This patch fixes a bug when listing zones or updating recordsets in
zones that are shared with more than one project.
Closes-Bug: #2025295
Change-Id: I8af9b5cf8c1473bbf7db71a1fb848fb64509db84
We have had a few questions about classless IN-ADDR.ARPA delegation (RFC 2317) recently. This patch adds a section to the PTR user guide that describes how to setup classless PTR delegation using Designate.
Change-Id: I8e51ccdc0a4bc0d670ba6c7522a83980de7dac9d
If you used a system scoped token to list zones and the zone is not shared,
you could see more zones than expected.
This patch corrects that edge case.
Change-Id: I1be68b27dc052cc273fcfdf53940b38a7661e73b
Previously projects that had a zone shared with them were unable to view the
shared zone. This patch corrects that issue.
Change-Id: Ia3ede57ac2249a1bcd49512aa36452b2b9ffd827
When trying to write unit tests I found that when updating a zone
with recordsets there are scenarios where it would throw an sql
error.
> sqlalchemy.exc.CompileError: Unconsumed column names: zone_name
This fixes up the code path and adds some basic test coverage.
Change-Id: Ia12b530730921db5235fd35f4cabf80b916c216f
Previously the zone export create API relied on the zone lookup to fail if the
project did not have permission to export the zone. Because of this the RBAC
test was simply if the project_id was valid.
With shared zones, administrators may not want to allow exports of a zone that
is shared with a project. This patch corrects the RBAC to check for zone
ownership before creating the zone export. This way a policy can be created to
allow zone exports for projects that have a zone share.
Change-Id: I2ef28eeb285462dc12b13de80cdab06b5cfb929b
This patchset adds support for fields (e.g flags, services, regexp)
to be quoted and empty as described in RFC 2915. While unquoted
fields are NOT optional, the previous behaviour remains for
backward compatibility. The regular expressions have been adjusted
to allow empty string values for quoted fields. Additional tests
added to cover more cases.
https://datatracker.ietf.org/doc/html/rfc2915https://github.com/isc-projects/bind9/blob/main/bin/tests/system/xfer/dig1.good
Change-Id: I44bc7d2a231ed8d63cba69ec95f06358687aa914
We have a lot of abstraction that isn't really needed. This patch
removes some of that abstraction and reorganizes the code accordingly.
- Merged storage and sqlalchemy folders.
- Deprecated [central].storage_driver.
- Minor cleanup to SQL code.
- Cleaned up comments and unit tests.
Change-Id: I8f0508aedcc028b1a6e74c790c5d757a0d6c98d7
We have two almost identical code paths for sink and ptr
records. This patch unifies the two paths and should drastically
lower the overhead of each of these requests.
Change-Id: Iadeaefe361638ec092eab1757f3b89e3020631af
Previously if you tried to create a zone share with a scoped token that
does not have a project ID, you would receive a 500 error. This patch
corrects that to return a proper error describing that a project ID is
required when creating zone shares.
Change-Id: Ibeb7154a4c300f59dfa25737736f59609b938bcc