---
# Internal client networks allowed to query the authoritative servers,
# mirrored from the puppet authoritative /etc/named/acls.conf
# (acl-main.unkin.net). Named auth-acl-main because the resolver has its own,
# differently-scoped acl-main.unkin.net in the same namespace.
apiVersion: bind.unkin.net/v1alpha1
kind: BindACL
metadata:
  name: auth-acl-main
  namespace: bind-internal
spec:
  clusterRef: bind-authoritative
  entries:
    - 198.18.13.0/24
    - 198.18.14.0/24
    - 198.18.15.0/24
    - 198.18.16.0/24
    - 198.18.17.0/24
    - 198.18.19.0/24
    - 198.18.20.0/24
    - 198.18.24.0/24
    - 198.18.25.0/24
    - 198.18.26.0/24
    - 198.18.27.0/24
    - 198.18.28.0/24
    - 198.18.29.0/24