<p>By default creating a managed certificate object on GKE creates a managed certificate of type &quot;Load Balancer Authorization&quot;. How can I create one with DNS authorization through GKE?</p>
<p><a href="https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs" rel="nofollow noreferrer">https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs</a></p>
<pre><code>apiVersion: networking.gke.io/v1
kind: ManagedCertificate
metadata:
  name: managed-cert
spec:
  domains:
    - DOMAIN_NAME1
    - DOMAIN_NAME2
</code></pre>
<p>I want to add wildcard domains and this only possible with DNS authorization.</p>
<p><a href="https://stackoverflow.com/questions/73734679/how-to-generate-google-managed-certificates-for-wildcard-hostnames-in-gcp">How to generate Google-managed certificates for wildcard hostnames in GCP?</a></p>

<p>To create a google managed certificate with DNS Authorization follow this <a href="https://cloud.google.com/certificate-manager/docs/deploy-google-managed-dns-auth#create_a_google-managed_certificate_referencing_the_dns_authorization" rel="nofollow noreferrer">Google official doc</a> and <a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/certificate_manager_dns_authorization" rel="nofollow noreferrer">Terraform doc</a>.  `</p>
<blockquote>
<p>Each DNS authorization stores information about the DNS record that
you need to set up and covers a single domain plus its wildcard—for
example, example.com and *.example.com.</p>
</blockquote>
<ul>
<li>You need to add a domain name and wild card name in the same domain
name while creating the certificate.</li>
<li>By using the certificate map and certificate Mapping entry, you need
to map this domain and wild card domain.</li>
<li>Create two certificate map entries one for domain and other for wild card domain. This will help the certificate to be active. You can also refer to this <a href="https://github.com/hashicorp/terraform-provider-google/issues/11037#issuecomment-1362628852" rel="nofollow noreferrer">gitlink</a>  by fbozic for relevant info</li>
</ul>
<p>Already a <a href="https://issuetracker.google.com/issues/123290919" rel="nofollow noreferrer">feature request</a> is raised on this for more wild card usage and the Google Product team is working on this.</p>
