Chapter 5. Managing top level domain names

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

   Copy to Clipboard Toggle word wrap

2. You create a TLD by running the openstack tld create command.

   Example

   For example, if you want to require that users create zones ending in .org, you can create a single .org TLD:

   $ openstack tld create --name org

   Copy to Clipboard Toggle word wrap

   Sample output

   +-------------+--------------------------------------+
   | Field       | Value                                |
   +-------------+--------------------------------------+
   | created_at  | 2022-01-10T13:07:33.000000           |
   | description | None                                 |
   | id          | 9fd0a12d-511e-4024-bf76-6ec2e3e71edd |
   | name        | org                                  |
   | updated_at  | None                                 |
   +-------------+--------------------------------------+

   Copy to Clipboard Toggle word wrap

   Tip

   When using the openstack tld command, ensure that the fully qualified domain name (FQDN) that you enter has no trailing dot, for example, .net..

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

   Copy to Clipboard Toggle word wrap

2. Use the following command to list all of the TLDs in the DNS service database:

   $ openstack tld list

   Copy to Clipboard Toggle word wrap

3. Use the openstack tld show <TLD_NAME_or_ID> command to display the properties for a particular TLD.

   Example

   $ openstack tld show org

   Copy to Clipboard Toggle word wrap

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

   Copy to Clipboard Toggle word wrap

2. You can modify a TLD in various ways by using the following command options:

   openstack tld set [--name NAME] \
                     [--description DESCRIPTION | --no-description] \
                     [TLD_ID | TLD_NAME]

   Copy to Clipboard Toggle word wrap
   Note

   The earlier syntax diagram does not show the various formatting options for the openstack tld set command. For the list of all the command options, see the link in "Additional resources," later.

   In this example, the openstack tld set command renames the org TLD to example.net:

   Example

   $ openstack tld set org --name example.net

   Copy to Clipboard Toggle word wrap

   Sample output

   +-------------+--------------------------------------+
   | Field       | Value                                |
   +-------------+--------------------------------------+
   | created_at  | 2022-01-10T13:07:33.000000           |
   | description |                                      |
   | id          | 9fd0a12d-511e-4024-bf76-6ec2e3e71edd |
   | name        | example.net                          |
   | updated_at  | 2022-01-10T22:35:20.000000           |
   +-------------+--------------------------------------+

   Copy to Clipboard Toggle word wrap

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

   Copy to Clipboard Toggle word wrap

2. Obtain the ID or the name for the TLD that you want to delete, by running the following command:

   $ openstack tld list

   Copy to Clipboard Toggle word wrap

3. Using either the name or the ID from the previous step, enter the following command:

   $ openstack tld delete <TLD_NAME_or_ID>

   Copy to Clipboard Toggle word wrap

   There is no output when this command is successful.

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

   Copy to Clipboard Toggle word wrap

2. Use the openstack zone blacklist create command to create a denylist.

   In this example, the domain example.com. and all of its subdomains are added to a denylist.

   Example

   $ openstack zone blacklist create --pattern ".*example.com."

   Copy to Clipboard Toggle word wrap

   Sample output

   +-------------+--------------------------------------+
   | Field       | Value                                |
   +-------------+--------------------------------------+
   | created_at  | 2021-10-20T16:15:18.000000           |
   | description | None                                 |
   | id          | 7622e241-8c3d-4c03-a692-8747e3cf2658 |
   | pattern     | .*example.com.                       |
   | updated_at  | None                                 |
   +-------------+--------------------------------------+

   Copy to Clipboard Toggle word wrap

Procedure

1. Source your credentials file.

   Example

   $ source ~/overcloudrc

   Copy to Clipboard Toggle word wrap

2. Use the following command to list the denylists in the DNS service database:

   $ openstack zone blacklist list

   Copy to Clipboard Toggle word wrap

   • With the denylist ID obtained in the previous step, use the openstack zone blacklist show <denylist_ID> command to display properties for a particular denylist.

     Example

     $ openstack zone blacklist show 7622e241-8c3d-4c03-a692-8747e3cf2658

     Copy to Clipboard Toggle word wrap

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

   Copy to Clipboard Toggle word wrap

2. Obtain the ID for the denylist that you want to modify, by running the following command:

   $ openstack zone blacklist list

   Copy to Clipboard Toggle word wrap

3. You can modify a denylist in various ways by using the following command options:

   $ openstack zone blacklist set \
            [--description DESCRIPTION | --no-description] denylist_ID

   Copy to Clipboard Toggle word wrap
   Note

   The earlier syntax diagram does not show the various formatting options for the openstack zone blacklist set command. For the list of all the command options, see the link in "Additional resources," later.

   In this example, the regular expression (regex) is changed to allow the web.example.com domain:

   Example

   $ openstack zone blacklist set 81fbfe02-6bf9-4812-a40e-1522ab6862ca --pattern ".*web.example.com"

   Copy to Clipboard Toggle word wrap

   Sample output

   +-------------+--------------------------------------+
   | Field       | Value                                |
   +-------------+--------------------------------------+
   | created_at  | 2022-01-08T09:11:43.000000           |
   | description | None                                 |
   | id          | 81fbfe02-6bf9-4812-a40e-1522ab6862ca |
   | pattern     | .*web.example.com                    |
   | updated_at  | 2022-01-15T14:26:18.000000           |
   +-------------+--------------------------------------+

   Copy to Clipboard Toggle word wrap

Procedure

1. As a cloud administrator, source your credentials file.

   Example

   $ source ~/overcloudrc

   Copy to Clipboard Toggle word wrap

2. Obtain the ID for the denylist that you want to delete, by running the following command:

   $ openstack zone blacklist list

   Copy to Clipboard Toggle word wrap

3. Using the ID from the previous step, enter the following command:

   $ openstack zone blacklist delete <denylist_ID>

   Copy to Clipboard Toggle word wrap

   There is no output when this command is successful.