Create a sub-module for DNS Authorization-based Managed Certificates
lbordowitz opened this issue · 3 comments
TL;DR
I'd like to have the option for dns authorization-based managed certificates.
Terraform Resources
https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/certificate_manager_dns_authorization
Detailed design
For each domain provided to `var.managed_ssl_certificate_domains, make a `certificate_manager_dns_authorization` entry, probably with a for_each. Provide `dns_resource_record` as output, as this module does not (and should not) manage DNS.
Under the `managed` block of the `google_certificate_manager_certificate` resource, provide null if not using a DNS authorization based approach. Otherwise, provide the array of certificate_manager_dns_authorization ids from the resources previously created.
Additional information
Currently, I'm switching from an nginx VM to a redirect-only load balancer. The load balancer module you've provided is great, but I want to be able to switch over, with a managed certificate, with as little cut-over time as possible. If I set the certificates to be DNS-authorization based, there will basically be no downtime.
This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days
This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days
This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days