Authoritative zones: accept puppet client dynamic updates #244

Merged
benvin merged 1 commits from benvin/auth-dynamic-update into main 2026-07-11 00:57:52 +10:00

1 Commits

Author SHA1 Message Date
unkinben 43ba8b2356 Let authoritative zones accept puppet client updates
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
Enables per-host RFC2136 updates from puppet (profiles::dns::updater) to
the bind-authoritative zones.

- add client-update BindTSIGKey (operator-generated)
- set dynamicUpdate: true + updateKeyRef: client-update on all 18
  authoritative zones (allow-update { key client-update; })
2026-07-11 00:33:49 +10:00