fix(google_fastly_waf): Allowing force domains update on TLS subscription (#379)

Author: jbuck

google_fastly_waf/certificate.tf

@@ -2,4 +2,5 @@ resource "fastly_tls_subscription" "fastly" {
   count                 = length(var.subscription_domains) > 0 ? 1 : 0
   domains               = [for domain in var.subscription_domains : domain.name]
   certificate_authority = "lets-encrypt"
+  force_update          = var.subscription_domains_force_update
 }

google_fastly_waf/variables.tf

@@ -53,6 +53,12 @@ variable "subscription_domains" {
   default     = []
 }
 
+variable "subscription_domains_force_update" {
+  default     = false
+  description = "Force update the subscription even if it has active domains. Warning: this can disable production traffic if used incorrectly."
+  type        = bool
+}
+
 variable "response_objects" {
   description = "List of synthetic response objects to attach to the Fastly service."
   type = list(object({