unkin-agent
08d46ccce0
An unsigned localhost query is REFUSED for a zone behind a key-matched view and answers empty with exit 0; signing it with the update creds reaches the view.
39 lines
1.3 KiB
Go
39 lines
1.3 KiB
Go
package bind
|
|
|
|
// Filesystem layout and binary locations inside a BIND pod. The operator mounts
|
|
// its rendered config at ConfigDir (a path distinct from the image's own
|
|
// /etc/bind, so the base image's bind.keys trust anchors remain available for
|
|
// dnssec-validation).
|
|
const (
|
|
// ContainerName is the BIND container name within each pod.
|
|
ContainerName = "bind"
|
|
|
|
// ConfigDir is where the operator projects named.conf, keys and the
|
|
// entrypoint. Kept separate from the image's /etc/bind.
|
|
ConfigDir = "/etc/bind-operator"
|
|
|
|
// DataDir is BIND's writable working directory (backed by the PVC): zone
|
|
// databases and journals.
|
|
DataDir = "/var/lib/named"
|
|
|
|
// RunDir holds the ordinal-selected named.conf (writable emptyDir).
|
|
RunDir = "/run/named"
|
|
|
|
// Binary locations in the ISC BIND9 image (Debian/Ubuntu layout).
|
|
NamedBin = "/usr/sbin/named"
|
|
RndcBin = "/usr/sbin/rndc"
|
|
NsupdateBin = "/usr/bin/nsupdate"
|
|
DigBin = "/usr/bin/dig"
|
|
)
|
|
|
|
// Config file paths derived from ConfigDir.
|
|
const (
|
|
NamedConfRun = RunDir + "/named.conf"
|
|
NamedConfPrimary = ConfigDir + "/named.conf.primary"
|
|
NamedConfSecondary = ConfigDir + "/named.conf.secondary"
|
|
EntrypointPath = ConfigDir + "/entrypoint.sh"
|
|
KeysConfPath = ConfigDir + "/keys.conf"
|
|
RndcKeyPath = ConfigDir + "/rndc.key"
|
|
RndcConfPath = ConfigDir + "/rndc.conf"
|
|
)
|