---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# gcp_certificatemanager_certificate_issuance_config{% #gcp_certificatemanager_certificate_issuance_config %}

## `ancestors`{% #ancestors %}

**Type**: `UNORDERED_LIST_STRING` 

## `certificate_authority_config`{% #certificate_authority_config %}

**Type**: `STRUCT` **Provider name**: `certificateAuthorityConfig` **Description**: Required. The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc. 

- `certificate_authority_service_config`**Type**: `STRUCT`**Provider name**: `certificateAuthorityServiceConfig`**Description**: Defines a CertificateAuthorityServiceConfig.
  - `ca_pool`**Type**: `STRING`**Provider name**: `caPool`**Description**: Required. A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

## `create_time`{% #create_time %}

**Type**: `TIMESTAMP` **Provider name**: `createTime` **Description**: Output only. The creation timestamp of a CertificateIssuanceConfig. 

## `description`{% #description %}

**Type**: `STRING` **Provider name**: `description` **Description**: Optional. One or more paragraphs of text description of a CertificateIssuanceConfig. 

## `key_algorithm`{% #key_algorithm %}

**Type**: `STRING` **Provider name**: `keyAlgorithm` **Description**: Required. The key algorithm to use when generating the private key. **Possible values**: 

- `KEY_ALGORITHM_UNSPECIFIED` - Unspecified key algorithm.
- `RSA_2048` - Specifies RSA with a 2048-bit modulus.
- `ECDSA_P256` - Specifies ECDSA with curve P256.

## `labels`{% #labels %}

**Type**: `UNORDERED_LIST_STRING` 

## `lifetime`{% #lifetime %}

**Type**: `STRING` **Provider name**: `lifetime` **Description**: Required. Workload certificate lifetime requested. 

## `name`{% #name %}

**Type**: `STRING` **Provider name**: `name` **Description**: Identifier. A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern `projects/*/locations/*/certificateIssuanceConfigs/*`. 

## `organization_id`{% #organization_id %}

**Type**: `STRING` 

## `parent`{% #parent %}

**Type**: `STRING` 

## `project_id`{% #project_id %}

**Type**: `STRING` 

## `project_number`{% #project_number %}

**Type**: `STRING` 

## `region_id`{% #region_id %}

**Type**: `STRING` 

## `resource_name`{% #resource_name %}

**Type**: `STRING` 

## `rotation_window_percentage`{% #rotation_window_percentage %}

**Type**: `INT32` **Provider name**: `rotationWindowPercentage` **Description**: Required. Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive. 

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING` 

## `update_time`{% #update_time %}

**Type**: `TIMESTAMP` **Provider name**: `updateTime` **Description**: Output only. The last update timestamp of a CertificateIssuanceConfig. 

## `zone_id`{% #zone_id %}

**Type**: `STRING`