fix: enable dynamic/tsig updates

- add eyaml to hiera.yaml
- consolidate all paths into single tree
- change to new profiles::dns::client wrapper
- change to new profiles::dns::record wrapper
- change to use concat method to build zone file

hieradata/roles/infra/dns/master.yaml

@@ -1,28 +1,38 @@
 ---
+profiles::dns::master::nameservers:
+  - prodinf01n23.main.unkin.net
+  - prodinf01n24.main.unkin.net
+
 profiles::dns::master::acls:
   acl-main.unkin.net:
     addresses:
       - 198.18.17.0/24
 
 profiles::dns::master::zones:
-  main.unkin.net-master:
+  main.unkin.net:
     domain: 'main.unkin.net'
     zone_type: 'master'
     dynamic: false
-  17.18.198.in-addr.arpa-master:
+    ns_notify: true
+    source: '/var/named/sources/main.unkin.net.conf'
+  17.18.198.in-addr.arpa:
     domain: '17.18.198.in-addr.arpa'
     zone_type: 'master'
     dynamic: false
+    ns_notify: true
+    source: '/var/named/sources/17.18.198.in-addr.arpa.conf'
 
 profiles::dns::master::views:
-  authoritive:
+  master-zones:
     recursion: false
     zones:
-      - main.unkin.net-master
-      - 17.18.198.in-addr.arpa-master
+      - main.unkin.net
+      - 17.18.198.in-addr.arpa
     match_clients:
       - acl-main.unkin.net
 
-profiles::dns::master::tags:
-  ptr: 'master-ptr-records'
-  a: 'master-a-records'
+profiles::dns::master::keys:
+  rndskey:
+    secret_bits: 512
+    algorithm: hmac-sha256
+    secret: "%{lookup('profiles::dns::master::secret')}"