Friday, December 5, 2025

OpenStack Epoxy : How to use Designate

 

OpenStack Epoxy : How to use Designate


 

This is how to use Designate.

This example is based on the environment like follows.

------------+--------------------------+--------------------------+------------
            |                          |                          |
        eth0|10.0.0.30             eth0|10.0.0.50             eth0|10.0.0.51
+-----------+-----------+  +-----------+-----------+  +-----------+-----------+
|   [ dlp.srv.world ]   |  | [ network.srv.world ] |  |  [ node01.srv.world ] |
|     (Control Node)    |  |     (Network Node)    |  |     (Compute Node)    |
|                       |  |                       |  |                       |
|  MariaDB    RabbitMQ  |  |      Open vSwitch     |  |        Libvirt        |
|  Memcached  Nginx     |  |     Neutron Server    |  |      Nova Compute     |
|  Keystone   httpd     |  |      OVN-Northd       |  |      Open vSwitch     |
|  Glance     Nova API  |  |  Nginx  iSCSI Target  |  |   OVN Metadata Agent  |
|  Cinder API           |  |     Cinder Volume     |  |     OVN-Controller    |
|                       |  |   Designate Services  |  |                       |
+-----------------------+  +-----------------------+  +-----------------------+

[1]Login as a user you'd like to set DNS entry. It's OK to work on any node. (This example is on Control Node) For example, create a [server.education] zone.
debian@dlp ~(keystone)$ 
openstack zone create --email dnsmaster@server.education server.education.

+----------------+--------------------------------------+
| Field          | Value                                |
+----------------+--------------------------------------+
| action         | CREATE                               |
| attributes     |                                      |
| created_at     | 2025-09-02T00:10:44.000000           |
| description    | None                                 |
| email          | dnsmaster@server.education           |
| id             | c929341c-9209-469f-a59b-93ecbe0c1a8e |
| masters        |                                      |
| name           | server.education.                    |
| pool_id        | 794ccc2c-d751-44fe-b57f-8894c9f5c842 |
| project_id     | ecfa98ba82de421e8f16c3d862b5ab04     |
| serial         | 1756771844                           |
| shared         | False                                |
| status         | PENDING                              |
| transferred_at | None                                 |
| ttl            | 3600                                 |
| type           | PRIMARY                              |
| updated_at     | None                                 |
| version        | 1                                    |
+----------------+--------------------------------------+

# OK if [status] is [ACTIVE]

debian@dlp ~(keystone)$ 
openstack zone list

+------------------+------------------+---------+------------+--------+--------+
| id               | name             | type    |     serial | status | action |
+------------------+------------------+---------+------------+--------+--------+
| c929341c-9209-   | server.education | PRIMARY | 1756771844 | ACTIVE | NONE   |
| 469f-a59b-       | .                |         |            |        |        |
| 93ecbe0c1a8e     |                  |         |            |        |        |
+------------------+------------------+---------+------------+--------+--------+

# add [A] record

debian@dlp ~(keystone)$ 
openstack recordset create --record '192.168.100.10' --type A server.education. node01

+-------------+--------------------------------------+
| Field       | Value                                |
+-------------+--------------------------------------+
| action      | CREATE                               |
| created_at  | 2025-09-02T00:11:23.000000           |
| description | None                                 |
| id          | 69a8a8f0-29ec-4e25-905f-16814b30c5ad |
| name        | node01.server.education.             |
| project_id  | ecfa98ba82de421e8f16c3d862b5ab04     |
| records     | 192.168.100.10                       |
| status      | PENDING                              |
| ttl         | None                                 |
| type        | A                                    |
| updated_at  | None                                 |
| version     | 1                                    |
| zone_id     | c929341c-9209-469f-a59b-93ecbe0c1a8e |
| zone_name   | server.education.                    |
+-------------+--------------------------------------+

# OK if [status] is [ACTIVE]

debian@dlp ~(keystone)$ 
openstack recordset list server.education.

+-----------------+-----------------+------+-----------------+--------+--------+
| id              | name            | type | records         | status | action |
+-----------------+-----------------+------+-----------------+--------+--------+
| 2cded36d-bc76-  | server.educatio | NS   | network.srv.wor | ACTIVE | NONE   |
| 44a8-82e9-      | n.              |      | ld.             |        |        |
| ad3d3c40d2a7    |                 |      |                 |        |        |
| 942ac24c-3a62-  | server.educatio | SOA  | network.srv.wor | ACTIVE | NONE   |
| 4413-b604-      | n.              |      | ld. dnsmaster.s |        |        |
| fae43f10d995    |                 |      | erver.education |        |        |
|                 |                 |      | . 1756771887    |        |        |
|                 |                 |      | 3512 600 86400  |        |        |
|                 |                 |      | 3600            |        |        |
| 69a8a8f0-29ec-  | node01.server.e | A    | 192.168.100.10  | ACTIVE | NONE   |
| 4e25-905f-      | ducation.       |      |                 |        |        |
| 16814b30c5ad    |                 |      |                 |        |        |
+-----------------+-----------------+------+-----------------+--------+--------+

# verify name resolution

debian@dlp ~(keystone)$ 
dig -p 5354 @network.srv.world node01.server.education.

; <<>> DiG 9.20.11-4-Debian <<>> -p 5354 @network.srv.world node01.server.education.
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35586
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 8192
;; QUESTION SECTION:
;node01.server.education.       IN      A

;; ANSWER SECTION:
node01.server.education. 3600   IN      A       192.168.100.10

;; Query time: 8 msec
;; SERVER: 10.0.0.50#5354(network.srv.world) (UDP)
;; WHEN: Tue Sep 02 09:12:00 JST 2025
;; MSG SIZE  rcvd: 68
[2]For example, create a [192.168.100.0/24] reverse zone.
debian@dlp ~(keystone)$ 
openstack zone create --email dnsmaster@server.education 100.168.192.in-addr.arpa.

+----------------+--------------------------------------+
| Field          | Value                                |
+----------------+--------------------------------------+
| action         | CREATE                               |
| attributes     |                                      |
| created_at     | 2025-09-02T00:12:42.000000           |
| description    | None                                 |
| email          | dnsmaster@server.education           |
| id             | 0db9dcf3-9c29-4d64-acd4-046d8196714c |
| masters        |                                      |
| name           | 100.168.192.in-addr.arpa.            |
| pool_id        | 794ccc2c-d751-44fe-b57f-8894c9f5c842 |
| project_id     | ecfa98ba82de421e8f16c3d862b5ab04     |
| serial         | 1756771962                           |
| shared         | False                                |
| status         | PENDING                              |
| transferred_at | None                                 |
| ttl            | 3600                                 |
| type           | PRIMARY                              |
| updated_at     | None                                 |
| version        | 1                                    |
+----------------+--------------------------------------+

# OK if [status] is [ACTIVE]

debian@dlp ~(keystone)$ 
openstack zone list

+------------------+------------------+---------+------------+--------+--------+
| id               | name             | type    |     serial | status | action |
+------------------+------------------+---------+------------+--------+--------+
| c929341c-9209-   | server.education | PRIMARY | 1756771887 | ACTIVE | NONE   |
| 469f-a59b-       | .                |         |            |        |        |
| 93ecbe0c1a8e     |                  |         |            |        |        |
| 0db9dcf3-9c29-   | 100.168.192.in-  | PRIMARY | 1756771962 | ACTIVE | NONE   |
| 4d64-acd4-       | addr.arpa.       |         |            |        |        |
| 046d8196714c     |                  |         |            |        |        |
+------------------+------------------+---------+------------+--------+--------+

# add PTR record

debian@dlp ~(keystone)$ 
openstack recordset create --record 'node01.server.education.' --type PTR 100.168.192.in-addr.arpa. 10

+-------------+--------------------------------------+
| Field       | Value                                |
+-------------+--------------------------------------+
| action      | CREATE                               |
| created_at  | 2025-09-02T00:13:24.000000           |
| description | None                                 |
| id          | b53f9a88-30ee-427b-9c3e-fc2fba360e3c |
| name        | 10.100.168.192.in-addr.arpa.         |
| project_id  | ecfa98ba82de421e8f16c3d862b5ab04     |
| records     | node01.server.education.             |
| status      | PENDING                              |
| ttl         | None                                 |
| type        | PTR                                  |
| updated_at  | None                                 |
| version     | 1                                    |
| zone_id     | 0db9dcf3-9c29-4d64-acd4-046d8196714c |
| zone_name   | 100.168.192.in-addr.arpa.            |
+-------------+--------------------------------------+

# OK if [status] is [ACTIVE]

debian@dlp ~(keystone)$ 
openstack recordset list 100.168.192.in-addr.arpa.

+-----------------+-----------------+------+-----------------+--------+--------+
| id              | name            | type | records         | status | action |
+-----------------+-----------------+------+-----------------+--------+--------+
| 5bf6fa2f-1a3c-  | 100.168.192.in- | NS   | network.srv.wor | ACTIVE | NONE   |
| 4470-87b6-      | addr.arpa.      |      | ld.             |        |        |
| c554ec3ff564    |                 |      |                 |        |        |
| 6e6e250c-c9a8-  | 100.168.192.in- | SOA  | network.srv.wor | ACTIVE | NONE   |
| 41a5-94c7-      | addr.arpa.      |      | ld. dnsmaster.s |        |        |
| 028ba7da7022    |                 |      | erver.education |        |        |
|                 |                 |      | . 1756772007    |        |        |
|                 |                 |      | 3540 600 86400  |        |        |
|                 |                 |      | 3600            |        |        |
| b53f9a88-30ee-  | 10.100.168.192. | PTR  | node01.server.e | ACTIVE | NONE   |
| 427b-9c3e-      | in-addr.arpa.   |      | ducation.       |        |        |
| fc2fba360e3c    |                 |      |                 |        |        |
+-----------------+-----------------+------+-----------------+--------+--------+

# verify address resolution

debian@dlp ~(keystone)$ 
dig -p 5354 @network.srv.world -x 192.168.100.10

; <<>> DiG 9.20.11-4-Debian <<>> -p 5354 @network.srv.world -x 192.168.100.10
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52953
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 8192
;; QUESTION SECTION:
;10.100.168.192.in-addr.arpa.   IN      PTR

;; ANSWER SECTION:
10.100.168.192.in-addr.arpa. 3600 IN    PTR     node01.server.education.

;; Query time: 8 msec
;; SERVER: 10.0.0.50#5354(network.srv.world) (UDP)
;; WHEN: Tue Sep 02 09:13:58 JST 2025
;; MSG SIZE  rcvd: 93
[3]To delete record or zone, do like follows.
debian@dlp ~(keystone)$ 
openstack recordset list server.education.

+-----------------+-----------------+------+-----------------+--------+--------+
| id              | name            | type | records         | status | action |
+-----------------+-----------------+------+-----------------+--------+--------+
| 2cded36d-bc76-  | server.educatio | NS   | network.srv.wor | ACTIVE | NONE   |
| 44a8-82e9-      | n.              |      | ld.             |        |        |
| ad3d3c40d2a7    |                 |      |                 |        |        |
| 942ac24c-3a62-  | server.educatio | SOA  | network.srv.wor | ACTIVE | NONE   |
| 4413-b604-      | n.              |      | ld. dnsmaster.s |        |        |
| fae43f10d995    |                 |      | erver.education |        |        |
|                 |                 |      | . 1756771887    |        |        |
|                 |                 |      | 3512 600 86400  |        |        |
|                 |                 |      | 3600            |        |        |
| 69a8a8f0-29ec-  | node01.server.e | A    | 192.168.100.10  | ACTIVE | NONE   |
| 4e25-905f-      | ducation.       |      |                 |        |        |
| 16814b30c5ad    |                 |      |                 |        |        |
+-----------------+-----------------+------+-----------------+--------+--------+

# delete [node01] record

debian@dlp ~(keystone)$ 
openstack recordset delete server.education. node01.server.education.

+-------------+--------------------------------------+
| Field       | Value                                |
+-------------+--------------------------------------+
| action      | DELETE                               |
| created_at  | 2025-09-02T00:11:23.000000           |
| description | None                                 |
| id          | 69a8a8f0-29ec-4e25-905f-16814b30c5ad |
| name        | node01.server.education.             |
| project_id  | ecfa98ba82de421e8f16c3d862b5ab04     |
| records     | 192.168.100.10                       |
| status      | PENDING                              |
| ttl         | None                                 |
| type        | A                                    |
| updated_at  | 2025-09-02T00:14:50.000000           |
| version     | 2                                    |
| zone_id     | c929341c-9209-469f-a59b-93ecbe0c1a8e |
| zone_name   | server.education.                    |
+-------------+--------------------------------------+

debian@dlp ~(keystone)$ 
openstack recordset list server.education.

+-----------------+-----------------+------+-----------------+--------+--------+
| id              | name            | type | records         | status | action |
+-----------------+-----------------+------+-----------------+--------+--------+
| 2cded36d-bc76-  | server.educatio | NS   | network.srv.wor | ACTIVE | NONE   |
| 44a8-82e9-      | n.              |      | ld.             |        |        |
| ad3d3c40d2a7    |                 |      |                 |        |        |
| 942ac24c-3a62-  | server.educatio | SOA  | network.srv.wor | ACTIVE | NONE   |
| 4413-b604-      | n.              |      | ld. dnsmaster.s |        |        |
| fae43f10d995    |                 |      | erver.education |        |        |
|                 |                 |      | . 1756772092    |        |        |
|                 |                 |      | 3512 600 86400  |        |        |
|                 |                 |      | 3600            |        |        |
+-----------------+-----------------+------+-----------------+--------+--------+

debian@dlp ~(keystone)$ 
openstack zone list

+------------------+------------------+---------+------------+--------+--------+
| id               | name             | type    |     serial | status | action |
+------------------+------------------+---------+------------+--------+--------+
| c929341c-9209-   | server.education | PRIMARY | 1756772092 | ACTIVE | NONE   |
| 469f-a59b-       | .                |         |            |        |        |
| 93ecbe0c1a8e     |                  |         |            |        |        |
| 0db9dcf3-9c29-   | 100.168.192.in-  | PRIMARY | 1756772007 | ACTIVE | NONE   |
| 4d64-acd4-       | addr.arpa.       |         |            |        |        |
| 046d8196714c     |                  |         |            |        |        |
+------------------+------------------+---------+------------+--------+--------+

# delete [server.education.] zone

debian@dlp ~(keystone)$ 
openstack zone delete server.education.

+----------------+--------------------------------------+
| Field          | Value                                |
+----------------+--------------------------------------+
| action         | DELETE                               |
| attributes     |                                      |
| created_at     | 2025-09-02T00:10:44.000000           |
| description    | None                                 |
| email          | dnsmaster@server.education           |
| id             | c929341c-9209-469f-a59b-93ecbe0c1a8e |
| masters        |                                      |
| name           | server.education.                    |
| pool_id        | 794ccc2c-d751-44fe-b57f-8894c9f5c842 |
| project_id     | ecfa98ba82de421e8f16c3d862b5ab04     |
| serial         | 1756772092                           |
| shared         | False                                |
| status         | PENDING                              |
| transferred_at | None                                 |
| ttl            | 3600                                 |
| type           | PRIMARY                              |
| updated_at     | 2025-09-02T00:15:39.000000           |
| version        | 7                                    |
+----------------+--------------------------------------+

debian@dlp ~(keystone)$ 
openstack zone list

+------------------+------------------+---------+------------+--------+--------+
| id               | name             | type    |     serial | status | action |
+------------------+------------------+---------+------------+--------+--------+
| 0db9dcf3-9c29-   | 100.168.192.in-  | PRIMARY | 1756772007 | ACTIVE | NONE   |
| 4d64-acd4-       | addr.arpa.       |         |            |        |        |
| 046d8196714c     |                  |         |            |        |        |
+------------------+------------------+---------+------------+--------+--------+
Matched Content

No comments:

Post a Comment