oci_dns_zone

This resource provides the Zone resource in Oracle Cloud Infrastructure DNS service.

Creates a new zone in the specified compartment. For global zones, if the Content-Type header for the request is text/dns, the compartmentId query parameter is required. text/dns for the Content-Type header is not supported for private zones. Query parameter scope with a value of PRIVATE is required when creating a private zone. Private zones must have a zone type of PRIMARY. Creating a private zone at or under oraclevcn.com within the default protected view of a VCN-dedicated resolver is not permitted.

Example Usage

resource "oci_dns_zone" "test_zone" {
	#Required
	compartment_id = var.compartment_id
	name = var.zone_name
	zone_type = var.zone_zone_type

	#Optional
	defined_tags = var.zone_defined_tags
	external_downstreams {
		#Required
		address = var.zone_external_downstreams_address

		#Optional
		port = var.zone_external_downstreams_port
		tsig_key_id = oci_dns_tsig_key.test_tsig_key.id
	}
	external_masters {
		#Required
		address = var.zone_external_masters_address

		#Optional
		port = var.zone_external_masters_port
		tsig_key_id = oci_dns_tsig_key.test_tsig_key.id
	}
	freeform_tags = var.zone_freeform_tags
	scope = var.zone_scope
	view_id = oci_dns_view.test_view.id
}

Argument Reference

The following arguments are supported:

• compartment_id - (Required) (Updatable) The OCID of the compartment the resource belongs to.

• defined_tags - (Optional) (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags.

  Example: {"Operations": {"CostCenter": "42"}}

• external_downstreams - (Optional) (Updatable) External secondary servers for the zone. This field is currently not supported when zoneType is SECONDARY or scope is PRIVATE.

  • address - (Required) (Updatable) The server’s IP address (IPv4 or IPv6).
  • port - (Optional) (Updatable) The server’s port. Port value must be a value of 53, otherwise omit the port value.
  • tsig_key_id - (Optional) (Updatable) The OCID of the TSIG key. A TSIG key is used to secure DNS messages (in this case, zone transfers) between two systems that both have the (shared) secret.

• external_masters - (Optional) (Updatable) External master servers for the zone. externalMasters becomes a required parameter when the zoneType value is SECONDARY.

  • address - (Required) (Updatable) The server’s IP address (IPv4 or IPv6).
  • port - (Optional) (Updatable) The server’s port. Port value must be a value of 53, otherwise omit the port value.
  • tsig_key_id - (Optional) (Updatable) The OCID of the TSIG key.

• freeform_tags - (Optional) (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags.

  Example: {"Department": "Finance"}

• name - (Required) The name of the zone.

• scope - (Optional) Specifies to operate only on resources that have a matching DNS scope. This value will be null for zones in the global DNS and PRIVATE when creating a private zone.

• view_id - (Optional) The OCID of the private view containing the zone. This value will be null for zones in the global DNS, which are publicly resolvable and not part of a private view.

• zone_type - (Required) The type of the zone. Must be either PRIMARY or SECONDARY. SECONDARY is only supported for GLOBAL zones.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Attributes Reference

The following attributes are exported:

• compartment_id - The OCID of the compartment containing the zone.

• defined_tags - Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags.

  Example: {"Operations": {"CostCenter": "42"}}

• external_downstreams - External secondary servers for the zone. This field is currently not supported when zoneType is SECONDARY or scope is PRIVATE.

  • address - The server’s IP address (IPv4 or IPv6).
  • port - The server’s port. Port value must be a value of 53, otherwise omit the port value.
  • tsig_key_id - The OCID of the TSIG key. A TSIG key is used to secure DNS messages (in this case, zone transfers) between two systems that both have the (shared) secret.

• external_masters - External master servers for the zone. externalMasters becomes a required parameter when the zoneType value is SECONDARY.

  • address - The server’s IP address (IPv4 or IPv6).
  • port - The server’s port. Port value must be a value of 53, otherwise omit the port value.
  • tsig_key_id - The OCID of the TSIG key.

• freeform_tags - Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags.

  Example: {"Department": "Finance"}

• id - The OCID of the zone.

• is_protected - A Boolean flag indicating whether or not parts of the resource are unable to be explicitly managed.

• name - The name of the zone.

• nameservers - The authoritative nameservers for the zone.

  • hostname - The hostname of the nameserver.

• scope - The scope of the zone.

• self - The canonical absolute URL of the resource.

• serial - The current serial of the zone. As seen in the zone’s SOA record.

• state - The current state of the zone resource.

• time_created - The date and time the resource was created in “YYYY-MM-ddThh:mm:ssZ” format with a Z offset, as defined by RFC 3339.

  Example: 2016-07-22T17:23:59:60Z

• version - Version is the never-repeating, totally-orderable, version of the zone, from which the serial field of the zone’s SOA record is derived.

• view_id - The OCID of the private view containing the zone. This value will be null for zones in the global DNS, which are publicly resolvable and not part of a private view.

• zone_transfer_servers - The Oracle Cloud Infrastructure nameservers that transfer the zone data with external nameservers.

  • address - The server’s IP address (IPv4 or IPv6).
  • is_transfer_destination - A Boolean flag indicating whether or not the server is a zone data transfer destination.
  • is_transfer_source - A Boolean flag indicating whether or not the server is a zone data transfer source.
  • port - The server’s port.

• zone_type - The type of the zone. Must be either PRIMARY or SECONDARY. SECONDARY is only supported for GLOBAL zones.

Timeouts

The timeouts block allows you to specify timeouts for certain operations: * create - (Defaults to 20 minutes), when creating the Zone * update - (Defaults to 20 minutes), when updating the Zone * delete - (Defaults to 20 minutes), when destroying the Zone

Import

Zones can be imported using the id, e.g.

$ terraform import oci_dns_zone.test_zone "id"