GCP DNS Authorization Per Project Record

[gerardocorea]

Describe your question

The gcloud command for creating a dns authorization now supports using a --type flag and using a PER_PROJECT_RECORD option. This allows for creation the same google managed certificate in mutiple projects and having a unique DNS authorization cname so google can authorize and issue the certificate for each project. In the past this was not possible because the same acme challenge cname was created with different a different data value. I don't see this as a field in the CertificateManagerDNSAuthorizationSpec type yet. What information would be needed to expose this so it can be configured when creating a CertificateManagerDNSAuthorization resource?

type: https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/apis/certificatemanager/v1beta1/certificatemanagerdnsauthorization_types.go#L27

Citing documentation: https://cloud.google.com/certificate-manager/docs/dns-authorizations

The default DNS authorization type for a global Google-managed certificate is FIXED_RECORD. To use per-project DNS authorization, run the following command:

gcloud certificate-manager dns-authorizations create AUTHORIZATION_NAME \
    --domain="DOMAIN_NAME" \
    --type="PER_PROJECT_RECORD"