuing
 [CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
 expires before a
 [Certificate][google.cloud.security.privateca.v1.Certificate] resource's
 requested maximum_lifetime, the effective lifetime will be explicitly
 truncated to match it.
      .google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];

    • getMaximumLifetimeBuilder

      public com.google.protobuf.Duration.Builder getMaximumLifetimeBuilder()
       Optional. The maximum lifetime allowed for issued
 [Certificates][google.cloud.security.privateca.v1.Certificate]. Note that
 if the issuing
 [CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
 expires before a
 [Certificate][google.cloud.security.privateca.v1.Certificate] resource's
 requested maximum_lifetime, the effective lifetime will be explicitly
 truncated to match it.
      .google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];

    • getMaximumLifetimeOrBuilder

      public com.google.protobuf.DurationOrBuilder getMaximumLifetimeOrBuilder()
       Optional. The maximum lifetime allowed for issued
 [Certificates][google.cloud.security.privateca.v1.Certificate]. Note that
 if the issuing
 [CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority]
 expires before a
 [Certificate][google.cloud.security.privateca.v1.Certificate] resource's
 requested maximum_lifetime, the effective lifetime will be explicitly
 truncated to match it.
      .google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getMaximumLifetimeOrBuilder in interface CaPool.IssuancePolicyOrBuilder

    • hasAllowedIssuanceModes

      public boolean hasAllowedIssuanceModes()
       Optional. If specified, then only methods allowed in the
 [IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
 may be used to issue
 [Certificates][google.cloud.security.privateca.v1.Certificate].
      .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      hasAllowedIssuanceModes in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      Whether the allowedIssuanceModes field is set.

    • getAllowedIssuanceModes

      public CaPool.IssuancePolicy.IssuanceModes getAllowedIssuanceModes()
       Optional. If specified, then only methods allowed in the
 [IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
 may be used to issue
 [Certificates][google.cloud.security.privateca.v1.Certificate].
      .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAllowedIssuanceModes in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      The allowedIssuanceModes.

    • setAllowedIssuanceModes

      public CaPool.IssuancePolicy.Builder setAllowedIssuanceModes(CaPool.IssuancePolicy.IssuanceModes value)
       Optional. If specified, then only methods allowed in the
 [IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
 may be used to issue
 [Certificates][google.cloud.security.privateca.v1.Certificate].
      .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];

    • setAllowedIssuanceModes

      public CaPool.IssuancePolicy.Builder setAllowedIssuanceModes(CaPool.IssuancePolicy.IssuanceModes.Builder builderForValue)
       Optional. If specified, then only methods allowed in the
 [IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
 may be used to issue
 [Certificates][google.cloud.security.privateca.v1.Certificate].
      .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];

    • mergeAllowedIssuanceModes

      public CaPool.IssuancePolicy.Builder mergeAllowedIssuanceModes(CaPool.IssuancePolicy.IssuanceModes value)
       Optional. If specified, then only methods allowed in the
 [IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
 may be used to issue
 [Certificates][google.cloud.security.privateca.v1.Certificate].
      .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];

    • clearAllowedIssuanceModes

      public CaPool.IssuancePolicy.Builder clearAllowedIssuanceModes()
       Optional. If specified, then only methods allowed in the
 [IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
 may be used to issue
 [Certificates][google.cloud.security.privateca.v1.Certificate].
      .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];

    • getAllowedIssuanceModesBuilder

      public CaPool.IssuancePolicy.IssuanceModes.Builder getAllowedIssuanceModesBuilder()
       Optional. If specified, then only methods allowed in the
 [IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
 may be used to issue
 [Certificates][google.cloud.security.privateca.v1.Certificate].
      .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];

    • getAllowedIssuanceModesOrBuilder

      public CaPool.IssuancePolicy.IssuanceModesOrBuilder getAllowedIssuanceModesOrBuilder()
       Optional. If specified, then only methods allowed in the
 [IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes]
 may be used to issue
 [Certificates][google.cloud.security.privateca.v1.Certificate].
      .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getAllowedIssuanceModesOrBuilder in interface CaPool.IssuancePolicyOrBuilder

    • hasBaselineValues

      public boolean hasBaselineValues()
       Optional. A set of X.509 values that will be applied to all certificates
 issued through this [CaPool][google.cloud.security.privateca.v1.CaPool].
 If a certificate request includes conflicting values for the same
 properties, they will be overwritten by the values defined here. If a
 certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 that defines conflicting
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 for the same properties, the certificate issuance request will fail.
      .google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      hasBaselineValues in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      Whether the baselineValues field is set.

    • getBaselineValues

      public X509Parameters getBaselineValues()
       Optional. A set of X.509 values that will be applied to all certificates
 issued through this [CaPool][google.cloud.security.privateca.v1.CaPool].
 If a certificate request includes conflicting values for the same
 properties, they will be overwritten by the values defined here. If a
 certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 that defines conflicting
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 for the same properties, the certificate issuance request will fail.
      .google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getBaselineValues in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      The baselineValues.

    • setBaselineValues

      public CaPool.IssuancePolicy.Builder setBaselineValues(X509Parameters value)
       Optional. A set of X.509 values that will be applied to all certificates
 issued through this [CaPool][google.cloud.security.privateca.v1.CaPool].
 If a certificate request includes conflicting values for the same
 properties, they will be overwritten by the values defined here. If a
 certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 that defines conflicting
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 for the same properties, the certificate issuance request will fail.
      .google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];

    • setBaselineValues

      public CaPool.IssuancePolicy.Builder setBaselineValues(X509Parameters.Builder builderForValue)
       Optional. A set of X.509 values that will be applied to all certificates
 issued through this [CaPool][google.cloud.security.privateca.v1.CaPool].
 If a certificate request includes conflicting values for the same
 properties, they will be overwritten by the values defined here. If a
 certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 that defines conflicting
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 for the same properties, the certificate issuance request will fail.
      .google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];

    • mergeBaselineValues

      public CaPool.IssuancePolicy.Builder mergeBaselineValues(X509Parameters value)
       Optional. A set of X.509 values that will be applied to all certificates
 issued through this [CaPool][google.cloud.security.privateca.v1.CaPool].
 If a certificate request includes conflicting values for the same
 properties, they will be overwritten by the values defined here. If a
 certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 that defines conflicting
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 for the same properties, the certificate issuance request will fail.
      .google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];

    • clearBaselineValues

      public CaPool.IssuancePolicy.Builder clearBaselineValues()
       Optional. A set of X.509 values that will be applied to all certificates
 issued through this [CaPool][google.cloud.security.privateca.v1.CaPool].
 If a certificate request includes conflicting values for the same
 properties, they will be overwritten by the values defined here. If a
 certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 that defines conflicting
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 for the same properties, the certificate issuance request will fail.
      .google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];

    • getBaselineValuesBuilder

      public X509Parameters.Builder getBaselineValuesBuilder()
       Optional. A set of X.509 values that will be applied to all certificates
 issued through this [CaPool][google.cloud.security.privateca.v1.CaPool].
 If a certificate request includes conflicting values for the same
 properties, they will be overwritten by the values defined here. If a
 certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 that defines conflicting
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 for the same properties, the certificate issuance request will fail.
      .google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];

    • getBaselineValuesOrBuilder

      public X509ParametersOrBuilder getBaselineValuesOrBuilder()
       Optional. A set of X.509 values that will be applied to all certificates
 issued through this [CaPool][google.cloud.security.privateca.v1.CaPool].
 If a certificate request includes conflicting values for the same
 properties, they will be overwritten by the values defined here. If a
 certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 that defines conflicting
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 for the same properties, the certificate issuance request will fail.
      .google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getBaselineValuesOrBuilder in interface CaPool.IssuancePolicyOrBuilder

    • hasIdentityConstraints

      public boolean hasIdentityConstraints()
       Optional. Describes constraints on identities that may appear in
 [Certificates][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If this
 is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool]
 will not add restrictions on a certificate's identity.
      .google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      hasIdentityConstraints in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      Whether the identityConstraints field is set.

    • getIdentityConstraints

      public CertificateIdentityConstraints getIdentityConstraints()
       Optional. Describes constraints on identities that may appear in
 [Certificates][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If this
 is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool]
 will not add restrictions on a certificate's identity.
      .google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getIdentityConstraints in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      The identityConstraints.

    • setIdentityConstraints

      public CaPool.IssuancePolicy.Builder setIdentityConstraints(CertificateIdentityConstraints value)
       Optional. Describes constraints on identities that may appear in
 [Certificates][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If this
 is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool]
 will not add restrictions on a certificate's identity.
      .google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];

    • setIdentityConstraints

      public CaPool.IssuancePolicy.Builder setIdentityConstraints(CertificateIdentityConstraints.Builder builderForValue)
       Optional. Describes constraints on identities that may appear in
 [Certificates][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If this
 is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool]
 will not add restrictions on a certificate's identity.
      .google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];

    • mergeIdentityConstraints

      public CaPool.IssuancePolicy.Builder mergeIdentityConstraints(CertificateIdentityConstraints value)
       Optional. Describes constraints on identities that may appear in
 [Certificates][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If this
 is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool]
 will not add restrictions on a certificate's identity.
      .google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];

    • clearIdentityConstraints

      public CaPool.IssuancePolicy.Builder clearIdentityConstraints()
       Optional. Describes constraints on identities that may appear in
 [Certificates][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If this
 is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool]
 will not add restrictions on a certificate's identity.
      .google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];

    • getIdentityConstraintsBuilder

      public CertificateIdentityConstraints.Builder getIdentityConstraintsBuilder()
       Optional. Describes constraints on identities that may appear in
 [Certificates][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If this
 is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool]
 will not add restrictions on a certificate's identity.
      .google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];

    • getIdentityConstraintsOrBuilder

      public CertificateIdentityConstraintsOrBuilder getIdentityConstraintsOrBuilder()
       Optional. Describes constraints on identities that may appear in
 [Certificates][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If this
 is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool]
 will not add restrictions on a certificate's identity.
      .google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getIdentityConstraintsOrBuilder in interface CaPool.IssuancePolicyOrBuilder

    • hasPassthroughExtensions

      public boolean hasPassthroughExtensions()
       Optional. Describes the set of X.509 extensions that may appear in a
 [Certificate][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a
 certificate request sets extensions that don't appear in the
 [passthrough_extensions][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.passthrough_extensions],
 those extensions will be dropped. If a certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 with
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 that don't appear here, the certificate issuance request will fail. If
 this is omitted, then this
 [CaPool][google.cloud.security.privateca.v1.CaPool] will not add
 restrictions on a certificate's X.509 extensions. These constraints do
 not apply to X.509 extensions set in this
 [CaPool][google.cloud.security.privateca.v1.CaPool]'s
 [baseline_values][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.baseline_values].
      .google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      hasPassthroughExtensions in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      Whether the passthroughExtensions field is set.

    • getPassthroughExtensions

      public CertificateExtensionConstraints getPassthroughExtensions()
       Optional. Describes the set of X.509 extensions that may appear in a
 [Certificate][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a
 certificate request sets extensions that don't appear in the
 [passthrough_extensions][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.passthrough_extensions],
 those extensions will be dropped. If a certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 with
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 that don't appear here, the certificate issuance request will fail. If
 this is omitted, then this
 [CaPool][google.cloud.security.privateca.v1.CaPool] will not add
 restrictions on a certificate's X.509 extensions. These constraints do
 not apply to X.509 extensions set in this
 [CaPool][google.cloud.security.privateca.v1.CaPool]'s
 [baseline_values][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.baseline_values].
      .google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getPassthroughExtensions in interface CaPool.IssuancePolicyOrBuilder
      Returns:
      The passthroughExtensions.

    • setPassthroughExtensions

      public CaPool.IssuancePolicy.Builder setPassthroughExtensions(CertificateExtensionConstraints value)
       Optional. Describes the set of X.509 extensions that may appear in a
 [Certificate][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a
 certificate request sets extensions that don't appear in the
 [passthrough_extensions][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.passthrough_extensions],
 those extensions will be dropped. If a certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 with
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 that don't appear here, the certificate issuance request will fail. If
 this is omitted, then this
 [CaPool][google.cloud.security.privateca.v1.CaPool] will not add
 restrictions on a certificate's X.509 extensions. These constraints do
 not apply to X.509 extensions set in this
 [CaPool][google.cloud.security.privateca.v1.CaPool]'s
 [baseline_values][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.baseline_values].
      .google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];

    • setPassthroughExtensions

      public CaPool.IssuancePolicy.Builder setPassthroughExtensions(CertificateExtensionConstraints.Builder builderForValue)
       Optional. Describes the set of X.509 extensions that may appear in a
 [Certificate][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a
 certificate request sets extensions that don't appear in the
 [passthrough_extensions][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.passthrough_extensions],
 those extensions will be dropped. If a certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 with
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 that don't appear here, the certificate issuance request will fail. If
 this is omitted, then this
 [CaPool][google.cloud.security.privateca.v1.CaPool] will not add
 restrictions on a certificate's X.509 extensions. These constraints do
 not apply to X.509 extensions set in this
 [CaPool][google.cloud.security.privateca.v1.CaPool]'s
 [baseline_values][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.baseline_values].
      .google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];

    • mergePassthroughExtensions

      public CaPool.IssuancePolicy.Builder mergePassthroughExtensions(CertificateExtensionConstraints value)
       Optional. Describes the set of X.509 extensions that may appear in a
 [Certificate][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a
 certificate request sets extensions that don't appear in the
 [passthrough_extensions][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.passthrough_extensions],
 those extensions will be dropped. If a certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 with
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 that don't appear here, the certificate issuance request will fail. If
 this is omitted, then this
 [CaPool][google.cloud.security.privateca.v1.CaPool] will not add
 restrictions on a certificate's X.509 extensions. These constraints do
 not apply to X.509 extensions set in this
 [CaPool][google.cloud.security.privateca.v1.CaPool]'s
 [baseline_values][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.baseline_values].
      .google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];

    • clearPassthroughExtensions

      public CaPool.IssuancePolicy.Builder clearPassthroughExtensions()
       Optional. Describes the set of X.509 extensions that may appear in a
 [Certificate][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a
 certificate request sets extensions that don't appear in the
 [passthrough_extensions][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.passthrough_extensions],
 those extensions will be dropped. If a certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 with
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 that don't appear here, the certificate issuance request will fail. If
 this is omitted, then this
 [CaPool][google.cloud.security.privateca.v1.CaPool] will not add
 restrictions on a certificate's X.509 extensions. These constraints do
 not apply to X.509 extensions set in this
 [CaPool][google.cloud.security.privateca.v1.CaPool]'s
 [baseline_values][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.baseline_values].
      .google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];

    • getPassthroughExtensionsBuilder

      public CertificateExtensionConstraints.Builder getPassthroughExtensionsBuilder()
       Optional. Describes the set of X.509 extensions that may appear in a
 [Certificate][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a
 certificate request sets extensions that don't appear in the
 [passthrough_extensions][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.passthrough_extensions],
 those extensions will be dropped. If a certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 with
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 that don't appear here, the certificate issuance request will fail. If
 this is omitted, then this
 [CaPool][google.cloud.security.privateca.v1.CaPool] will not add
 restrictions on a certificate's X.509 extensions. These constraints do
 not apply to X.509 extensions set in this
 [CaPool][google.cloud.security.privateca.v1.CaPool]'s
 [baseline_values][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.baseline_values].
      .google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];

    • getPassthroughExtensionsOrBuilder

      public CertificateExtensionConstraintsOrBuilder getPassthroughExtensionsOrBuilder()
       Optional. Describes the set of X.509 extensions that may appear in a
 [Certificate][google.cloud.security.privateca.v1.Certificate] issued
 through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a
 certificate request sets extensions that don't appear in the
 [passthrough_extensions][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.passthrough_extensions],
 those extensions will be dropped. If a certificate request uses a
 [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate]
 with
 [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values]
 that don't appear here, the certificate issuance request will fail. If
 this is omitted, then this
 [CaPool][google.cloud.security.privateca.v1.CaPool] will not add
 restrictions on a certificate's X.509 extensions. These constraints do
 not apply to X.509 extensions set in this
 [CaPool][google.cloud.security.privateca.v1.CaPool]'s
 [baseline_values][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.baseline_values].
      .google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getPassthroughExtensionsOrBuilder in interface CaPool.IssuancePolicyOrBuilder