- The defined type parameter
dnssec
has been renamed todnssec_enable
to match the main class parameter. - All DNSSEC related zone parameters have been made optional. The config parameter
dnssec-enable
has been made obsolete with Bind 9.16 so that is no longer a prerequisite to activate other config options in the template. Make sure your Puppet code defines all parameters for your DNSSEC enabled primary zones. - A primary zone using dynamic updates can now have a
content
orsource
parameter. The content of the zone file is created if the file does not exist. Subsequent puppet runs will not update the zone file as long as dynamic updates are used and the parameterupdate_policy
is set for the zone.
- A syntax error with the in-view option has been fixed.
- The path to the
named-checkzone
binary is a class option now.
- The default for
root_hints_enable
has been changed fromtrue
tofalse
. Normally a root hints file is no longer used since Bind includes an internal list of root name servers.
- Fix path of options file on Debian-11.
- The class
bind::rate_limit
has been removed. All rate limit settings can be configured using the main classbind
.
- Implement
update-policy
for primary zones to manage dynamic zones.
- Drop Debian 9 support
- Add defined type
bind::dnssec_policy
.
- Add explicit class parameter
dnssec_lookaside
. - Add explicit class parameter
dnssec_validation
. - The parameters
dnssec_enable
anddnssec_lookaside
are obsolete with Bind 9.16.0 or later. They will be removed from the configuration file when a applicable Bind version is detected.
- Allow stdlib 8.0.0
- Implement
custom_options
parameter to set unusual configuration options that are not implemented in the main class.
- Implement
purge
,prepublish
,revoke
andretire
parameters fordnssec_key
type. - Implement user defined logfile mode for defined type
bind::logging::channel_file
.
Initial release