fix(certificate-manager): reference dns_authz by fully qualified id (#2833)

modules/certificate-manager/main.tf

@@ -45,9 +45,13 @@ resource "google_certificate_manager_certificate" "certificates" {
   dynamic "managed" {
     for_each = each.value.managed == null ? [] : [""]
     content {
-      domains            = each.value.managed.domains
-      dns_authorizations = each.value.managed.dns_authorizations
-      issuance_config    = try(google_certificate_manager_certificate_issuance_config.default[each.value.managed.issuance_config].id, null)
+      domains = each.value.managed.domains
+      dns_authorizations = each.value.managed.dns_authorizations != null ? [
+        for v in each.value.managed.dns_authorizations : (
+          google_certificate_manager_dns_authorization.dns_authorizations[v].id
+        )
+      ] : null
+      issuance_config = try(google_certificate_manager_certificate_issuance_config.default[each.value.managed.issuance_config].id, null)
     }
   }
   dynamic "self_managed" {

tests/modules/certificate_manager/examples/map-with-managed-cert-dns-authz.yaml

@@ -18,9 +18,7 @@ values:
     labels: null
     location: global
     managed:
-    - dns_authorizations:
-      - mydomain-mycompany-org
-      domains:
+    - domains:
       - mydomain.mycompany.org
       issuance_config: null
     name: my-certificate-1
@@ -59,4 +57,4 @@ counts:
   google_certificate_manager_certificate_map_entry: 1
   google_certificate_manager_dns_authorization: 1
   modules: 1
-  resources: 4
+  resources: 4