Add tsig to master

This commit is contained in:
j 2025-07-01 14:58:20 +10:00
parent a1a00c82e5
commit ed8b1ae4e3

View file

@ -16,6 +16,7 @@ data:
}; };
include "/etc/bind/externaldns-key.conf"; include "/etc/bind/externaldns-key.conf";
include "/etc/bind/tsig-key.conf";
options { options {
directory "/var/cache/bind"; directory "/var/cache/bind";
@ -79,7 +80,7 @@ data:
zone "hxme.net" { zone "hxme.net" {
type slave; type slave;
masters { bind-master.bind9.svc.cluster.local key bind-slave-key; }; masters { bind-master.dns.svc.cluster.local key "bind-slave-key"; };
file "slaves/db.hxme.net"; file "slaves/db.hxme.net";
}; };
--- ---
@ -133,6 +134,9 @@ spec:
- name: dns-secrets - name: dns-secrets
mountPath: /etc/bind/externaldns-key.conf mountPath: /etc/bind/externaldns-key.conf
subPath: externaldns-key.conf subPath: externaldns-key.conf
- name: bind-slave-key
subPath: tsig-key.conf
mountPath: /etc/bind/tsig-key.conf
- name: bind-cache - name: bind-cache
mountPath: /var/cache/bind mountPath: /var/cache/bind
- name: bind-rundir - name: bind-rundir
@ -143,6 +147,8 @@ spec:
- name: dns-secrets - name: dns-secrets
secret: secret:
secretName: dns-secrets secretName: dns-secrets
- name: bind-slave-key
subPath: tsig-key.conf
- name: config - name: config
configMap: configMap:
name: bind-master-config name: bind-master-config