-
Notifications
You must be signed in to change notification settings - Fork 272
Description
Is your feature request related to a problem?
When importing a certificate into ACM, the DescribeCertificate API does not return values for DomainValidationOptions and SubjectAlternativeNames if SANs are not set in the certificate. This causes the controller to keep retrying DescribeCertificate for setting fields that will never be returned from the API, thereby failing the late initialization process.
Describe the solution you'd like
An optional field in late_initialize that marks late initialization as optional for that field, along with a timeout field that specifies the maximum duration to keep retrying the late initialization process, as in
resources:
Certificate:
fields:
KeyAlgorithm:
late_initialize:
optional: true
timeout: 2mAdditionally, a maxRetries field can also be considered to limit the number of attempts of the late initialization process.
Describe alternatives you've considered
A late_initialize_post_read_one hook can be used to work around this, but it's unwieldy to write such code.