Terraform Data Source to get DNSKEY records of DNSSEC-signed managed zones (#3117) (#159)

* DNSSEC Keys

* update schema

* Define as a data source

* add into data sources map

* remove unused import

* add tests

* No fill dns keys of zone is not dnssec enabled

* add docs

* add ds record to ksk

* fix string templating

* improve doc description

* improve ds record generation

* Update third_party/terraform/website/docs/d/datasource_dns_key.html.markdown

Co-Authored-By: Sam Levenick <slevenick@google.com>

* rename data source in plural

* rename file, add comment on maps

* rename doc file

Co-authored-by: Sam Levenick <slevenick@google.com>
Signed-off-by: Modular Magician <magic-modules@google.com>

Co-authored-by: Sam Levenick <slevenick@google.com>
This commit is contained in:
The Magician 2020-02-18 10:30:57 -08:00 committed by GitHub
parent e17ffe42fb
commit 88333580dc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 3 deletions

View file

@ -112,7 +112,7 @@ options:
key (ZSK). Key signing keys have the Secure Entry Point flag set and, key (ZSK). Key signing keys have the Secure Entry Point flag set and,
when active, will only be used to sign resource record sets of type when active, will only be used to sign resource record sets of type
DNSKEY. Zone signing keys do not have the Secure Entry Point flag set DNSKEY. Zone signing keys do not have the Secure Entry Point flag set
and will be used to sign all other types of resource record sets. . and will be used to sign all other types of resource record sets.
- 'Some valid choices include: "keySigning", "zoneSigning"' - 'Some valid choices include: "keySigning", "zoneSigning"'
required: false required: false
type: str type: str
@ -294,7 +294,7 @@ dnssecConfig:
(ZSK). Key signing keys have the Secure Entry Point flag set and, when (ZSK). Key signing keys have the Secure Entry Point flag set and, when
active, will only be used to sign resource record sets of type DNSKEY. active, will only be used to sign resource record sets of type DNSKEY.
Zone signing keys do not have the Secure Entry Point flag set and will Zone signing keys do not have the Secure Entry Point flag set and will
be used to sign all other types of resource record sets. . be used to sign all other types of resource record sets.
returned: success returned: success
type: str type: str
kind: kind:

View file

@ -167,7 +167,6 @@ resources:
when active, will only be used to sign resource record sets of type when active, will only be used to sign resource record sets of type
DNSKEY. Zone signing keys do not have the Secure Entry Point flag DNSKEY. Zone signing keys do not have the Secure Entry Point flag
set and will be used to sign all other types of resource record sets. set and will be used to sign all other types of resource record sets.
.
returned: success returned: success
type: str type: str
kind: kind: