netbox-plugin-dns 1.2.5__py3-none-any.whl → 1.2.7b2__py3-none-any.whl

netbox_dns/navigation.py

@@ -92,6 +92,46 @@ managed_record_menu_item = PluginMenuItem(
     permissions=["netbox_dns.view_record"],
 )
 
+dnsseckeytemplate_menu_item = PluginMenuItem(
+    link="plugins:netbox_dns:dnsseckeytemplate_list",
+    link_text=_("DNSSEC Key Templates"),
+    permissions=["netbox_dns.view_dnsseckeytemplate"],
+    buttons=(
+        PluginMenuButton(
+            "plugins:netbox_dns:dnsseckeytemplate_add",
+            _("Add"),
+            "mdi mdi-plus-thick",
+            permissions=["netbox_dns.add_dnsseckeytemplate"],
+        ),
+        PluginMenuButton(
+            "plugins:netbox_dns:dnsseckeytemplate_bulk_import",
+            _("Import"),
+            "mdi mdi-upload",
+            permissions=["netbox_dns.add_dnsseckeytemplate"],
+        ),
+    ),
+)
+
+dnssecpolicy_menu_item = PluginMenuItem(
+    link="plugins:netbox_dns:dnssecpolicy_list",
+    link_text=_("DNSSEC Policies"),
+    permissions=["netbox_dns.view_dnssecpolicy"],
+    buttons=(
+        PluginMenuButton(
+            "plugins:netbox_dns:dnssecpolicy_add",
+            _("Add"),
+            "mdi mdi-plus-thick",
+            permissions=["netbox_dns.add_dnssecpolicy"],
+        ),
+        PluginMenuButton(
+            "plugins:netbox_dns:dnssecpolicy_bulk_import",
+            _("Import"),
+            "mdi mdi-upload",
+            permissions=["netbox_dns.add_dnssecpolicy"],
+        ),
+    ),
+)
+
 zonetemplate_menu_item = PluginMenuItem(
     link="plugins:netbox_dns:zonetemplate_list",
     link_text=_("Zone Templates"),
@@ -187,6 +227,13 @@ if top_level_menu:
                     managed_record_menu_item,
                 ),
             ),
+            (
+                _("DNSSEC"),
+                (
+                    dnsseckeytemplate_menu_item,
+                    dnssecpolicy_menu_item,
+                ),
+            ),
             (
                 _("Templates"),
                 (
@@ -211,6 +258,8 @@ else:
         nameserver_menu_item,
         record_menu_item,
         managed_record_menu_item,
+        dnsseckeytemplate_menu_item,
+        dnssecpolicy_menu_item,
         registrar_menu_item,
         contact_menu_item,
     )

netbox_dns/signals/dnssec.py

@@ -0,0 +1,32 @@
+from django.dispatch import receiver
+from django.db.models.signals import m2m_changed
+from django.core.exceptions import ValidationError
+
+from netbox.context import current_request
+from utilities.exceptions import AbortRequest
+
+from netbox_dns.validators import validate_key_template_assignment
+
+from netbox_dns.models import DNSSECPolicy, DNSSECKeyTemplate
+
+
+@receiver(m2m_changed, sender=DNSSECPolicy.key_templates.through)
+def dnssec_policy_key_templates_changed(action, instance, pk_set, **kwargs):
+    request = current_request.get()
+
+    key_templates = instance.key_templates.all()
+    match action:
+        case "pre_remove":
+            key_templates = key_templates.exclude(pk__in=pk_set)
+        case "pre_add":
+            key_templates |= DNSSECKeyTemplate.objects.filter(pk__in=pk_set)
+        case _:
+            return
+
+    try:
+        validate_key_template_assignment(key_templates)
+    except ValidationError as exc:
+        if request is not None:
+            raise AbortRequest(exc)
+        else:
+            raise exc

netbox_dns/tables/__init__.py

@@ -6,3 +6,5 @@ from .registration_contact import *
 from .registrar import *
 from .zone_template import *
 from .record_template import *
+from .dnssec_key_template import *
+from .dnssec_policy import *

netbox_dns/tables/dnssec_key_template.py

@@ -0,0 +1,48 @@
+import django_tables2 as tables
+from django.utils.translation import gettext_lazy as _
+
+
+from netbox.tables import (
+    NetBoxTable,
+    ChoiceFieldColumn,
+    TagColumn,
+)
+from tenancy.tables import TenancyColumnsMixin
+
+from netbox_dns.models import DNSSECKeyTemplate
+
+
+__all__ = ("DNSSECKeyTemplateTable",)
+
+
+class DNSSECKeyTemplateTable(TenancyColumnsMixin, NetBoxTable):
+    name = tables.Column(
+        verbose_name=_("Name"),
+        linkify=True,
+    )
+    type = ChoiceFieldColumn(
+        verbose_name=_("Key Type"),
+    )
+    lifetime = tables.Column(
+        verbose_name=_("Lifetime"),
+    )
+    algorithm = ChoiceFieldColumn(
+        verbose_name=_("Algorithm"),
+    )
+    key_size = ChoiceFieldColumn(
+        verbose_name=_("Key Size"),
+    )
+    tags = TagColumn(
+        url_name="plugins:netbox_dns:dnsseckeytemplate_list",
+    )
+
+    class Meta(NetBoxTable.Meta):
+        model = DNSSECKeyTemplate
+        fields = ("description",)
+        default_columns = (
+            "name",
+            "type",
+            "algorithm",
+            "key_size",
+            "tags",
+        )

netbox_dns/tables/dnssec_policy.py

@@ -0,0 +1,131 @@
+import django_tables2 as tables
+from django.utils.translation import gettext_lazy as _
+
+
+from netbox.tables import (
+    NetBoxTable,
+    TagColumn,
+    ChoiceFieldColumn,
+    ActionsColumn,
+)
+from tenancy.tables import TenancyColumnsMixin
+
+from netbox_dns.models import DNSSECPolicy
+
+
+__all__ = (
+    "DNSSECPolicyTable",
+    "DNSSECPolicyDisplayTable",
+)
+
+
+class DNSSECPolicyTable(TenancyColumnsMixin, NetBoxTable):
+    name = tables.Column(
+        verbose_name=_("Name"),
+        linkify=True,
+    )
+    status = ChoiceFieldColumn(
+        verbose_name=_("Status"),
+    )
+    dnskey_ttl = tables.Column(
+        verbose_name=_("DNSKEY TTL"),
+    )
+    purge_keys = tables.Column(
+        verbose_name=_("Purge Keys"),
+    )
+    publish_safety = tables.Column(
+        verbose_name=_("Publish Safety"),
+    )
+    retire_safety = tables.Column(
+        verbose_name=_("Retire Safety"),
+    )
+    signatures_jitter = tables.Column(
+        verbose_name=_("Signatures Jitter"),
+    )
+    signatures_refresh = tables.Column(
+        verbose_name=_("Signatures Refresh"),
+    )
+    signatures_validity = tables.Column(
+        verbose_name=_("Signatures Validity"),
+    )
+    signatures_validity_dnskey = tables.Column(
+        verbose_name=_("Signatures Validity (DNSKEY)"),
+    )
+    max_zone_ttl = tables.Column(
+        verbose_name=_("Max Zone TTL"),
+    )
+    dnskey_ttl = tables.Column(
+        verbose_name=_("DNSKEY TTL"),
+    )
+    zone_propagation_delay = tables.Column(
+        verbose_name=_("Zone Propagation Delay"),
+    )
+    create_cdnskey = tables.BooleanColumn(
+        verbose_name=_("Create CDNSKEY"),
+    )
+    cds_digest_types = tables.Column(
+        verbose_name=_("CDS Digest Types"),
+    )
+    parent_ds_ttl = tables.Column(
+        verbose_name=_("Parent DS TTL"),
+    )
+    parent_propagation_delay = tables.Column(
+        verbose_name=_("Parent Propagation Delay"),
+    )
+    use_nsec3 = tables.BooleanColumn(
+        verbose_name=_("Use NSEC3"),
+    )
+    nsec3_iterations = tables.Column(
+        verbose_name=_("NSEC3 Iterations"),
+    )
+    nsec3_opt_out = tables.BooleanColumn(
+        verbose_name=_("NSEC3 Opt Out"),
+    )
+    nsec3_salt_size = tables.Column(
+        verbose_name=_("NSEC3 Salt Size"),
+    )
+    tags = TagColumn(
+        url_name="plugins:netbox_dns:dnssecpolicy_list",
+    )
+
+    class Meta(NetBoxTable.Meta):
+        model = DNSSECPolicy
+        fields = ("description",)
+        default_columns = (
+            "name",
+            "description",
+            "status",
+            "use_nsec3",
+            "tags",
+        )
+
+
+class DNSSECPolicyDisplayTable(TenancyColumnsMixin, NetBoxTable):
+    actions = ActionsColumn(actions="")
+
+    name = tables.Column(
+        verbose_name=_("Name"),
+        linkify=True,
+    )
+    status = ChoiceFieldColumn(
+        verbose_name=_("Status"),
+    )
+    create_cdnskey = tables.BooleanColumn(
+        verbose_name=_("Create CDNSKEY"),
+    )
+    use_nsec3 = tables.BooleanColumn(
+        verbose_name=_("Use NSEC3"),
+    )
+    tags = TagColumn(
+        url_name="plugins:netbox_dns:dnssecpolicy_list",
+    )
+
+    class Meta(NetBoxTable.Meta):
+        model = DNSSECPolicy
+        fields = ("description",)
+        default_columns = (
+            "name",
+            "description",
+            "status",
+            "tags",
+        )

netbox_dns/tables/zone.py

@@ -5,13 +5,17 @@ from netbox.tables import (
     ChoiceFieldColumn,
     NetBoxTable,
     TagColumn,
+    ActionsColumn,
 )
 from tenancy.tables import TenancyColumnsMixin
 
 from netbox_dns.models import Zone
 
 
-__all__ = ("ZoneTable",)
+__all__ = (
+    "ZoneTable",
+    "ZoneDisplayTable",
+)
 
 
 class ZoneTable(TenancyColumnsMixin, NetBoxTable):
@@ -36,6 +40,10 @@ class ZoneTable(TenancyColumnsMixin, NetBoxTable):
     default_ttl = tables.Column(
         verbose_name="Default TTL",
     )
+    dnssec_policy = tables.Column(
+        verbose_name=_("DNSSEC Policy"),
+        linkify=True,
+    )
     rfc2317_prefix = tables.Column(
         verbose_name=_("RFC2317 Prefix"),
     )
@@ -73,6 +81,7 @@ class ZoneTable(TenancyColumnsMixin, NetBoxTable):
             "description",
             "soa_rname",
             "soa_serial",
+            "inline_signing",
             "rfc2317_parent_managed",
             "registry_domain_id",
         )
@@ -82,3 +91,10 @@ class ZoneTable(TenancyColumnsMixin, NetBoxTable):
             "status",
             "tags",
         )
+
+
+class ZoneDisplayTable(ZoneTable):
+    actions = ActionsColumn(actions=("changelog",))
+
+    class Meta(ZoneTable.Meta):
+        pass

netbox_dns/tables/zone_template.py

@@ -25,6 +25,10 @@ class ZoneTemplateTable(TenancyColumnsMixin, NetBoxTable):
     tags = TagColumn(
         url_name="plugins:netbox_dns:zonetemplate_list",
     )
+    dnssec_policy = tables.Column(
+        verbose_name=_("DNSSEC Policy"),
+        linkify=True,
+    )
     registrar = tables.Column(
         verbose_name=_("Registrar"),
         linkify=True,

netbox_dns/templates/netbox_dns/dnsseckeytemplate.html

@@ -0,0 +1,70 @@
+{% extends 'generic/object.html' %}
+{% load render_table from django_tables2 %}
+{% load i18n %}
+
+{% block content %}
+    <div class="row">
+        <div class="col col-md-6">
+            <div class="card">
+                <h5 class="card-header">{% trans "DNSSEC Key" %}</h5>
+                <table class="table table-hover attr-table">
+                    <tr>
+                        <th scope="row">{% trans "Name" %}</th>
+                        <td>{{ object.name }}</td>
+                    </tr>
+                    {% if object.description %}
+                    <tr>
+                        <th scope="row">{% trans "Description" %}</th>
+                        <td style="word-break:break-all;">{{ object.description }}</td>
+                    </tr>
+                    {% endif %}
+                    <tr>
+                        <th scope="row">{% trans "Type" %}</th>
+                        <td>{% badge object.get_type_display bg_color=object.get_type_color %}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Lifetime" %}</th>
+                        <td>{{ object.lifetime|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Algorithm" %}</th>
+                        <td>{% badge object.get_algorithm_display %}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Key Size" %}</th>
+                        <td>{% badge object.get_key_size_display %}</td>
+                    </tr>
+                    {% if object.tenant %}
+                    <tr>
+                        <th scope="row">{% trans "Tenant" %}</th>
+                        <td>
+                            {% if object.tenant.group %}
+                                {{ object.tenant.group|linkify }} /
+                            {% endif %}
+                            {{ object.tenant|linkify|placeholder }}
+                        </td>
+                    </tr>
+                    {% endif %}
+                </table>
+            </div>
+            {% include 'inc/panels/custom_fields.html' %}
+        </div>
+        <div class="col col-md-6">
+            {% include 'inc/panels/tags.html' %}
+        </div>
+    </div>
+    {% if policy_table %}
+        <div class="col col-md-12">
+            <div class="card">
+                {% if policy_table.rows|length == 1 %}
+                    <h2 class="card-header">{% trans "Policy" %}</h2>
+                {% else %}
+                    <h2 class="card-header">{% trans "Policies" %}</h2>
+                {% endif %}
+                <div class="table-responsive">
+                    {% render_table policy_table 'inc/table.html' %}
+                </div>
+            </div>
+        </div>
+    {% endif %}
+{% endblock %}

netbox_dns/templates/netbox_dns/dnssecpolicy.html

@@ -0,0 +1,155 @@
+{% extends 'generic/object.html' %}
+{% load i18n %}
+
+{% block content %}
+    <div class="row">
+        <div class="col col-md-6">
+            <div class="card">
+                <h5 class="card-header">{% trans "DNSSEC Policy" %}</h5>
+                <table class="table table-hover attr-table">
+                    {% if object.description %}
+                    <tr>
+                        <th scope="row">{% trans "Description" %}</th>
+                        <td style="word-break:break-all;">{{ object.description }}</td>
+                    </tr>
+                    {% endif %}
+                    <tr>
+                        <th scope="row">{% trans "Status" %}</th>
+                        <td>{% badge object.get_status_display bg_color=object.get_status_color %}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Key Templates" %}</th>
+                        <td>
+                            <table>
+                                {% for key_template in object.key_templates.all %}
+                                    <tr><td>{{ key_template|linkify }}</td></tr>
+                                    {% for template_id, errors in key_template_errors.items %}
+                                        {% if template_id == key_template.pk %}
+                                            {% for error in errors %}
+                                                <tr><td class="text-danger">{{ error }}</td></tr>
+                                            {% endfor %}
+                                        {% endif %}
+                                    {% endfor %}
+                                {% endfor %}
+                            </table>
+                        </td>
+                    </tr>
+                    {% if policy_warning %}
+                        <tr><td class="text-danger">{{ policy_warning }}</td></tr>
+                    {% endif %}
+                    {% if object.tenant %}
+                    <tr>
+                        <th scope="row">{% trans "Tenant" %}</th>
+                        <td>
+                            {% if object.tenant.group %}
+                                {{ object.tenant.group|linkify }} /
+                            {% endif %}
+                            {{ object.tenant|linkify|placeholder }}
+                        </td>
+                    </tr>
+                    {% endif %}
+                </table>
+            </div>
+            <div class="card">
+                <h5 class="card-header">{% trans "Timing" %}</h5>
+                <table class="table table-hover attr-table">
+                    <tr>
+                        <th scope="row">{% trans "DNSKEY TTL" %}</th>
+                        <td>{{ object.dnskey_ttl|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Publish Safety" %}</th>
+                        <td>{{ object.publish_safety|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Purge Keys" %}</th>
+                        <td>{{ object.purge_keys|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Retire Safety" %}</th>
+                        <td>{{ object.retire_safety|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Signatures Jitter" %}</th>
+                        <td>{{ object.signatures_jitter|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Signatures Refresh" %}</th>
+                        <td>{{ object.signatures_refresh|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Signatures Validity" %}</th>
+                        <td>{{ object.signatures_validity|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Signatures Validity (DNSKEY)" %}</th>
+                        <td>{{ object.signatures_validity_dnskey|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Max Zone TTL" %}</th>
+                        <td>{{ object.max_zone_ttl|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Zone Propagation Delay" %}</th>
+                        <td>{{ object.zone_propagation_delay|placeholder }}</td>
+                    </tr>
+                </table>
+            </div>
+            {% include 'inc/panels/custom_fields.html' %}
+        </div>
+        <div class="col col-md-6">
+            {% include 'inc/panels/tags.html' %}
+            <div class="card">
+                <h5 class="card-header">{% trans "Parent Delegation" %}</h5>
+                <table class="table table-hover attr-table">
+                    <tr>
+                        <th scope="row">{% trans "Create CDNSKEY" %}</th>
+                        <td>{% checkmark object.create_cdnskey %}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "CDS Digest Types" %}</th>
+                        <td>{% if object.cds_digest_types %}{% for digest_type in object.cds_digest_types %}{% badge digest_type %}{% endfor %}{% else %}{{ object_cds_digest_types|placeholder }}{% endif %}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Parent DS TTL" %}</th>
+                        <td>{{ object.parent_ds_ttl|placeholder }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Parent Propagation Delay" %}</th>
+                        <td>{{ object.parent_propagation_delay|placeholder }}</td>
+                    </tr>
+                </table>
+            </div>
+            <div class="card">
+                <h5 class="card-header">{% trans "Proof of Non-Existence" %}</h5>
+                <table class="table table-hover attr-table">
+                    <tr>
+                        <th scope="row">{% trans "Use NSEC3" %}</th>
+                        <td>{% checkmark object.use_nsec3 %}</td>
+                    </tr>
+                    {% if object.use_nsec3 %}
+                        <tr>
+                            <th scope="row">{% trans "NSEC3 Iterations" %}</th>
+                            <td>{{ object.nsec3_iterations|placeholder }}</td>
+                        </tr>
+                        <tr>
+                            <th scope="row">{% trans "NSEC3 Opt Out" %}</th>
+                            <td>{% checkmark object.nsec3_opt_out %}</td>
+                        </tr>
+                        <tr>
+                            <th scope="row">{% trans "NSEC3 Salt Size" %}</th>
+                            <td>{{ object.nsec3_salt_size|placeholder }}</td>
+                        </tr>
+                        {% if object.nsec3_iterations or object.nsec3_opt_out or object.nsec3_salt_size %}
+                        <tr>
+                            <th class="text-warning">
+                                {% blocktrans with link='<a href="https://datatracker.ietf.org/doc/html/rfc9276.html#section-3.1">RFC 9276, Section 3.1</a>' %}Using NSEC3 options is not recommended (see {{ link }}){% endblocktrans %}
+                            </th>
+                        </tr>
+                        {% endif %}
+                    {% endif %}
+                </table>
+            </div>
+        </div>
+    </div>
+{% endblock %}

netbox_dns/templates/netbox_dns/zone.html

@@ -96,6 +96,22 @@
             </table>
         </div>
 
+        {% if object.dnssec_policy %}
+            <div class="card">
+                <h5 class="card-header">{% trans "DNSSEC" %}</h5>
+                <table class="table table-hover attr-table">
+                    <tr>
+                        <th scope="row">{% trans "Policy" %}</th>
+                        <td>{{ object.dnssec_policy|linkify }}</td>
+                    </tr>
+                    <tr>
+                        <th scope="row">{% trans "Use Inline Signing" %}</th>
+                        <td>{% checkmark object.inline_signing %}</td>
+                    </tr>
+                </table>
+            </div>
+        {% endif %}
+
         {% include 'inc/panels/tags.html' %}
         {% include 'inc/panels/custom_fields.html' %}
     </div>

netbox_dns/templates/netbox_dns/zonetemplate/child.html

@@ -0,0 +1,46 @@
+{% extends 'generic/object.html' %}
+{% load helpers %}
+{% load render_table from django_tables2 %}
+{% load perms %}
+{% load i18n %}
+
+{% block content %}
+    {% include 'inc/table_controls_htmx.html' with table_modal="ZoneTemplateTable_config" %}
+
+    <form method="post">
+        {% csrf_token %}
+        <input type="hidden" name="return_url" value="{% if return_url %}{{ return_url }}{% else %}{{ request.path }}{% if request.GET %}?{{ request.GET.urlencode }}{% endif %}{% endif %}" />
+
+        <div class="card">
+            <div class="htmx-container table-responsive" id="object_list">
+                {% include 'htmx/table.html' %}
+            </div>
+        </div>
+
+        {% if perms.netbox_dns.change_zonetemplate or perms.netbox_dns.delete_zonetemplate %}
+             {% with bulk_edit_url="plugins:netbox_dns:zonetemplate_bulk_edit" bulk_delete_url="plugins:netbox_dns:zonetemplate_bulk_delete" %}
+                 <div class="noprint bulk-buttons">
+                     <div class="bulk-button-group">
+                         {% block bulk_buttons %}{% endblock %}
+                         {% if bulk_edit_url and perms.netbox_dns.change_zonetemplate %}
+                             <button type="submit" name="_edit" formaction="{% url bulk_edit_url %}{% if request.GET %}?{{ request.GET.urlencode }}{% endif %}" class="btn btn-warning">
+                                 <i class="mdi mdi-pencil" aria-hidden="true"></i> {% trans "Edit Selected" %}
+                             </button>
+                         {% endif %}
+                         {% if bulk_delete_url and perms.netbox_dns.delete_zonetemplate %}
+                             <button type="submit" name="_delete" formaction="{% url bulk_delete_url %}{% if request.GET %}?{{ request.GET.urlencode }}{% endif %}" class="btn btn-danger">
+                                 <i class="mdi mdi-trash-can-outline" aria-hidden="true"></i> {% trans "Delete Selected" %}
+                             </button>
+                         {% endif %}
+                     </div>
+                 </div>
+             {% endwith %}
+        {% endif %}
+    </form>
+
+{% endblock %}
+
+{% block modals %}
+    {{ block.super }}
+    {% table_config_form table %}
+{% endblock modals %}

netbox_dns/templates/netbox_dns/zonetemplate.html

@@ -53,6 +53,18 @@
             </table>
         </div>
 
+        {% if object.dnssec_policy %}
+            <div class="card">
+                <h5 class="card-header">{% trans "DNSSEC" %}</h5>
+                <table class="table table-hover attr-table">
+                    <tr>
+                        <th scope="row">{% trans "Policy" %}</th>
+                        <td>{{ object.dnssec_policy|linkify }}</td>
+                    </tr>
+                </table>
+            </div>
+        {% endif %}
+
         {% include 'inc/panels/tags.html' %}
         {% include 'inc/panels/custom_fields.html' %}
     </div>