netbox-plugin-dns 1.2.6__py3-none-any.whl → 1.2.7__py3-none-any.whl

netbox_dns/choices/utilities.py

@@ -0,0 +1,26 @@
+from django.core.exceptions import ImproperlyConfigured
+
+from netbox.plugins.utils import get_plugin_config
+
+
+def define_choice_attributes(filter_name=None):
+    try:
+        if filter_name is not None:
+            filter_choices = get_plugin_config("netbox_dns", filter_name, [])
+        else:
+            filter_choices = []
+    except ImproperlyConfigured:
+        filter_choices = []
+
+    def decorator(cls):
+        choices = []
+        for choice in cls._choices:
+            if choice[0] not in filter_choices:
+                setattr(cls, choice[0], choice[0])
+                choices.append(choice)
+        cls._choices = choices
+        cls.CHOICES = choices
+
+        return cls
+
+    return decorator

netbox_dns/choices/zone.py

@@ -3,7 +3,10 @@ from django.utils.translation import gettext_lazy as _
 from utilities.choices import ChoiceSet
 
 
-__all__ = ("ZoneStatusChoices",)
+__all__ = (
+    "ZoneStatusChoices",
+    "ZoneEPPStatusChoices",
+)
 
 
 class ZoneStatusChoices(ChoiceSet):
@@ -22,3 +25,95 @@ class ZoneStatusChoices(ChoiceSet):
         (STATUS_PARKED, _("Parked"), "gray"),
         (STATUS_DYNAMIC, _("Dynamic"), "orange"),
     ]
+
+
+class ZoneEPPStatusChoices(ChoiceSet):
+    """
+    Reflects the EPP status of a zone registered as a domain. See
+    https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en
+    for details.
+    """
+
+    key = "Zone.epp_status"
+
+    EPP_STATUS_ADD_PERIOD = "addPeriod"
+    EPP_STATUS_AUTO_RENEW_PERIOD = "autoRenewPeriod"
+    EPP_STATUS_INACTIVE = "inactive"
+    EPP_STATUS_OK = "ok"
+    EPP_STATUS_PENDING_CREATE = "pendingCreate"
+    EPP_STATUS_PENDING_DELETE = "pendingDelete"
+    EPP_STATUS_PENDING_RENEW = "pendingRenew"
+    EPP_STATUS_PENDING_RESTORE = "pendingRestore"
+    EPP_STATUS_PENDING_TRANSFER = "pendingTransfer"
+    EPP_STATUS_PENDING_UPDATE = "pendingUpdate"
+    EPP_STATUS_REDEMPTION_PERIOD = "redemptionPeriod"
+    EPP_STATUS_RENEW_PERIOD = "renewPeriod"
+    EPP_STATUS_SERVER_DELETE_PROHIBITED = "serverDeleteProhibited"
+    EPP_STATUS_SERVER_HOLD = "serverHold"
+    EPP_STATUS_SERVER_RENER_PROHIBITED = "serverRenewProhibited"
+    EPP_STATUS_SERVER_TRANSFER_PROHIBITED = "serverTransferProhibited"
+    EPP_STATUS_SERVER_UPDATE_PROHIBITED = "serverUpdateProhibited"
+    EPP_STATUS_TRANSFER_PERIOD = "transferPeriod"
+    EPP_STATUS_CLIENT_DELETE_PROHIBITED = "clientDeleteProhibited"
+    EPP_STATUS_CLIENT_HOLD = "clientHold"
+    EPP_STATUS_CLIENT_RENEW_PROHIBITED = "clientRenewProhibited"
+    EPP_STATUS_CLIENT_TRANSFER_PROHIBITED = "clientTransferProhibited"
+    EPP_STATUS_CLIENT_UPDATE_PROHIBITED = "clientUpdateProhibited"
+
+    CHOICES = [
+        (EPP_STATUS_ADD_PERIOD, EPP_STATUS_ADD_PERIOD, "blue"),
+        (EPP_STATUS_AUTO_RENEW_PERIOD, EPP_STATUS_AUTO_RENEW_PERIOD, "blue"),
+        (EPP_STATUS_INACTIVE, EPP_STATUS_INACTIVE, "blue"),
+        (EPP_STATUS_OK, EPP_STATUS_OK, "blue"),
+        (EPP_STATUS_PENDING_CREATE, EPP_STATUS_PENDING_CREATE, "blue"),
+        (EPP_STATUS_PENDING_DELETE, EPP_STATUS_PENDING_DELETE, "blue"),
+        (EPP_STATUS_PENDING_RENEW, EPP_STATUS_PENDING_RENEW, "blue"),
+        (EPP_STATUS_PENDING_RESTORE, EPP_STATUS_PENDING_RESTORE, "blue"),
+        (EPP_STATUS_PENDING_TRANSFER, EPP_STATUS_PENDING_TRANSFER, "blue"),
+        (EPP_STATUS_PENDING_UPDATE, EPP_STATUS_PENDING_UPDATE, "blue"),
+        (EPP_STATUS_REDEMPTION_PERIOD, EPP_STATUS_REDEMPTION_PERIOD, "blue"),
+        (EPP_STATUS_RENEW_PERIOD, EPP_STATUS_RENEW_PERIOD, "blue"),
+        (
+            EPP_STATUS_SERVER_DELETE_PROHIBITED,
+            EPP_STATUS_SERVER_DELETE_PROHIBITED,
+            "blue",
+        ),
+        (EPP_STATUS_SERVER_HOLD, EPP_STATUS_SERVER_HOLD, "blue"),
+        (
+            EPP_STATUS_SERVER_RENER_PROHIBITED,
+            EPP_STATUS_SERVER_RENER_PROHIBITED,
+            "blue",
+        ),
+        (
+            EPP_STATUS_SERVER_TRANSFER_PROHIBITED,
+            EPP_STATUS_SERVER_TRANSFER_PROHIBITED,
+            "blue",
+        ),
+        (
+            EPP_STATUS_SERVER_UPDATE_PROHIBITED,
+            EPP_STATUS_SERVER_UPDATE_PROHIBITED,
+            "blue",
+        ),
+        (EPP_STATUS_TRANSFER_PERIOD, EPP_STATUS_TRANSFER_PERIOD, "blue"),
+        (
+            EPP_STATUS_CLIENT_DELETE_PROHIBITED,
+            EPP_STATUS_CLIENT_DELETE_PROHIBITED,
+            "cyan",
+        ),
+        (EPP_STATUS_CLIENT_HOLD, EPP_STATUS_CLIENT_HOLD, "cyan"),
+        (
+            EPP_STATUS_CLIENT_RENEW_PROHIBITED,
+            EPP_STATUS_CLIENT_RENEW_PROHIBITED,
+            "cyan",
+        ),
+        (
+            EPP_STATUS_CLIENT_TRANSFER_PROHIBITED,
+            EPP_STATUS_CLIENT_TRANSFER_PROHIBITED,
+            "cyan",
+        ),
+        (
+            EPP_STATUS_CLIENT_UPDATE_PROHIBITED,
+            EPP_STATUS_CLIENT_UPDATE_PROHIBITED,
+            "cyan",
+        ),
+    ]

netbox_dns/fields/__init__.py

@@ -2,4 +2,5 @@ from .network import *
 from .address import *
 from .rfc2317 import *
 from .ipam import *
+from .choice_array import *
 from .timeperiod import *

netbox_dns/fields/choice_array.py

@@ -0,0 +1,33 @@
+from django import forms
+from django.contrib.postgres.fields import ArrayField
+from django.db.models import Transform, IntegerField
+
+
+class ArrayLength(Transform):
+    lookup_name = "length"
+    function = "cardinality"
+
+    @property
+    def output_field(self):
+        return IntegerField()
+
+
+class _TypedMultipleChoiceField(forms.TypedMultipleChoiceField):
+    def __init__(self, *args, **kwargs):
+        kwargs.pop("base_field", None)
+        kwargs.pop("max_length", None)
+
+        super().__init__(*args, **kwargs)
+
+
+class ChoiceArrayField(ArrayField):
+    def formfield(self, **kwargs):
+        return super().formfield(
+            form_class=_TypedMultipleChoiceField,
+            choices=self.base_field.choices,
+            coerce=self.base_field.to_python,
+            **kwargs,
+        )
+
+
+ChoiceArrayField.register_lookup(ArrayLength)

netbox_dns/fields/timeperiod.py

@@ -1,28 +1,30 @@
-from django.forms import Field
-from django.utils.dateparse import parse_duration
+from django.forms import Field, TextInput
 from django.core.exceptions import ValidationError
 
+from netbox_dns.utilities import iso8601_to_int
 
 __all__ = ("TimePeriodField",)
 
 
 class TimePeriodField(Field):
+    def __init__(self, *args, **kwargs):
+        placeholder = kwargs.pop("placeholder", None)
+
+        if placeholder is not None:
+            self.widget = TextInput(attrs={"placeholder": placeholder})
+
+        return super().__init__(*args, **kwargs)
+
     def to_python(self, value):
         if not value:
             return None
 
         try:
-            return int(value)
-        except ValueError:
-            try:
-                duration = parse_duration(value)
-                if duration is None:
-                    raise TypeError
-                return int(duration.total_seconds())
-            except TypeError:
-                raise ValidationError(
-                    "Enter a valid integer or ISO 8601 duration (W, M and Y are not supported)"
-                )
+            return iso8601_to_int(value)
+        except TypeError:
+            raise ValidationError(
+                "Enter a valid integer or ISO 8601 duration (W, M and Y are not supported)"
+            )
 
     def validate(self, value):
         super().validate(value)

netbox_dns/filtersets/__init__.py

@@ -7,3 +7,6 @@ from .registrar import *
 
 from .zone_template import *
 from .record_template import *
+
+from .dnssec_key_template import *
+from .dnssec_policy import *

netbox_dns/filtersets/dnssec_key_template.py

@@ -0,0 +1,51 @@
+import django_filters
+from django.db.models import Q
+from django.utils.translation import gettext as _
+
+from netbox.filtersets import NetBoxModelFilterSet
+from tenancy.filtersets import TenancyFilterSet
+
+from netbox_dns.models import DNSSECKeyTemplate, DNSSECPolicy
+from netbox_dns.choices import (
+    DNSSECKeyTemplateTypeChoices,
+    DNSSECKeyTemplateAlgorithmChoices,
+    DNSSECKeyTemplateKeySizeChoices,
+)
+
+
+__all__ = ("DNSSECKeyTemplateFilterSet",)
+
+
+class DNSSECKeyTemplateFilterSet(TenancyFilterSet, NetBoxModelFilterSet):
+    type = django_filters.MultipleChoiceFilter(
+        choices=DNSSECKeyTemplateTypeChoices,
+    )
+    algorithm = django_filters.MultipleChoiceFilter(
+        choices=DNSSECKeyTemplateAlgorithmChoices,
+    )
+    key_size = django_filters.MultipleChoiceFilter(
+        choices=DNSSECKeyTemplateKeySizeChoices,
+    )
+
+    policy_id = django_filters.ModelMultipleChoiceFilter(
+        field_name="policies",
+        queryset=DNSSECPolicy.objects.all(),
+        to_field_name="id",
+        label=_("DNSSEC Policy IDs"),
+    )
+    policy = django_filters.ModelMultipleChoiceFilter(
+        field_name="policies__name",
+        queryset=DNSSECPolicy.objects.all(),
+        to_field_name="name",
+        label=_("DNSSEC Policies"),
+    )
+
+    class Meta:
+        model = DNSSECKeyTemplate
+        fields = ("id", "name", "description", "lifetime")
+
+    def search(self, queryset, name, value):
+        if not value.strip():
+            return queryset
+        qs_filter = Q(name__icontains=value)
+        return queryset.filter(qs_filter)

netbox_dns/filtersets/dnssec_policy.py

@@ -0,0 +1,97 @@
+import django_filters
+
+from django.db.models import Q
+from django.utils.translation import gettext as _
+
+from netbox.filtersets import NetBoxModelFilterSet
+from tenancy.filtersets import TenancyFilterSet
+from utilities.filters import MultiValueCharFilter
+
+from netbox_dns.models import DNSSECPolicy, DNSSECKeyTemplate, Zone, ZoneTemplate
+from netbox_dns.choices import DNSSECPolicyStatusChoices
+
+__all__ = ("DNSSECPolicyFilterSet",)
+
+
+class DNSSECPolicyFilterSet(TenancyFilterSet, NetBoxModelFilterSet):
+    class Meta:
+        model = DNSSECPolicy
+        fields = (
+            "id",
+            "name",
+            "description",
+            "status",
+            "dnskey_ttl",
+            "purge_keys",
+            "publish_safety",
+            "retire_safety",
+            "signatures_jitter",
+            "signatures_refresh",
+            "signatures_validity",
+            "signatures_validity_dnskey",
+            "max_zone_ttl",
+            "zone_propagation_delay",
+            "create_cdnskey",
+            "parent_ds_ttl",
+            "parent_propagation_delay",
+            "use_nsec3",
+            "nsec3_iterations",
+            "nsec3_opt_out",
+            "nsec3_salt_size",
+        )
+
+    status = django_filters.MultipleChoiceFilter(
+        choices=DNSSECPolicyStatusChoices,
+    )
+    cds_digest_types = MultiValueCharFilter(
+        method="filter_cds_digest_types",
+        label=_("CDS Digest Types"),
+    )
+    key_template = django_filters.ModelMultipleChoiceFilter(
+        field_name="key_templates__name",
+        queryset=DNSSECKeyTemplate.objects.all(),
+        to_field_name="name",
+        label=_("DNSSEC Key Templates"),
+    )
+    key_template_id = django_filters.ModelMultipleChoiceFilter(
+        field_name="key_templates",
+        queryset=DNSSECKeyTemplate.objects.all(),
+        to_field_name="id",
+        label=_("DNSSEC Key Template IDs"),
+    )
+    zone = django_filters.ModelMultipleChoiceFilter(
+        field_name="zones__name",
+        queryset=Zone.objects.all(),
+        to_field_name="name",
+        label=_("Zones"),
+    )
+    zone_id = django_filters.ModelMultipleChoiceFilter(
+        field_name="zones",
+        queryset=Zone.objects.all(),
+        to_field_name="id",
+        label=_("Zone IDs"),
+    )
+    zone_template = django_filters.ModelMultipleChoiceFilter(
+        field_name="zone_templates__name",
+        queryset=ZoneTemplate.objects.all(),
+        to_field_name="name",
+        label=_("Zone Templates"),
+    )
+    zone_template_id = django_filters.ModelMultipleChoiceFilter(
+        field_name="zone_templates",
+        queryset=ZoneTemplate.objects.all(),
+        to_field_name="id",
+        label=_("Zone Template IDs"),
+    )
+
+    def filter_cds_digest_types(self, queryset, name, value):
+        if not value:
+            return queryset
+
+        return queryset.filter(cds_digest_types__overlap=value)
+
+    def search(self, queryset, name, value):
+        if not value.strip():
+            return queryset
+        qs_filter = Q(name__icontains=value)
+        return queryset.filter(qs_filter)

netbox_dns/filtersets/zone.py

@@ -8,8 +8,15 @@ from netbox.filtersets import NetBoxModelFilterSet
 from tenancy.filtersets import TenancyFilterSet
 from utilities.filters import MultiValueCharFilter
 
-from netbox_dns.models import View, Zone, Registrar, RegistrationContact, NameServer
-from netbox_dns.choices import ZoneStatusChoices
+from netbox_dns.models import (
+    View,
+    Zone,
+    Registrar,
+    RegistrationContact,
+    NameServer,
+    DNSSECPolicy,
+)
+from netbox_dns.choices import ZoneStatusChoices, ZoneEPPStatusChoices
 
 
 __all__ = ("ZoneFilterSet",)
@@ -51,9 +58,15 @@ class ZoneFilterSet(TenancyFilterSet, NetBoxModelFilterSet):
         to_field_name="name",
         label=_("SOA MName"),
     )
-    arpa_network = MultiValueCharFilter(
-        method="filter_arpa_network",
-        label=_("ARPA Network"),
+    dnssec_policy_id = django_filters.ModelMultipleChoiceFilter(
+        queryset=DNSSECPolicy.objects.all(),
+        label=_("DNSSEC Policy ID"),
+    )
+    dnssec_policy = django_filters.ModelMultipleChoiceFilter(
+        queryset=DNSSECPolicy.objects.all(),
+        field_name="dnssec_policy__name",
+        to_field_name="name",
+        label=_("DNSSEC Policy"),
     )
     rfc2317_prefix = MultiValueCharFilter(
         method="filter_rfc2317_prefix",
@@ -73,7 +86,7 @@ class ZoneFilterSet(TenancyFilterSet, NetBoxModelFilterSet):
     )
     registrar_id = django_filters.ModelMultipleChoiceFilter(
         queryset=Registrar.objects.all(),
-        label="Registrar ID",
+        label=_("Registrar ID"),
     )
     registrar = django_filters.ModelMultipleChoiceFilter(
         queryset=Registrar.objects.all(),
@@ -81,6 +94,10 @@ class ZoneFilterSet(TenancyFilterSet, NetBoxModelFilterSet):
         to_field_name="name",
         label=_("Registrar"),
     )
+    expiration_date = django_filters.DateFromToRangeFilter()
+    domain_status = django_filters.MultipleChoiceFilter(
+        choices=ZoneEPPStatusChoices,
+    )
     registrant_id = django_filters.ModelMultipleChoiceFilter(
         queryset=RegistrationContact.objects.all(),
         label=_("Registrant ID"),
@@ -121,6 +138,10 @@ class ZoneFilterSet(TenancyFilterSet, NetBoxModelFilterSet):
         to_field_name="contact_id",
         label=_("Billing Contact"),
     )
+    arpa_network = MultiValueCharFilter(
+        method="filter_arpa_network",
+        label=_("ARPA Network"),
+    )
     active = django_filters.BooleanFilter(
         label=_("Zone is active"),
     )
@@ -141,7 +162,9 @@ class ZoneFilterSet(TenancyFilterSet, NetBoxModelFilterSet):
             "soa_minimum",
             "soa_serial_auto",
             "rfc2317_parent_managed",
+            "inline_signing",
             "registry_domain_id",
+            "domain_status",
         )
 
     def filter_arpa_network(self, queryset, name, value):
@@ -179,6 +202,7 @@ class ZoneFilterSet(TenancyFilterSet, NetBoxModelFilterSet):
             Q(name__icontains=value)
             | Q(status__icontains=value)
             | Q(view__name__icontains=value)
+            | Q(dnssec_policy__name__icontains=value)
             | Q(registrar__name__icontains=value)
             | Q(registry_domain_id__icontains=value)
             | Q(registrant__name__icontains=value)

netbox_dns/filtersets/zone_template.py

@@ -12,6 +12,7 @@ from netbox_dns.models import (
     Registrar,
     RegistrationContact,
     NameServer,
+    DNSSECPolicy,
 )
 
 
@@ -47,13 +48,23 @@ class ZoneTemplateFilterSet(TenancyFilterSet, NetBoxModelFilterSet):
         queryset=NameServer.objects.all(),
         field_name="soa_mname",
         to_field_name="id",
-        label=_("SOA MNAME ID"),
+        label=_("SOA MName ID"),
     )
     soa_mname = django_filters.ModelMultipleChoiceFilter(
         queryset=NameServer.objects.all(),
         field_name="soa_mname__name",
         to_field_name="name",
-        label=_("SOA MNAME"),
+        label=_("SOA MName"),
+    )
+    dnssec_policy_id = django_filters.ModelMultipleChoiceFilter(
+        queryset=DNSSECPolicy.objects.all(),
+        label=_("DNSSEC Policy ID"),
+    )
+    dnssec_policy = django_filters.ModelMultipleChoiceFilter(
+        queryset=DNSSECPolicy.objects.all(),
+        field_name="dnssec_policy__name",
+        to_field_name="name",
+        label=_("DNSSEC Policy"),
     )
     registrar_id = django_filters.ModelMultipleChoiceFilter(
         queryset=Registrar.objects.all(),

netbox_dns/forms/__init__.py

@@ -6,3 +6,5 @@ from .registration_contact import *
 from .registrar import *
 from .zone_template import *
 from .record_template import *
+from .dnssec_key_template import *
+from .dnssec_policy import *

netbox_dns/forms/dnssec_key_template.py

@@ -0,0 +1,189 @@
+from django import forms
+from django.contrib.postgres.forms import SimpleArrayField
+from django.utils.translation import gettext_lazy as _
+
+from netbox.forms import (
+    NetBoxModelBulkEditForm,
+    NetBoxModelFilterSetForm,
+    NetBoxModelImportForm,
+    NetBoxModelForm,
+)
+from utilities.forms.fields import (
+    TagFilterField,
+    CSVModelChoiceField,
+    DynamicModelChoiceField,
+    DynamicModelMultipleChoiceField,
+)
+from utilities.forms.rendering import FieldSet
+from utilities.forms import add_blank_choice
+from tenancy.models import Tenant, TenantGroup
+from tenancy.forms import TenancyForm, TenancyFilterForm
+
+from netbox_dns.models import DNSSECKeyTemplate, DNSSECPolicy
+from netbox_dns.choices import (
+    DNSSECKeyTemplateTypeChoices,
+    DNSSECKeyTemplateAlgorithmChoices,
+    DNSSECKeyTemplateKeySizeChoices,
+)
+from netbox_dns.fields import TimePeriodField
+
+
+__all__ = (
+    "DNSSECKeyTemplateForm",
+    "DNSSECKeyTemplateFilterForm",
+    "DNSSECKeyTemplateImportForm",
+    "DNSSECKeyTemplateBulkEditForm",
+)
+
+
+class DNSSECKeyTemplateForm(TenancyForm, NetBoxModelForm):
+    lifetime = TimePeriodField(
+        required=False,
+    )
+
+    fieldsets = (
+        FieldSet("name", "description", name=_("Attributes")),
+        FieldSet("type", "lifetime", "algorithm", "key_size", name=_("Key Properties")),
+        FieldSet("tenant_group", "tenant", name=_("Tenancy")),
+        FieldSet("tags", name=_("Tags")),
+    )
+
+    class Meta:
+        model = DNSSECKeyTemplate
+        fields = (
+            "name",
+            "description",
+            "type",
+            "lifetime",
+            "key_size",
+            "algorithm",
+            "tenant_group",
+            "tenant",
+            "tags",
+        )
+
+
+class DNSSECKeyTemplateFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
+    model = DNSSECKeyTemplate
+    fieldsets = (
+        FieldSet("q", "filter_id", "tag"),
+        FieldSet("name", "description", name=_("Attributes")),
+        FieldSet("policiy_id", name=_("Policies")),
+        FieldSet("type", "lifetime", "algorithm", "key_size", name=_("Key Properties")),
+        FieldSet("tenant_group_id", "tenant_id", name=_("Tenancy")),
+    )
+
+    name = forms.CharField(
+        required=False,
+    )
+    description = forms.CharField(
+        required=False,
+    )
+    policy_id = DynamicModelMultipleChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        null_option=_("None"),
+        label=_("Policies"),
+    )
+    type = forms.MultipleChoiceField(
+        choices=DNSSECKeyTemplateTypeChoices,
+        required=False,
+    )
+    lifetime = SimpleArrayField(
+        base_field=forms.IntegerField(),
+        required=False,
+        help_text=_("Enter a list of integer lifetime values, separated by comma (,)"),
+    )
+    algorithm = forms.MultipleChoiceField(
+        choices=DNSSECKeyTemplateAlgorithmChoices,
+        required=False,
+    )
+    key_size = SimpleArrayField(
+        base_field=forms.ChoiceField(
+            choices=DNSSECKeyTemplateKeySizeChoices,
+        ),
+        required=False,
+        help_text=_("Enter a list of integer key sizes, separated by comma (,)"),
+    )
+    tag = TagFilterField(DNSSECKeyTemplate)
+
+
+class DNSSECKeyTemplateImportForm(NetBoxModelImportForm):
+    lifetime = TimePeriodField(
+        required=False,
+        label=_("Lifetime"),
+    )
+    tenant = CSVModelChoiceField(
+        queryset=Tenant.objects.all(),
+        to_field_name="name",
+        required=False,
+        label=_("Tenant"),
+    )
+
+    class Meta:
+        model = DNSSECKeyTemplate
+        fields = (
+            "name",
+            "description",
+            "type",
+            "lifetime",
+            "algorithm",
+            "key_size",
+            "tenant",
+            "tags",
+        )
+
+
+class DNSSECKeyTemplateBulkEditForm(NetBoxModelBulkEditForm):
+    model = DNSSECKeyTemplate
+
+    type = forms.ChoiceField(
+        choices=add_blank_choice(DNSSECKeyTemplateTypeChoices),
+        required=False,
+        label=_("Key Type"),
+    )
+    lifetime = TimePeriodField(
+        required=False,
+        label=_("Lifetime"),
+    )
+    algorithm = forms.ChoiceField(
+        choices=add_blank_choice(DNSSECKeyTemplateAlgorithmChoices),
+        required=False,
+        label=_("Algorithm"),
+    )
+    key_size = forms.ChoiceField(
+        choices=add_blank_choice(DNSSECKeyTemplateKeySizeChoices),
+        required=False,
+        label=_("Key Size"),
+    )
+    description = forms.CharField(
+        max_length=200,
+        required=False,
+        label=_("Description"),
+    )
+    tenant_group = DynamicModelChoiceField(
+        queryset=TenantGroup.objects.all(),
+        required=False,
+        label=_("Tenant Group"),
+    )
+    tenant = DynamicModelChoiceField(
+        queryset=Tenant.objects.all(),
+        required=False,
+        label=_("Tenant"),
+    )
+
+    fieldsets = (
+        FieldSet(
+            "description",
+            name=_("Attributes"),
+        ),
+        FieldSet("type", "lifetime", "algorithm", "key_size", name=_("Key Properties")),
+        FieldSet("tenant_group", "tenant", name=_("Tenancy")),
+    )
+
+    fields = (
+        "algorithm",
+        "key_size",
+    )
+
+    nullable_fields = ("description", "tenant", "lifetime", "key_size")