API Evangelist conversational phrasing for Manage Certificate Objects API

# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Manage Certificate Objects API
  version: 1.0.0
extends: openapi/palo-alto-networks-certificateobjects-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 5
- target: $.paths['/v1/config/rulestacks/{rulestackname}/certificates'].get
  update:
    x-apievangelist-phrasing:
      intent: List certificate objects in a rulestack
      effect: read
      questions:
      - Which certificate objects are attached to a Cloud NGFW rulestack?
      - Can I list only the running or candidate certificate objects of a rulestack?
      instructions:
      - text: List certificate objects in rulestack {rulestackname}.
        slots:
          rulestackname: path.rulestackname
      - text: List up to {maxresults} certificates in rulestack {rulestackname}.
        slots:
          maxresults: query.maxresults
          rulestackname: path.rulestackname
      method: generated
      generated: '2026-09-26'
- target: $.paths['/v1/config/rulestacks/{rulestackname}/certificates'].post
  update:
    x-apievangelist-phrasing:
      intent: Create a certificate object in a rulestack
      effect: write
      questions:
      - How do I add a server certificate object to a rulestack?
      - Can a new rulestack certificate be self-signed or come from a signer ARN?
      instructions:
      - text: Create certificate object {Name} in rulestack {rulestackname}.
        slots:
          Name: requestBody.Name
          rulestackname: path.rulestackname
      - text: Add certificate {Name} to rulestack {rulestackname} signed by {CertificateSignerArn}.
        slots:
          Name: requestBody.Name
          rulestackname: path.rulestackname
          CertificateSignerArn: requestBody.CertificateSignerArn
      method: generated
      generated: '2026-09-26'
- target: $.paths['/v1/config/rulestacks/{rulestackname}/certificates/{name}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get certificate object metadata
      effect: read
      questions:
      - What metadata does a specific certificate object in my rulestack have?
      - Can I read one rulestack certificate by name?
      instructions:
      - text: Get certificate {name} from rulestack {rulestackname}.
        slots:
          name: path.name
          rulestackname: path.rulestackname
      - text: Show metadata of certificate object {name} in rulestack {rulestackname}.
        slots:
          name: path.name
          rulestackname: path.rulestackname
      method: generated
      generated: '2026-09-26'
- target: $.paths['/v1/config/rulestacks/{rulestackname}/certificates/{name}'].put
  update:
    x-apievangelist-phrasing:
      intent: Update a rulestack certificate object
      effect: write
      questions:
      - How do I change the signer ARN of an existing rulestack certificate?
      - Can I add an audit comment when editing a certificate object?
      instructions:
      - text: Update certificate {name} in rulestack {rulestackname} with description {Description}.
        slots:
          name: path.name
          rulestackname: path.rulestackname
          Description: requestBody.Description
      - text: Point certificate {name} in rulestack {rulestackname} to signer {CertificateSignerArn}.
        slots:
          name: path.name
          rulestackname: path.rulestackname
          CertificateSignerArn: requestBody.CertificateSignerArn
      method: generated
      generated: '2026-09-26'
- target: $.paths['/v1/config/rulestacks/{rulestackname}/certificates/{name}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a rulestack certificate object
      effect: destructive
      questions:
      - Which call removes a certificate object from a rulestack?
      - Is deleting a rulestack certificate permanent?
      instructions:
      - text: Delete certificate {name} from rulestack {rulestackname}.
        slots:
          name: path.name
          rulestackname: path.rulestackname
      - text: Remove certificate object {name} in rulestack {rulestackname}.
        slots:
          name: path.name
          rulestackname: path.rulestackname
      method: generated
      generated: '2026-09-26'