How to create CDN with LE certificate

[turbosnail]

i was try to apply resource with flags:

resource "gcore_cdn_resource" "some_resource" {
  issue_le_cert = true
  ssl_automated = true
}

but web gui showed me in ssl section what ssl is disabled but when i turn on ssl in gui, LE ssl is disabled too

when i try add ssl_enabled = true its failed with message

│ Error: request: {
│       "sslData": [
│               "Invalid certificate."
│       ]
│ }

required_providers {
    gcore = {
      source  = "G-Core/gcorelabs"
      version = "0.3.40"
    }
  }

[vvelikodny]

@turbosnail Hello! Please, remove ssl_automated=true, additionally origin_group or origin_group required:

resource "gcore_cdn_resource" "some_resource" {
  origin_group = ...
  issue_le_cert = true
}

[turbosnail]

dont worry, origin_group is seted

origin_group        = gcore_cdn_origingroup.some_group.id

i remove ssl_automated=true but it still wont work

may be it wont work because CNAME not seted in dns records?

if it's true, why i can switch on LE in web gui?

[vvelikodny]

@turbosnail LE cert issue through 3rd patry provider, CNAME should be set in DNS otherwise LE won't be issued and you'll receive e-mail about it with ERROR, we just try issue LE during some hours and then inform you if it's not possible.

if it's true, why i can switch on LE in web GUI?

don't sure I got your last question

[turbosnail]

i tested it with CNAME record.
after CNAME is seted option is enabled automated and started issue LE certificate

[turbosnail]

sorry for reopening but found bug with it

after LE issued and try to make terraform apply it show what it want to delete current LE certificate

# gcore_cdn_resource.some_resource will be updated in-place
  ~ resource "gcore_cdn_resource" "some_resource" {
        id                  = "82968"
      - ssl_automated       = true -> null
      - ssl_data            = 78023 -> null
      - ssl_enabled         = true -> null
        # (7 unchanged attributes hidden)

i think what gcore api must create fake cert and return id of this certificate and other flags when issue_le_cert is set but not after 15 minutes when it issue it

[turbosnail]

@vvelikodny Hi, do you have any news about bugfix?

[gofort]

hi @turbosnail, we have recorded this issue in our internal bug tracking system, we will update you when the bug will be resolved
currently, we are a little bit overwhelmed, so I can't tell you the exact ETA for this issue