K8s-config-connector: Support for Google-managed SSL certificates

[ssmall]

Using the Google Cloud Console or gcloud, I can create a Google-managed SSL certificate. As far as I can tell, there is no way to do the same with a ComputeSSLCertificate. Am I misunderstanding the docs or has this support not yet been added?

[kibbles-n-bytes]

Hey @ssmall , we do not yet support for Google-managed SSL certs. Adding it to our tracker, and we'll let you know when we have an update on support.

[ssmall]

Following up on this, it looks like there is already a CRD for managed certificates: https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs#setting_up_the_managed_certificate

However, because it is not a ComputeSSLCertificate, it is not possible to reference it from other CNRM resources. And because the actual cert name is generated (it's not the same as metadata.name), referencing it statically is also not possible.

[AlexBulankou]

@ssmall , from which CNRM resource do you need to reference your Google-managed SSL certificate? Thanks.

[ssmall]

I am trying to reference it from a ComputeTargetHTTPSProxy

[travisrandolph-bestbuy]

@AlexBulankou Our team is also interested in being able to manage Google-managed certs through KCC. We'd want to reference it from a ComputeTargetHTTPSProxy, as well be able to create the cert through KCC.

[jcanseco]

Hi @travisrandolph-bestbuy, thanks, we'll note down that you've requested this resource as well. No updates yet, but we do have this in our backlog and we're keeping track of it.

[jcanseco]

@travisrandolph-bestbuy, note that it _is_ possible to reference managed certs from ComputeTargetHTTPSProxy today. However, you can only do so using external. See the ComputeTargetHTTPSProxy example that this one helpful customer shared in this post.

[tonybenchsci]

Any update on if KCC will be able to do what Deployment Manager has been able to do with:

- name: glb-gke-certificate
  type: compute.beta.sslCertificate
  properties:
    type: MANAGED
    managed:
      domains:
      - hello.example.com