fix(certificate-manager): reference dns_authz by fully qualified id

GoogleCloudPlatform · Jan 22, 2025 · 42d21e2 · 42d21e2
1 parent 8a23203
commit 42d21e2
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/modules/certificate-manager/main.tf b/modules/certificate-manager/main.tf
@@ -45,9 +45,13 @@ resource "google_certificate_manager_certificate" "certificates" {
   dynamic "managed" {
     for_each = each.value.managed == null ? [] : [""]
     content {
-      domains            = each.value.managed.domains
-      dns_authorizations = each.value.managed.dns_authorizations
-      issuance_config    = try(google_certificate_manager_certificate_issuance_config.default[each.value.managed.issuance_config].id, null)
+      domains = each.value.managed.domains
+      dns_authorizations = each.value.managed.dns_authorizations != null ? [
+        for v in each.value.managed.dns_authorizations : (
+          google_certificate_manager_dns_authorization.dns_authorizations[v].id
+        )
+      ] : null
+      issuance_config = try(google_certificate_manager_certificate_issuance_config.default[each.value.managed.issuance_config].id, null)
     }
   }
   dynamic "self_managed" {