unkinben
f9dd90a6b0
Mirrors the puppet authoritative master-zones view (match-clients
acl-main.unkin.net) using a global allow-query instead of a view, since
dynamic primary zones in a view would need per-view allow-new-zones.
- add auth-acl-main BindACL (the puppet acl-main.unkin.net networks)
- allow-query { auth-acl-main; 10.42.0.0/16; } on bind-authoritative
(pod net included so secondaries can SOA-refresh from the primary)
10 lines
143 B
YAML
10 lines
143 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- cluster.yaml
|
|
- tsigkey.yaml
|
|
- zones.yaml
|
|
- acls.yaml
|