Chapter 5. Managing top level domain names

Procedure

1. Access the remote shell for the OpenStackClient pod from your workstation:

   $ oc rsh -n openstack openstackclient

2. You create a TLD by running the openstack tld create command.

   Example

   For example, if you want to require that users create zones ending in .com, you can create a single .com TLD:

   $ openstack tld create --name com

   Sample output

Procedure

1. Access the remote shell for the OpenStackClient pod from your workstation:

   $ oc rsh -n openstack openstackclient

2. Use the following command to list all of the TLDs in the DNS service database:

   $ openstack tld list

3. Use the openstack tld show <TLD_NAME_or_ID> command to display the properties for a particular TLD.

   Example

   $ openstack tld show com

Procedure

1. Access the remote shell for the OpenStackClient pod from your workstation:

   $ oc rsh -n openstack openstackclient

2. You can modify a TLD in various ways by using the following command options:

   openstack tld set [--name NAME] \
                     [--description DESCRIPTION | --no-description] \
                     [TLD_ID | TLD_NAME]

   Note

   The earlier syntax diagram does not show the various formatting options for the openstack tld set command. For the list of all the command options, see the link in "Additional resources," later.

   In this example, the openstack tld set command renames the org TLD to example.net:

   Example

   $ openstack tld set org --name example.net

   Sample output

Procedure

1. Access the remote shell for the OpenStackClient pod from your workstation:

   $ oc rsh -n openstack openstackclient

2. Obtain the ID or the name for the TLD that you want to delete, by running the following command:

   $ openstack tld list

3. Using either the name or the ID from the previous step, enter the following command:

   $ openstack tld delete <TLD_NAME_or_ID>

   There is no output when this command is successful.

Procedure

1. Access the remote shell for the OpenStackClient pod from your workstation:

   $ oc rsh -n openstack openstackclient

2. Use the openstack zone blacklist create command to create a denylist.

   In this example, the domain example.com. and all of its subdomains are added to a denylist.

   Example

   $ openstack zone blacklist create --pattern ".*example.com."

   Sample output

   +-------------+--------------------------------------+
   | Field       | Value                                |
   +-------------+--------------------------------------+
   | created_at  | 2021-10-20T16:15:18.000000           |
   | description | None                                 |
   | id          | 7622e241-8c3d-4c03-a692-8747e3cf2658 |
   | pattern     | .*example.com.                       |
   | updated_at  | None                                 |
   +-------------+--------------------------------------+

Procedure

1. Confirm that the system OS_CLOUD variable is set for your cloud:

   $ echo $OS_CLOUD
   my_cloud

   Reset the variable if necessary:

   $ export OS_CLOUD=my_other_cloud

   As an alternative, you can specify the cloud name by adding the --os-cloud <cloud_name> option each time you run an openstack command.

2. Use the following command to list the denylists in the DNS service database:

   $ openstack zone blacklist list

   • With the denylist ID obtained in the previous step, use the openstack zone blacklist show <denylist_ID> command to display properties for a particular denylist.

     Example

     $ openstack zone blacklist show 7622e241-8c3d-4c03-a692-8747e3cf2658

Procedure

1. Access the remote shell for the OpenStackClient pod from your workstation:

   $ oc rsh -n openstack openstackclient

2. Obtain the ID for the denylist that you want to modify, by running the following command:

   $ openstack zone blacklist list

3. You can modify a denylist in various ways by using the following command options:

   $ openstack zone blacklist set \
   [--description DESCRIPTION | --no-description] denylist_ID

   Note

   The earlier syntax diagram does not show the various formatting options for the openstack zone blacklist set command. For the list of all the command options, see the link in "Additional resources," later.

   In this example, the regular expression (regex) is changed to allow the web.example.com domain:

   Example

   $ openstack zone blacklist set 81fbfe02-6bf9-4812-a40e-1522ab6862ca \
   --pattern ".*web.example.com"

   Sample output

   +-------------+--------------------------------------+
   | Field       | Value                                |
   +-------------+--------------------------------------+
   | created_at  | 2022-01-08T09:11:43.000000           |
   | description | None                                 |
   | id          | 81fbfe02-6bf9-4812-a40e-1522ab6862ca |
   | pattern     | .*web.example.com                    |
   | updated_at  | 2022-01-15T14:26:18.000000           |
   +-------------+--------------------------------------+

Procedure

1. Access the remote shell for the OpenStackClient pod from your workstation:

   $ oc rsh -n openstack openstackclient

2. Obtain the ID for the denylist that you want to delete, by running the following command:

   $ openstack zone blacklist list

3. Using the ID from the previous step, enter the following command:

   $ openstack zone blacklist delete <denylist_ID>

   There is no output when this command is successful.