option to use an existing certificate

[lexelby]

We would find it useful to be able to pass in the self_link of an existing certificate to lb-http. This would allow us to create the certificate outside of terraform to avoid having key material in the tfstate file.

I've implemented this feature in our fork: fastly#1

To my understanding, Fastly already has a corporate CLA, and I've been added to it. If this all looks good to you, I'll create a PR.

[neomantra]

@lexelby Maybe make a pull request from that Fastly repo to this repo?

[lexelby]

Sure, I'd be happy to. But CONTRIBUTING.md says to open an issue and wait for a maintainer to ask me to submit a PR if they like the idea.

[neomantra]

Ah, my bad. Thanks for sharing this.

[eltimn]

@lexelby if you don't mind me asking, how do you get a reference to the self_link of an existing certificate?

[lexelby]

@eltimn Like this:

gcloud compute ssl-certificates list --project <project ID> --uri

[eltimn]

Excellent. Thank you!

[lexelby]

@danisla @danawillow Code for this is working and tested in our environment. How can I help you folks to get this moving? My employer (Fastly) has signed a CLA that includes me, so that shouldn't be a stumbling block.

[danisla]

This is great, please create a PR and I'll get it merged.

[lexelby]

@danisla created: #19

Interestingly, #18 seems to also have the same bring-your-own-cert functionality.

[danisla]

Fixed with #16