43ba8b2356
Enables per-host RFC2136 updates from puppet (profiles::dns::updater) to
the bind-authoritative zones.
- add client-update BindTSIGKey (operator-generated)
- set dynamicUpdate: true + updateKeyRef: client-update on all 18
authoritative zones (allow-update { key client-update; })