Chapter 5. Managing top level domain names

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

2. You create a TLD by running the openstack tld create command.

   Example

   For example, if you want to require that users create zones ending in .org, you can create a single .org TLD:

   $ openstack tld create --name org

   Sample output

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

2. Use the following command to list all of the TLDs in the DNS service database:

   $ openstack tld list

3. Use the openstack tld show <TLD_NAME_or_ID> command to display the properties for a particular TLD.

   Example

   $ openstack tld show org

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

2. You can modify a TLD in various ways by using the following command options:

   openstack tld set [--name NAME] \
                     [--description DESCRIPTION | --no-description] \
                     [TLD_ID | TLD_NAME]

   Note

   The earlier syntax diagram does not show the various formatting options for the openstack tld set command. For the list of all the command options, see the link in "Additional resources," later.

   In this example, the openstack tld set command renames the org TLD to example.net:

   Example

   $ openstack tld set org --name example.net

   Sample output

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

2. Obtain the ID or the name for the TLD that you want to delete, by running the following command:

   $ openstack tld list

3. Using either the name or the ID from the previous step, enter the following command:

   $ openstack tld delete <TLD_NAME_or_ID>

   There is no output when this command is successful.

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

2. Use the openstack zone blacklist create command to create a denylist.

   In this example, the domain example.com. and all of its subdomains are added to a denylist.

   Example

   $ openstack zone blacklist create --pattern ".*example.com."

   Sample output

   +-------------+--------------------------------------+
   | Field       | Value                                |
   +-------------+--------------------------------------+
   | created_at  | 2021-10-20T16:15:18.000000           |
   | description | None                                 |
   | id          | 7622e241-8c3d-4c03-a692-8747e3cf2658 |
   | pattern     | .*example.com.                       |
   | updated_at  | None                                 |
   +-------------+--------------------------------------+

Procedure

1. Source your credentials file.

   Example

   $ source ~/overcloudrc

2. Use the following command to list the denylists in the DNS service database:

   $ openstack zone blacklist list

   • With the denylist ID obtained in the previous step, use the openstack zone blacklist show <denylist_ID> command to display properties for a particular denylist.

     Example

     $ openstack zone blacklist show 7622e241-8c3d-4c03-a692-8747e3cf2658

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

2. Obtain the ID for the denylist that you want to modify, by running the following command:

   $ openstack zone blacklist list

3. You can modify a denylist in various ways by using the following command options:

   $ openstack zone blacklist set \
            [--description DESCRIPTION | --no-description] denylist_ID

   Note

   The earlier syntax diagram does not show the various formatting options for the openstack zone blacklist set command. For the list of all the command options, see the link in "Additional resources," later.

   In this example, the regular expression (regex) is changed to allow the web.example.com domain:

   Example

   $ openstack zone blacklist set 81fbfe02-6bf9-4812-a40e-1522ab6862ca --pattern ".*web.example.com"

   Sample output

   +-------------+--------------------------------------+
   | Field       | Value                                |
   +-------------+--------------------------------------+
   | created_at  | 2022-01-08T09:11:43.000000           |
   | description | None                                 |
   | id          | 81fbfe02-6bf9-4812-a40e-1522ab6862ca |
   | pattern     | .*web.example.com                    |
   | updated_at  | 2022-01-15T14:26:18.000000           |
   +-------------+--------------------------------------+

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

2. Obtain the ID for the denylist that you want to delete, by running the following command:

   $ openstack zone blacklist list

3. Using the ID from the previous step, enter the following command:

   $ openstack zone blacklist delete <denylist_ID>

   There is no output when this command is successful.