Add note for designate-bind allow-transfer

Closes-Bug: #2003829
Change-Id: I17e0e9be75e84dd8edc4567942dcb16d476dca0a
This commit is contained in:
Hong Han Wong 2023-06-21 15:44:32 +08:00
parent 56313f24f5
commit 152cf5e22f
1 changed files with 14 additions and 0 deletions

View File

@ -62,6 +62,20 @@ For example, to set the role cache expiration time to 10 seconds do:
The result of this being that keystone will only used cached role assignments for up to The result of this being that keystone will only used cached role assignments for up to
10 seconds before refreshing them from the database. 10 seconds before refreshing them from the database.
Designate-bind allow transfer config
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The designate-bind charm now supports configuring BIND9 [allow-transfer].
If not set, this defaults to none, which disable allow-transfer.
For example, to set BIND9 allow-transfer to 10.0.0.0/8 and 172.16.0.0/16:
.. code-block:: none
juju config designate-bind allow_transfer_nets="10.0.0.0/8;172.16.0.0/12"
This will allow designate-bind to perform zone transfer to 10.0.0.0/8 and 172.16.0.0/12.
Documentation updates Documentation updates
--------------------- ---------------------