---
title: "GET /api/v1/pki/syncs/gcp-certificate-manager/{pkiSyncId}"
method: GET
path: "/api/v1/pki/syncs/gcp-certificate-manager/{pkiSyncId}"
tags: ["PKI Syncs"]
---

# GET /api/v1/pki/syncs/gcp-certificate-manager/{pkiSyncId}

`GET /api/v1/pki/syncs/gcp-certificate-manager/{pkiSyncId}`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v1/pki/syncs/gcp-certificate-manager/{pkiSyncId}`
- Auth: none declared

Get the specified GCP Certificate Manager PKI Sync by ID.

## Path parameters

- `pkiSyncId` string, required

## Response `200`

Default Response

- object
  - `id` string, uuid, required
  - `name` string, required
  - `description` string, nullable
  - `destination` 'gcp-certificate-manager', required
  - `isAutoSyncEnabled` boolean, required
  - `destinationConfig` object, required
    - `gcpProjectId` string, required
    - `location` string, required
    - `certificateMapBinding` object
      - `certificateMap` string, required
      - `hostname` string
    - `scope` 'default' | 'edge-cache' | 'all-regions' | 'client-auth'
  - `syncOptions` object, required
    - `canRemoveCertificates` boolean
    - `includeRootCa` boolean
    - `preserveItemOnRenewal` boolean
    - `healthCheckCommand` string, nullable
    - `canImportCertificates` false
    - `labels` object[]
      - `key` string, required
      - `value` string, required
    - `certificateNameSchema` string, required
  - `projectId` string, uuid, required
  - `subscriberId` string, uuid, nullable
  - `connectionId` string, uuid, required
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required
  - `syncStatus` string, nullable
  - `lastSyncedAt` string, date-time, nullable
  - `lastHealthCheckRanAt` string, date-time, nullable
  - `lastHealthCheckStatus` 'pending' | 'running' | 'succeeded' | 'failed', nullable
  - `lastHealthCheckMessage` string, nullable
  - `filters` object, nullable: Which of the Application's certificates this sync holds. A certificate must match every field that is set, and a sync with no filters holds nothing.
    - `profileIds` string[]
    - `certificateOrderIds` string[]
    - `metadata` object[]
      - `key` string, required
      - `value` string

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

## Changes

- **2026-09-17** `7a0c98551644`: 1 info
  - added the optional property `filters` to the response with the `200` status
- **2026-08-28** `c339fd54e42e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/pki/syncs/gcp-certificate-manager/:pkiSyncId/get.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/7f940199c899?raw)