freeipa.ansible_freeipa.ipadnsforwardzone (1.8.4) — module

Manage FreeIPA DNS Forwarder Zones

Authors: chris procter

preview | supported by community

Install collection

Install with ansible-galaxy collection install freeipa.ansible_freeipa:==1.8.4


Add to requirements.yml

  collections:
    - name: freeipa.ansible_freeipa
      version: 1.8.4

Description

Add and delete an IPA DNS Forwarder Zones using IPA API

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
# Ensure dns zone is present
- freeipa.ansible_freeipa.ipadnsforwardzone:
    ipaadmin_password: SomeADMINpassword
    state: present
    name: example.com
    forwarders:
    - ip_address: 8.8.8.8
    - ip_address: 4.4.4.4
    forwardpolicy: first
    skip_overlap_check: true
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
# Ensure dns zone is present, with forwarder on non-default port
- freeipa.ansible_freeipa.ipadnsforwardzone:
    ipaadmin_password: SomeADMINpassword
    state: present
    name: example.com
    forwarders:
    - ip_address: 8.8.8.8
      port: 8053
    forwardpolicy: first
    skip_overlap_check: true
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
# Ensure that dns zone is removed
- freeipa.ansible_freeipa.ipadnsforwardzone:
    ipaadmin_password: SomeADMINpassword
    name: example.com
    state: absent

Inputs

    
name:
    aliases:
    - cn
    description:
    - The DNS zone name which needs to be managed.
    required: true

state:
    choices:
    - present
    - absent
    - enabled
    - disabled
    default: present
    description: State to ensure
    required: false

forwarders:
    aliases:
    - idnsforwarders
    description:
    - List of the DNS servers to forward to
    suboptions:
      ip_address:
        description: Forwarder IP address (either IPv4 or IPv6).
        required: false
        type: string
      port:
        description: Forwarder port.
        required: false
        type: int

permission:
    description:
    - Allow DNS Forward Zone to be managed.
    required: false
    type: bool

forwardpolicy:
    aliases:
    - idnsforwarders
    - forward_policy
    choices:
    - only
    - first
    - none
    default: only
    description: Per-zone conditional forwarding policy
    required: false

ipaapi_context:
    choices:
    - server
    - client
    description: 'The context in which the module will execute. Executing in a

      server context is preferred. If not provided context will be

      determined by the execution environment.

      '
    required: false

ipaadmin_password:
    description: The admin password.
    required: false

ipaapi_ldap_cache:
    default: true
    description: Use LDAP cache for IPA connection.
    type: bool

ipaadmin_principal:
    default: admin
    description: The admin principal.

skip_overlap_check:
    default: false
    description:
    - Force DNS zone creation even if it will overlap with an existing zone.
    required: false