create prow certificates

Author: upodroid

dns/zone-configs/k8s.io._0_base.yaml

@@ -260,6 +260,10 @@ prow:
   type: A
   ttl: 600 # this has needed to change in the past
   value: 35.186.196.185
+# prow-certificates in k8s-infra-prow project
+_acme-challenge.prow:
+  type: CNAME
+  value: ec952040-1ea9-43db-b382-e0fde0cddbb6.16.authorize.certificatemanager.goog.
 hooks.prow:
   - type: A
     ttl: 600 # this has needed to change in the past

infra/gcp/terraform/k8s-infra-prow/certificates.tf

@@ -0,0 +1,19 @@
+resource "google_certificate_manager_dns_authorization" "prow" {
+  name        = "dns-authz-prow-k8s-io"
+  description = "*.prow.k8s.io challenge"
+  domain      = "prow.k8s.io"
+  project = module.project.project_id
+}
+
+resource "google_certificate_manager_certificate" "prow" {
+  name        = "prow-certificates"
+  description = "Prow Certificates"
+  project = module.project.project_id
+  managed {
+    domains = ["prow.k8s.io","*.prow.k8s.io"]
+    dns_authorizations = [
+      google_certificate_manager_dns_authorization.prow.id
+    ]
+  }
+}
+