This task is easily done from the console, but I can’t find a way to do this with terraform. Can someone help me with this?
Answering to myself, there is no need to attach provisioning iniator to template.
It’s enough if we create a certificate and attach the necessary policy with the rights to access the template.