Unable to verify domain in Google Certificate Manager

[adishm]

Dear Team,

I wanted to inform you that I have successfully deployed an application on Google Kubernetes Engine (GKE). As part of the setup, I've created a managed certificate for my sub-domain using the YAML configuration provided below:

apiVersion: networking.gke.io/v1
kind: ManagedCertificate
metadata:
  name: tj-stage
spec:
  domains:
    - gcpstage.tooljet.com

The certificate is associated with a load balancer; however, I've noticed that it's taking longer than expected to become active. The status has been in the "Provisioning" state for over a day.

It's worth mentioning that we utilize Cloudflare for DNS routing in our setup. 

[jedihomer]

Is the IP address associated with the subdomain the same as the GKE load balancer?  As my understanding with Google Managed Certs, they will only provision to domains that are pointing to them.  If you're using Cloudflare, this is usually in essence reverse proxying the connection.  So the certificate would be generated and handled by Cloudflare.