gcloud privateca subordinates activate

NAME
gcloud privateca subordinates activate - activate a subordinate certificate authority awaiting user activation
SYNOPSIS
gcloud privateca subordinates activate (CERTIFICATE_AUTHORITY : --location=LOCATION --pool=POOL) (--pem-chain=PEM_CHAIN     | --issuer-ca=ISSUER_CA [--issuer-pool=ISSUER_POOL : --issuer-location=ISSUER_LOCATION]) [--auto-enable] [GCLOUD_WIDE_FLAG …]
DESCRIPTION
This command activates a subordinate Certificate Authority (CA) that has been created but is awaiting activation. To activate a CA either provide the path to an already-created PEM CA certificate and issuer chain, or specify the issuer's CA Pool to create the CA certificate now.
EXAMPLES
To activate a subordinate CA named 'server-tls-1' in the location 'us-west1' and CA Pool 'server-tls-pool' using a PEM certificate chain in 'chain.crt': 
gcloud privateca subordinates activate server-tls-1 --location=us-west1 --pool=server-tls-pool --pem-chain=./chain.crt

To activate a subordinate CA named 'server-tls-1' in the location 'us-west1' and CA Pool 'server-tls-pool' using an issuer CA Pool 'issuer-pool' in the same location: 

gcloud privateca subordinates activate server-tls-1 --location=us-west1 --pool=server-tls-pool --issuer-pool=issuer-pool

To activate a subordinate CA named 'server-tls-1' in the location 'us-west1' and CA Pool 'server-tls-pool' using a specific issuer CA 'issuer-ca-1' in the issuer CA Pool 'issuer-pool' in location 'us-east1': 

gcloud privateca subordinates activate server-tls-1 --location=us-west1 --pool=server-tls-pool --issuer-pool=issuer-pool --issuer-location=us-east1 --issuer-ca=issuer-ca-1
POSITIONAL ARGUMENTS
CERTIFICATE AUTHORITY resource - The certificate authority to activate. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.

To set the project attribute:

  • provide the argument CERTIFICATE_AUTHORITY on the command line with a fully specified name;
  • provide the argument --project on the command line;
  • set the property core/project.

This must be specified.

CERTIFICATE_AUTHORITY
ID of the CERTIFICATE_AUTHORITY or fully qualified identifier for the CERTIFICATE_AUTHORITY.

To set the certificate_authority attribute:

  • provide the argument CERTIFICATE_AUTHORITY on the command line.

This positional argument must be specified if any of the other arguments in this group are specified.

--location=LOCATION
The location of the CERTIFICATE_AUTHORITY.

To set the location attribute:

  • provide the argument CERTIFICATE_AUTHORITY on the command line with a fully specified name;
  • provide the argument --location on the command line;
  • set the property privateca/location.
--pool=POOL
The parent CA Pool of the CERTIFICATE_AUTHORITY.

To set the pool attribute:

  • provide the argument CERTIFICATE_AUTHORITY on the command line with a fully specified name;
  • provide the argument --pool on the command line.
REQUIRED FLAGS
The activation method for the subordinate CA.

Exactly one of these must be specified:

--pem-chain=PEM_CHAIN
A file containing a list of PEM-encoded certificates, starting with the current CA certificate and ending with the root CA certificate.
Or at least one of these can be specified:
The issuing resource used for this CA certificate.
--issuer-ca=ISSUER_CA
The Certificate Authority ID of the CA to issue the subordinate CA certificate from. This ID is optional. If omitted, any available ENABLED CA in the issuing CA pool will be chosen.
Issuer resource - The issuing CA Pool to use, if it is on Certificate Authority Service. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.

To set the project attribute:

  • provide the argument --issuer-pool on the command line with a fully specified name;
  • provide the argument --project on the command line;
  • set the property core/project.
--issuer-pool=ISSUER_POOL
ID of the Issuer or fully qualified identifier for the Issuer.

To set the pool attribute:

  • provide the argument --issuer-pool on the command line.

This flag argument must be specified if any of the other arguments in this group are specified.

--issuer-location=ISSUER_LOCATION
The location of the Issuer.

To set the location attribute:

  • provide the argument --issuer-pool on the command line with a fully specified name;
  • provide the argument --issuer-location on the command line;
  • set the property privateca/location.
OPTIONAL FLAGS
--auto-enable
If this flag is set, the Certificate Authority will be automatically enabled upon creation.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.