---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# gcp_certificatemanager_certificate_issuance_config{% #gcp_certificatemanager_certificate_issuance_config %}

## `ancestors`{% #ancestors %}

**Type**: `UNORDERED_LIST_STRING`

## `certificate_authority_config`{% #certificate_authority_config %}

**Type**: `STRUCT`**Provider name**: `certificateAuthorityConfig`**Description**: Required. The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.

- `certificate_authority_service_config`**Type**: `STRUCT`**Provider name**: `certificateAuthorityServiceConfig`**Description**: Defines a CertificateAuthorityServiceConfig.
  - `ca_pool`**Type**: `STRING`**Provider name**: `caPool`**Description**: Required. A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

## `create_time`{% #create_time %}

**Type**: `TIMESTAMP`**Provider name**: `createTime`**Description**: Output only. The creation timestamp of a CertificateIssuanceConfig.

## `description`{% #description %}

**Type**: `STRING`**Provider name**: `description`**Description**: Optional. One or more paragraphs of text description of a CertificateIssuanceConfig.

## `key_algorithm`{% #key_algorithm %}

**Type**: `STRING`**Provider name**: `keyAlgorithm`**Description**: Required. The key algorithm to use when generating the private key.**Possible values**:

- `KEY_ALGORITHM_UNSPECIFIED` - Unspecified key algorithm.
- `RSA_2048` - Specifies RSA with a 2048-bit modulus.
- `ECDSA_P256` - Specifies ECDSA with curve P256.

## `labels`{% #labels %}

**Type**: `UNORDERED_LIST_STRING`

## `lifetime`{% #lifetime %}

**Type**: `STRING`**Provider name**: `lifetime`**Description**: Required. Workload certificate lifetime requested.

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `name`**Description**: Identifier. A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern `projects/*/locations/*/certificateIssuanceConfigs/*`.

## `organization_id`{% #organization_id %}

**Type**: `STRING`

## `parent`{% #parent %}

**Type**: `STRING`

## `project_id`{% #project_id %}

**Type**: `STRING`

## `project_number`{% #project_number %}

**Type**: `STRING`

## `region_id`{% #region_id %}

**Type**: `STRING`

## `resource_name`{% #resource_name %}

**Type**: `STRING`

## `rotation_window_percentage`{% #rotation_window_percentage %}

**Type**: `INT32`**Provider name**: `rotationWindowPercentage`**Description**: Required. Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `update_time`{% #update_time %}

**Type**: `TIMESTAMP`**Provider name**: `updateTime`**Description**: Output only. The last update timestamp of a CertificateIssuanceConfig.

## `zone_id`{% #zone_id %}

**Type**: `STRING`