[MiniDNS] Extend Designate's TSIG Key support to allow scoped TSIG keys
Extend Designate's TSIG Key support to allow scoped TSIG keys
For example, it should be possible to create a TSIG key with:
* Scope = Global. This would be unlimited, and can AXFR all zones
* Scope = Zone, Resource = <Zone ID>. This would be limited to a single zone
* Scope = Pool, Resource = <Pool ID>. This would be limited to a zones in a pool
Scopes should be simple strings, no scope specific logic should be necessary
Blueprint information
- Status:
- Complete
- Approver:
- Kiall Mac Innes
- Priority:
- Medium
- Drafter:
- Kiall Mac Innes
- Direction:
- Approved
- Assignee:
- Kiall Mac Innes
- Definition:
- Approved
- Series goal:
- Accepted for kilo
- Implementation:
-
Implemented
- Milestone target:
-
2015.1.0
- Started by
- Kiall Mac Innes
- Completed by
- Kiall Mac Innes
Related branches
Related bugs
Sprints
Whiteboard
Pushed to Kilo as a dnspython bug makes implementing TSIG support in designate-mdns impossible.
https:/
Gerrit topic: https:/
Addressed by: https:/
Implement Scoped TSIG Key Support
Gerrit topic: https:/
Work Items
Dependency tree
* Blueprints in grey have been implemented.
