From 152cf5e22f170240ccdaa1baaf789649d30a630e Mon Sep 17 00:00:00 2001 From: Hong Han Wong Date: Wed, 21 Jun 2023 15:44:32 +0800 Subject: [PATCH] Add note for designate-bind allow-transfer Closes-Bug: #2003829 Change-Id: I17e0e9be75e84dd8edc4567942dcb16d476dca0a --- doc/source/release-notes/2023.2-bobcat.rst | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/doc/source/release-notes/2023.2-bobcat.rst b/doc/source/release-notes/2023.2-bobcat.rst index b8185f8c..814a9f9d 100644 --- a/doc/source/release-notes/2023.2-bobcat.rst +++ b/doc/source/release-notes/2023.2-bobcat.rst @@ -62,6 +62,20 @@ For example, to set the role cache expiration time to 10 seconds do: The result of this being that keystone will only used cached role assignments for up to 10 seconds before refreshing them from the database. +Designate-bind allow transfer config +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +The designate-bind charm now supports configuring BIND9 [allow-transfer]. +If not set, this defaults to none, which disable allow-transfer. + +For example, to set BIND9 allow-transfer to 10.0.0.0/8 and 172.16.0.0/16: + +.. code-block:: none + + juju config designate-bind allow_transfer_nets="10.0.0.0/8;172.16.0.0/12" + +This will allow designate-bind to perform zone transfer to 10.0.0.0/8 and 172.16.0.0/12. + Documentation updates ---------------------