---
title: "POST /v1/{+parent}/certificateIssuanceConfigs"
method: POST
path: "/v1/{+parent}/certificateIssuanceConfigs"
tags: ["projects"]
---

# POST /v1/{+parent}/certificateIssuanceConfigs

`POST /v1/{+parent}/certificateIssuanceConfigs`

Creates a new CertificateIssuanceConfig in a given project and location.

## Path parameters

- `parent` string, required

## Query parameters

- `certificateIssuanceConfigId` string

## Request body

- CertificateIssuanceConfig — CertificateIssuanceConfig specifies how to issue and manage a certificate.
  - `updateTime` string, google-datetime — Output only. The last update timestamp of a CertificateIssuanceConfig.
  - `rotationWindowPercentage` integer — Required. Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive.
  - `createTime` string, google-datetime — Output only. The creation timestamp of a CertificateIssuanceConfig.
  - `name` string — Identifier. A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern `projects/*/locations/*/certificateIssuanceConfigs/*`.
  - `tags` object — Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing"
  - `labels` object — Optional. Set of labels associated with a CertificateIssuanceConfig.
  - `description` string — Optional. One or more paragraphs of text description of a CertificateIssuanceConfig.
  - `keyAlgorithm` 'KEY_ALGORITHM_UNSPECIFIED' | 'RSA_2048' | 'ECDSA_P256' — Required. The key algorithm to use when generating the private key.
  - `lifetime` string, google-duration — Required. Workload certificate lifetime requested.
  - `certificateAuthorityConfig` CertificateAuthorityConfig — The CA that issues the workload certificate. It includes CA address, type, authentication to CA service, etc.
    - `certificateAuthorityServiceConfig` CertificateAuthorityServiceConfig — Contains information required to contact CA service.
      - `caPool` string — Required. A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/certificatemanager.md) · [All operations](https://skmtc.net/google/apis/certificatemanager/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/certificatemanager/versions/2a5bf0361fcc/schema)