Gcp/privateca

@swamp/gcp/privatecav2026.07.29.1· 2d agoMODELS

01README

Google Cloud privateca infrastructure models

02Release Notes

Updated: locations, capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

03Models6

@swamp/gcp/privateca/capoolsv2026.07.29.1capools.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
encryptionSpec?	object	no	Optional. When EncryptionSpec is provided, the Subject, SubjectAltNames, and the PEM-encoded certificate fields will be encrypted at rest.
issuancePolicy?	object	no	Optional. The IssuancePolicy to control how Certificates will be issued from this CaPool.
labels?	record	no	Optional. Labels with user-defined metadata.
name?	string	no	Identifier. The resource name for this CaPool in the format `projects//locations//caPools/*`.
publishingOptions?	object	no	Optional. The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
tier?	enum	no	Required. Immutable. The Tier of this CaPool.
caPoolId?	string	no	Required. It must be unique within a location and match the regular expression `[a-zA-Z0-9_-]{1,63}`
requestId?	string	no	Optional. An ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a caPools

fn get(identifier: string)

Get a caPools

Argument	Type	Required	Description
identifier	string	yes	The name of the caPools

fn update(identifier?: string)

Update caPools attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific caPools by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the caPools

Argument	Type	Required	Description
identifier	string	yes	The name of the caPools

fn sync(identifier?: string)

Sync caPools state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific caPools by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List caPools resources

Argument	Type	Required	Description
filter?	string	no	Optional. Only include resources that match the filter in the response.
orderBy?	string	no	Optional. Specify how the results should be sorted.
pageSize?	number	no	Optional. Limit on the number of CaPools to include in the response. Further CaPools can subsequently be obtained by including the ListCaPoolsResponse.next_page_token in a subsequent request. If unspecified, the server will pick an appropriate default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

fn fetch_ca_certs(requestId?: any)

fetch ca certs

Argument	Type	Required	Description
requestId?	any	no

fn get_iam_policy()

get iam policy

fn set_iam_policy(policy?: any, updateMask?: any)

set iam policy

Argument	Type	Required	Description
policy?	any	no
updateMask?	any	no

fn test_iam_permissions(permissions?: any)

test iam permissions

Argument	Type	Required	Description
permissions?	any	no

Resources

state(infinite)— A CaPool represents a group of CertificateAuthorities that form a trust ancho...

@swamp/gcp/privateca/capools-certificateauthoritiesv2026.07.29.1capools_certificateauthorities.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
config?	object	no	Required. Immutable. The config used to create a self-signed X.509 certificate or CSR.
gcsBucket?	string	no	Immutable. The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and CRLs. This must be a bucket name, without any prefixes (such as `gs://`) or suffixes (such as `.googleapis.com`). For example, to use a bucket named `my-bucket`, you would simply specify `my-bucket`. If not specified, a managed bucket will be created.
keySpec?	object	no	Required. Immutable. Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA certificate. Otherwise, it is used to sign a CSR.
labels?	record	no	Optional. Labels with user-defined metadata.
lifetime?	string	no	Required. Immutable. The desired lifetime of the CA certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate.
name?	string	no	Identifier. The resource name for this CertificateAuthority in the format `projects//locations//caPools//certificateAuthorities/`.
subordinateConfig?	object	no	Optional. If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which describes its issuers. This may be updated, but this CertificateAuthority must continue to validate.
type?	enum	no	Required. Immutable. The Type of this CertificateAuthority.
userDefinedAccessUrls?	object	no	Optional. User-defined URLs for CA certificate and CRLs. The service does not publish content to these URLs. It is up to the user to mirror content to these URLs.
certificateAuthorityId?	string	no	Required. It must be unique within a location and match the regular expression `[a-zA-Z0-9_-]{1,63}`
requestId?	string	no	Optional. An ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and
parent?	string	no	The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create(waitForReady?: boolean)

Create a certificateAuthorities

Argument	Type	Required	Description
waitForReady?	boolean	no	Wait for the resource to reach a ready state after creation (default: true)

fn get(identifier: string)

Get a certificateAuthorities

Argument	Type	Required	Description
identifier	string	yes	The name of the certificateAuthorities

fn update(identifier?: string, waitForReady?: boolean)

Update certificateAuthorities attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific certificateAuthorities by name (e.g. one discovered by list)
waitForReady?	boolean	no	Wait for the resource to reach a ready state after update (default: true)

fn delete(identifier: string)

Delete the certificateAuthorities

Argument	Type	Required	Description
identifier	string	yes	The name of the certificateAuthorities

fn sync(identifier?: string)

Sync certificateAuthorities state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific certificateAuthorities by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List certificateAuthorities resources

Argument	Type	Required	Description
filter?	string	no	Optional. Only include resources that match the filter in the response.
orderBy?	string	no	Optional. Specify how the results should be sorted.
pageSize?	number	no	Optional. Limit on the number of CertificateAuthorities to include in the response. Further CertificateAuthorities can subsequently be obtained by including the ListCertificateAuthoritiesResponse.next_page_token in a subsequent request. If unspecified, the server will pick an appropriate default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

fn activate(pemCaCertificate?: any, requestId?: any, subordinateConfig?: any)

activate

Argument	Type	Required
pemCaCertificate?	any	no
requestId?	any	no
subordinateConfig?	any	no

fn disable(ignoreDependentResources?: any, requestId?: any)

disable

Argument	Type	Required	Description
ignoreDependentResources?	any	no
requestId?	any	no

fn enable(requestId?: any)

enable

Argument	Type	Required	Description
requestId?	any	no

fn fetch()

fetch

fn undelete(requestId?: any)

undelete

Argument	Type	Required	Description
requestId?	any	no

Resources

state(infinite)— A CertificateAuthority represents an individual Certificate Authority. A Cert...

@swamp/gcp/privateca/capools-certificateauthorities-certificaterevocationlistsv2026.07.29.1capools_certificateauthorities_certificaterevocationlists.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
accessUrl?	string	no	Output only. The location where 'pem_crl' can be accessed.
createTime?	string	no	Output only. The time at which this CertificateRevocationList was created.
labels?	record	no	Optional. Labels with user-defined metadata.
name?	string	no	Identifier. The resource name for this CertificateRevocationList in the format `projects//locations//caPools/certificateAuthorities// certificateRevocationLists/*`.
pemCrl?	string	no	Output only. The PEM-encoded X.509 CRL.
revisionId?	string	no	Output only. The revision ID of this CertificateRevocationList. A new revision is committed whenever a new CRL is published. The format is an 8-character hexadecimal string.
revokedCertificates?	array	no	Output only. The revoked serial numbers that appear in pem_crl.
sequenceNumber?	string	no	Output only. The CRL sequence number that appears in pem_crl.
state?	enum	no	Output only. The State for this CertificateRevocationList.
updateTime?	string	no	Output only. The time at which this CertificateRevocationList was updated.
parent?	string	no	The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn get(identifier: string)

Get a certificateRevocationLists

Argument	Type	Required	Description
identifier	string	yes	The name of the certificateRevocationLists

fn update(identifier?: string, waitForReady?: boolean)

Update certificateRevocationLists attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific certificateRevocationLists by name (e.g. one discovered by list)
waitForReady?	boolean	no	Wait for the resource to reach a ready state after update (default: true)

fn sync(identifier?: string)

Sync certificateRevocationLists state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific certificateRevocationLists by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List certificateRevocationLists resources

Argument	Type	Required	Description
filter?	string	no	Optional. Only include resources that match the filter in the response.
orderBy?	string	no	Optional. Specify how the results should be sorted.
pageSize?	number	no	Optional. Limit on the number of CertificateRevocationLists to include in the response. Further CertificateRevocationLists can subsequently be obtained by including the ListCertificateRevocationListsResponse.next_page_token in a subsequent request. If unspecified, the server will pick an appropriate default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

fn get_iam_policy()

get iam policy

fn set_iam_policy(policy?: any, updateMask?: any)

set iam policy

Argument	Type	Required	Description
policy?	any	no
updateMask?	any	no

fn test_iam_permissions(permissions?: any)

test iam permissions

Argument	Type	Required	Description
permissions?	any	no

Resources

state(infinite)— A CertificateRevocationList corresponds to a signed X.509 certificate Revocat...

@swamp/gcp/privateca/capools-certificatesv2026.07.29.1capools_certificates.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
certificateTemplate?	string	no	Immutable. The resource name for a CertificateTemplate used to issue this certificate, in the format `projects//locations//certificateTemplates/*`. If this is specified, the caller must have the necessary permission to use this template. If this is omitted, no template will be used. This template must be in the same location as the Certificate.
config?	object	no	Immutable. A description of the certificate and key that does not require X.509 or ASN.1.
labels?	record	no	Optional. Labels with user-defined metadata.
lifetime?	string	no	Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
name?	string	no	Identifier. The resource name for this Certificate in the format `projects//locations//caPools//certificates/`.
pemCsr?	string	no	Immutable. A pem-encoded X.509 certificate signing request (CSR).
requestedNotBeforeTime?	string	no	Optional. The requested not_before_time of this Certificate. This field may only be set if the CaPool.IssuancePolicy.allow_requester_specified_not_before_time field is set to true for the issuing CaPool. If this field is specified, the certificate will be issued with this 'not_before_time'. If this is not specified, the 'not_before_time' will be set to the issuance time or issuance time minus backdate_duration depending on the CaPool configuration.
subjectMode?	enum	no	Immutable. Specifies how the Certificate's identity fields are to be decided. If this is omitted, the `DEFAULT` subject mode will be used.
certificateId?	string	no	Optional. It must be unique within a location and match the regular expression `[a-zA-Z0-9_-]{1,63}`. This field is required when using a CertificateAuthority in the Enterprise CertificateAuthority.tier, but is optional and its value is ignored otherwise.
issuingCertificateAuthorityId?	string	no	Optional. The resource ID of the CertificateAuthority that should issue the certificate. This optional field will ignore the load-balancing scheme of the Pool and directly issue the certificate from the CA with the specified ID, contained in the same CaPool referenced by `parent`. Per-CA quota rules apply. If left empty, a CertificateAuthority will be chosen from the CaPool by the service. For example, to issue a Certificate from a Certificate Authority with resource name "projects/my-project/lo
requestId?	string	no	Optional. An ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and
parent?	string	no	The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a certificates

fn get(identifier: string)

Get a certificates

Argument	Type	Required	Description
identifier	string	yes	The name of the certificates

fn update(identifier?: string)

Update certificates attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific certificates by name (e.g. one discovered by list)

fn sync(identifier?: string)

Sync certificates state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific certificates by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List certificates resources

Argument	Type	Required	Description
filter?	string	no	Optional. Only include resources that match the filter in the response. For details on supported filters and syntax, see [Certificates Filtering documentation](https://cloud.google.com/certificate-authority-service/docs/sorting-filtering-certificates#filtering_support).
orderBy?	string	no	Optional. Specify how the results should be sorted. For details on supported fields and syntax, see [Certificates Sorting documentation](https://cloud.google.com/certificate-authority-service/docs/sorting-filtering-certificates#sorting_support).
pageSize?	number	no	Optional. Limit on the number of Certificates to include in the response. Further Certificates can subsequently be obtained by including the ListCertificatesResponse.next_page_token in a subsequent request. If unspecified, the server will pick an appropriate default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

fn revoke(reason?: any, requestId?: any)

revoke

Argument	Type	Required	Description
reason?	any	no
requestId?	any	no

Resources

state(infinite)— A Certificate corresponds to a signed X.509 certificate issued by a Certifica...

@swamp/gcp/privateca/certificatetemplatesv2026.07.29.1certificatetemplates.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
description?	string	no	Optional. A human-readable description of scenarios this template is intended for.
identityConstraints?	object	no	Optional. Describes constraints on identities that may be appear in Certificates issued using this template. If this is omitted, then this template will not add restrictions on a certificate's identity.
labels?	record	no	Optional. Labels with user-defined metadata.
maximumLifetime?	string	no	Optional. The maximum lifetime allowed for issued Certificates that use this template. If the issuing CaPool resource's IssuancePolicy specifies a maximum_lifetime the minimum of the two durations will be the maximum lifetime for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective lifetime will be explicitly truncated to match it.
name?	string	no	Identifier. The resource name for this CertificateTemplate in the format `projects//locations//certificateTemplates/*`.
passthroughExtensions?	object	no	Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate. If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions. These constraints do no
predefinedValues?	object	no	Optional. A set of X.509 values that will be applied to all issued certificates that use this template. If the certificate request includes conflicting values for the same properties, they will be overwritten by the values defined here. If the issuing CaPool's IssuancePolicy defines conflicting baseline_values for the same properties, the certificate issuance request will fail.
certificateTemplateId?	string	no	Required. It must be unique within a location and match the regular expression `[a-zA-Z0-9_-]{1,63}`
requestId?	string	no	Optional. An ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a certificateTemplates

fn get(identifier: string)

Get a certificateTemplates

Argument	Type	Required	Description
identifier	string	yes	The name of the certificateTemplates

fn update(identifier?: string)

Update certificateTemplates attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific certificateTemplates by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the certificateTemplates

Argument	Type	Required	Description
identifier	string	yes	The name of the certificateTemplates

fn sync(identifier?: string)

Sync certificateTemplates state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific certificateTemplates by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List certificateTemplates resources

Argument	Type	Required	Description
filter?	string	no	Optional. Only include resources that match the filter in the response.
orderBy?	string	no	Optional. Specify how the results should be sorted.
pageSize?	number	no	Optional. Limit on the number of CertificateTemplates to include in the response. Further CertificateTemplates can subsequently be obtained by including the ListCertificateTemplatesResponse.next_page_token in a subsequent request. If unspecified, the server will pick an appropriate default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

fn get_iam_policy()

get iam policy

fn set_iam_policy(policy?: any, updateMask?: any)

set iam policy

Argument	Type	Required	Description
policy?	any	no
updateMask?	any	no

fn test_iam_permissions(permissions?: any)

test iam permissions

Argument	Type	Required	Description
permissions?	any	no

Resources

state(infinite)— A CertificateTemplate refers to a managed template for certificate issuance.

@swamp/gcp/privateca/locationsv2026.07.29.1locations.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
name	string	yes	The resource that owns the locations collection, if applicable.

fn get(identifier: string)

Get a locations

Argument	Type	Required	Description
identifier	string	yes	The name of the locations

fn sync(identifier?: string)

Sync locations state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific locations by name (e.g. one discovered by list)

fn list(extraLocationTypes?: string, filter?: string, pageSize?: number, maxPages?: number)

List locations resources

Argument	Type	Required	Description
extraLocationTypes?	string	no	Optional. Do not use this field unless explicitly documented otherwise. This is primarily for internal usage.
filter?	string	no	A filter to narrow down results to a preferred subset. The filtering language accepts strings like `"displayName=tokyo"`, and is documented in more detail in [AIP-160](https://google.aip.dev/160).
pageSize?	number	no	The maximum number of results to return. If not set, the service selects a default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— A resource that represents a Google Cloud location.

04Previous Versions19

2026.07.21.4Jul 21, 2026

Updated: locations, capools, capools_certificates

2026.07.21.1Jul 21, 2026

Updated: capools, capools_certificateauthorities, capools_certificates, certificatetemplates

2026.07.20.2Jul 20, 2026

Updated: locations, capools, capools_certificates

2026.07.20.1Jul 20, 2026

Updated: locations, capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

2026.07.19.2Jul 19, 2026

Updated: locations

2026.07.19.1Jul 19, 2026

Updated: locations, capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

2026.07.18.2Jul 18, 2026

Updated: locations, capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

2026.07.17.2Jul 17, 2026

Updated: capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

2026.07.17.1Jul 17, 2026

Updated: capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

2026.06.08.2Jun 8, 2026

Updated: locations, capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

2026.06.07.1Jun 7, 2026

Updated: locations, capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

2026.05.26.1May 26, 2026

Updated: locations, capools, capools_certificates

2026.05.25.1May 25, 2026

Updated: locations, capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

Modified 6 models

2026.05.24.1May 24, 2026

Updated: locations, capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

2026.05.21.2May 21, 2026

Updated: locations, capools, capools_certificateauthorities, capools_certificateauthorities_certificaterevocationlists, capools_certificates, certificatetemplates

2026.05.21.1May 21, 2026

Modified 3 models

2026.05.20.1May 20, 2026

Updated: capools, capools_certificates

2026.05.19.2May 19, 2026

2026.05.19.1May 19, 2026

05Stats

100 / 100

Downloads

Archive size

135.2 KB

Verified by Swamp

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit2/2earned
Has description1/1earned
Platform support declared (or universal)2/2earned
License declared1/1earned
Verified public repository2/2earned

Repository

https://github.com/swamp-club/swamp-extensions

06Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64

07Labels

#gcp #google-cloud #privateca #cloud #infrastructure