I followed this tutorial and created a DNS authorization for my domain:

> gcloud certificate-manager dns-authorizations create db-dns-authz 
   --domain="my-domain.xyz"
> gcloud certificate-manager dns-authorizations describe db-dns-authz

Create request issued for: [db-dns-authz]
Waiting for operation [projects/my-project/locations/global/operations/operation-1718092428139-61a9890dedc6c-99ccce50-d24058cc] to complete...done.
Created dnsAuthorization [db-dns-authz].
createTime: '2024-06-11T07:53:48.303741080Z'
dnsResourceRecord:
  data: b8fe528f-a4c1-4703-8ee5-e32b0650e3ed.17.authorize.certificatemanager.goog.
  name: _acme-challenge.my-domain.xyz.
  type: CNAME
domain: my-domain.xyz
name: projects/my-project/locations/global/dnsAuthorizations/db-dns-authz
type: FIXED_RECORD
updateTime: '2024-06-11T07:53:49.785420621Z'

I then went to Cloudflare where I managed the DNS for my domain my-domain.xyz and created a CNAME record with the name _acme-challenge.my-domain.xyz. and target b8fe528f-a4c1-4703-8ee5-e32b0650e3ed.17.authorize.certificatemanager.goog..

It’s been a few hours but the certificate is still in a pending state:

❯ gcloud certificate-manager certificates describe db-dns-cert

createTime: '2024-06-11T08:07:57.935081939Z'
managed:
  authorizationAttemptInfo:
  - domain: my-domain.xyz
    state: AUTHORIZING
  dnsAuthorizations:
  - projects/740885263329/locations/global/dnsAuthorizations/db-dns-authz
  domains:
  - my-domain.xyz
  state: PROVISIONING
name: projects/my-project/locations/global/certificates/db-dns-cert
sanDnsnames:
- my-domain.xyz
updateTime: '2024-06-11T08:07:59.385361571Z'

What could be the issue? I even checked with an online lookup tool and saw that my ACME domain is resolving the CNAME: