terraform-google-modules/terraform-google-lb-http

Create a sub-module for DNS Authorization-based Managed Certificates

lbordowitz opened this issue · 3 comments

TL;DR

I'd like to have the option for dns authorization-based managed certificates.

Terraform Resources

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/certificate_manager_dns_authorization

Detailed design

For each domain provided to `var.managed_ssl_certificate_domains, make a `certificate_manager_dns_authorization` entry, probably with a for_each. Provide `dns_resource_record` as output, as this module does not (and should not) manage DNS.

Under the `managed` block of the `google_certificate_manager_certificate` resource, provide null if not using a DNS authorization based approach. Otherwise, provide the array of certificate_manager_dns_authorization ids from the resources previously created.

Additional information

Currently, I'm switching from an nginx VM to a redirect-only load balancer. The load balancer module you've provided is great, but I want to be able to switch over, with a managed certificate, with as little cut-over time as possible. If I set the certificates to be DNS-authorization based, there will basically be no downtime.

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days