Unable to 'destroy' due to dependencies between domain and certificate

[stevecassidy]

I have a configuration (here: https://github.com/FAIMS/FAIMS3/blob/main/infrastructure/digital-ocean/couchdb/loadbalancer.tf) where I'm setting up a load balancer and assigning a domain to it with an associated lets-encrypt certificate. This works fine but when I try to 'destroy' the configuration I get an error saying that the certificate can't be removed because the domain depends on it.

The only solution I've found is to go to the Digital Ocean control panel and select `Networking', open the load balancer and look at the Settings panel. Under Forwarding Rules, first add an HTTP rule, then delete the HTTPS rule. Then delete the certificate
via the doctl command line tool:

doctl compute certificate list # to get the ID
doctl compute certificate delete <ID>

This then allows me to run terraform destroy.

I think I have the depends_on settings right. I note that I also get a similar error if I try deleting the load balancer through the control panel (I think).

Is this a bug or am I missing something in my configuration?

Thanks,
Steve