netbox-plugin-dns 1.2.6__py3-none-any.whl → 1.2.7b2__py3-none-any.whl

netbox_dns/forms/zone_template.py

@@ -27,6 +27,7 @@ from netbox_dns.models import (
     NameServer,
     Registrar,
     RegistrationContact,
+    DNSSECPolicy,
 )
 
 
@@ -62,6 +63,7 @@ class ZoneTemplateForm(TenancyForm, NetBoxModelForm):
         FieldSet("name", "description", "nameservers", name=_("Zone Template")),
         FieldSet("soa_mname", "soa_rname", name=_("SOA")),
         FieldSet("record_templates", name=_("Record Templates")),
+        FieldSet("dnssec_policy", name=_("DNSSEC")),
         FieldSet(
             "registrar",
             "registrant",
@@ -82,6 +84,7 @@ class ZoneTemplateForm(TenancyForm, NetBoxModelForm):
             "nameservers",
             "soa_mname",
             "soa_rname",
+            "dnssec_policy",
             "record_templates",
             "description",
             "registrar",
@@ -105,6 +108,7 @@ class ZoneTemplateFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
         FieldSet("name", "nameserver_id", "description", name=_("Attributes")),
         FieldSet("soa_mname_id", "soa_rname", name=_("SOA")),
         FieldSet("record_template_id", name=_("Record Templates")),
+        FieldSet("dnssec_policy", name=_("DNSSEC")),
         FieldSet(
             "registrar_id",
             "registrant_id",
@@ -142,6 +146,11 @@ class ZoneTemplateFilterForm(TenancyFilterForm, NetBoxModelFilterSetForm):
     description = forms.CharField(
         required=False,
     )
+    dnssec_policy_id = DynamicModelMultipleChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        label=_("DNSSEC Policy ID"),
+    )
     registrar_id = DynamicModelMultipleChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -189,6 +198,15 @@ class ZoneTemplateImportForm(NetBoxModelImportForm):
         required=False,
         label=_("Record Templates"),
     )
+    dnssec_policy = CSVModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        to_field_name="name",
+        error_messages={
+            "invalid_choice": _("DNSSEC policy %(value)s not found"),
+        },
+        label=_("DNSSEC Policy"),
+    )
     registrar = CSVModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -250,6 +268,7 @@ class ZoneTemplateImportForm(NetBoxModelImportForm):
             "soa_mname",
             "soa_rname",
             "record_templates",
+            "dnssec_policy",
             "description",
             "registrar",
             "registrant",
@@ -281,6 +300,11 @@ class ZoneTemplateBulkEditForm(NetBoxModelBulkEditForm):
     description = forms.CharField(
         max_length=200, required=False, label=_("Description")
     )
+    dnssec_policy = DynamicModelChoiceField(
+        queryset=DNSSECPolicy.objects.all(),
+        required=False,
+        label=_("DNSSEC Policy"),
+    )
     registrar = DynamicModelChoiceField(
         queryset=Registrar.objects.all(),
         required=False,
@@ -334,6 +358,10 @@ class ZoneTemplateBulkEditForm(NetBoxModelBulkEditForm):
             "record_templates",
             name=_("Record Templates"),
         ),
+        FieldSet(
+            "dnssec_policy",
+            name=_("DNSSEC"),
+        ),
         FieldSet(
             "registrar",
             "registrant",
@@ -351,6 +379,7 @@ class ZoneTemplateBulkEditForm(NetBoxModelBulkEditForm):
         "soa_mname",
         "soa_rname",
         "record_templates",
+        "dnssec_policy",
         "registrar",
         "registrant",
         "admin_c",

netbox_dns/graphql/__init__.py

@@ -1,10 +1,12 @@
 from .schema import (
-    NetBoxDNSViewQuery,
     NetBoxDNSNameServerQuery,
-    NetBoxDNSRegistrationContactQuery,
-    NetBoxDNSRegistrarQuery,
+    NetBoxDNSViewQuery,
     NetBoxDNSZoneQuery,
     NetBoxDNSRecordQuery,
+    NetBoxDNSDNSSECKeyTemplateQuery,
+    NetBoxDNSDNSSECPolicyQuery,
+    NetBoxDNSRegistrationContactQuery,
+    NetBoxDNSRegistrarQuery,
     NetBoxDNSZoneTemplateQuery,
     NetBoxDNSRecordTemplateQuery,
 )
@@ -14,6 +16,8 @@ schema = [
     NetBoxDNSViewQuery,
     NetBoxDNSZoneQuery,
     NetBoxDNSRecordQuery,
+    NetBoxDNSDNSSECKeyTemplateQuery,
+    NetBoxDNSDNSSECPolicyQuery,
     NetBoxDNSRegistrationContactQuery,
     NetBoxDNSRegistrarQuery,
     NetBoxDNSZoneTemplateQuery,

netbox_dns/graphql/filters.py

@@ -7,6 +7,8 @@ from netbox_dns.models import (
     View,
     Zone,
     Record,
+    DNSSECKeyTemplate,
+    DNSSECPolicy,
     RegistrationContact,
     Registrar,
     ZoneTemplate,
@@ -17,6 +19,8 @@ from netbox_dns.filtersets import (
     ViewFilterSet,
     ZoneFilterSet,
     RecordFilterSet,
+    DNSSECKeyTemplateFilterSet,
+    DNSSECPolicyFilterSet,
     RegistrationContactFilterSet,
     RegistrarFilterSet,
     ZoneTemplateFilterSet,
@@ -48,6 +52,18 @@ class NetBoxDNSRecordFilter(BaseFilterMixin):
     ip_address: str | None
 
 
+@strawberry_django.filter(DNSSECKeyTemplate, lookups=True)
+@autotype_decorator(DNSSECKeyTemplateFilterSet)
+class NetBoxDNSDNSSECKeyTemplateFilter(BaseFilterMixin):
+    ip_address: str | None
+
+
+@strawberry_django.filter(DNSSECPolicy, lookups=True)
+@autotype_decorator(DNSSECPolicyFilterSet)
+class NetBoxDNSDNSSECPolicyFilter(BaseFilterMixin):
+    ip_address: str | None
+
+
 @strawberry_django.filter(ZoneTemplate, lookups=True)
 @autotype_decorator(ZoneTemplateFilterSet)
 class NetBoxDNSZoneTemplateFilter(BaseFilterMixin):

netbox_dns/graphql/schema.py

@@ -8,6 +8,8 @@ from .types import (
     NetBoxDNSViewType,
     NetBoxDNSZoneType,
     NetBoxDNSRecordType,
+    NetBoxDNSDNSSECKeyTemplateType,
+    NetBoxDNSDNSSECPolicyType,
     NetBoxDNSRegistrationContactType,
     NetBoxDNSRegistrarType,
     NetBoxDNSZoneTemplateType,
@@ -41,6 +43,24 @@ class NetBoxDNSRecordQuery:
     netbox_dns_record_list: List[NetBoxDNSRecordType] = strawberry_django.field()
 
 
+@strawberry.type(name="Query")
+class NetBoxDNSDNSSECKeyTemplateQuery:
+    netbox_dns_dnssec_key_template: NetBoxDNSDNSSECKeyTemplateType = (
+        strawberry_django.field()
+    )
+    netbox_dns_dnssec_key_template_list: List[NetBoxDNSDNSSECKeyTemplateType] = (
+        strawberry_django.field()
+    )
+
+
+@strawberry.type(name="Query")
+class NetBoxDNSDNSSECPolicyQuery:
+    netbox_dns_dnssec_policy: NetBoxDNSDNSSECPolicyType = strawberry_django.field()
+    netbox_dns_dnssec_policy_list: List[NetBoxDNSDNSSECPolicyType] = (
+        strawberry_django.field()
+    )
+
+
 @strawberry.type(name="Query")
 class NetBoxDNSRegistrationContactQuery:
     netbox_dns_registration_contact: NetBoxDNSRegistrationContactType = (

netbox_dns/graphql/types.py

@@ -13,6 +13,8 @@ from netbox_dns.models import (
     View,
     Zone,
     Record,
+    DNSSECKeyTemplate,
+    DNSSECPolicy,
     RegistrationContact,
     Registrar,
     ZoneTemplate,
@@ -23,6 +25,8 @@ from .filters import (
     NetBoxDNSViewFilter,
     NetBoxDNSZoneFilter,
     NetBoxDNSRecordFilter,
+    NetBoxDNSDNSSECKeyTemplateFilter,
+    NetBoxDNSDNSSECPolicyFilter,
     NetBoxDNSRegistrationContactFilter,
     NetBoxDNSRegistrarFilter,
     NetBoxDNSZoneTemplateFilter,
@@ -58,6 +62,7 @@ class NetBoxDNSViewType(NetBoxObjectType):
 @strawberry_django.type(Zone, fields="__all__", filters=NetBoxDNSZoneFilter)
 class NetBoxDNSZoneType(NetBoxObjectType):
     name: str
+    description: str | None
     status: str
     active: bool
     view: Annotated["NetBoxDNSViewType", strawberry.lazy("netbox_dns.graphql.types")]
@@ -78,9 +83,13 @@ class NetBoxDNSZoneType(NetBoxObjectType):
     soa_expire: BigInt
     soa_minimum: BigInt
     soa_serial_auto: bool
-    description: str | None
-    arpa_network: str | None
-    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
+    dnssec_policy: (
+        Annotated[
+            "NetBoxDNSDNSSECPolicyType", strawberry.lazy("netbox_dns.graphql.types")
+        ]
+        | None
+    )
+    inline_signing: bool
     registrar: (
         Annotated["NetBoxDNSRegistrarType", strawberry.lazy("netbox_dns.graphql.types")]
         | None
@@ -126,6 +135,8 @@ class NetBoxDNSZoneType(NetBoxObjectType):
     rfc2317_child_zones: List[
         Annotated["NetBoxDNSRecordType", strawberry.lazy("netbox_dns.graphql.types")]
     ]
+    arpa_network: str | None
+    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
 
 
 @strawberry_django.type(Record, fields="__all__", filters=NetBoxDNSRecordFilter)
@@ -162,6 +173,53 @@ class NetBoxDNSRecordType(NetBoxObjectType):
     ]
 
 
+@strawberry_django.type(
+    DNSSECKeyTemplate, fields="__all__", filters=NetBoxDNSDNSSECKeyTemplateFilter
+)
+class NetBoxDNSDNSSECKeyTemplateType(NetBoxObjectType):
+    name: str
+    description: str
+    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
+    type: str
+    lifetime: BigInt | None
+    algorithm: str
+    key_size: BigInt | None
+
+
+@strawberry_django.type(
+    DNSSECPolicy, fields="__all__", filters=NetBoxDNSDNSSECPolicyFilter
+)
+class NetBoxDNSDNSSECPolicyType(NetBoxObjectType):
+    name: str
+    description: str | None
+    status: str
+    tenant: Annotated["TenantType", strawberry.lazy("tenancy.graphql.types")] | None
+    key_templates: List[
+        Annotated[
+            "NetBoxDNSDNSSECKeyTemplateType",
+            strawberry.lazy("netbox_dns.graphql.types"),
+        ]
+    ]
+    dnskey_ttl: BigInt | None
+    purge_keys: BigInt | None
+    publish_safety: BigInt | None
+    retire_safety: BigInt | None
+    signatures_jitter: BigInt | None
+    signatures_refresh: BigInt | None
+    signatures_validity: BigInt | None
+    signatures_validity_dnskey: BigInt | None
+    max_zone_ttl: BigInt | None
+    zone_propagation_delay: BigInt | None
+    create_cdnskey: bool
+    cds_digest_types: List[str]
+    parent_ds_ttl: BigInt | None
+    parent_propagation_delay: BigInt | None
+    use_nsec3: bool
+    nsec3_iterations: BigInt | None
+    nsec3_opt_out: bool
+    nsec3_salt_size: BigInt | None
+
+
 @strawberry_django.type(
     RegistrationContact, fields="__all__", filters=NetBoxDNSRegistrationContactFilter
 )
@@ -226,6 +284,12 @@ class NetBoxDNSZoneTemplateType(NetBoxObjectType):
         | None
     )
     soa_rname: str | None
+    dnssec_policy: (
+        Annotated[
+            "NetBoxDNSDNSSECPolicyType", strawberry.lazy("netbox_dns.graphql.types")
+        ]
+        | None
+    )
     record_templates: List[
         Annotated[
             "NetBoxDNSRecordTemplateType", strawberry.lazy("netbox_dns.graphql.types")

netbox_dns/migrations/0015_dnssec.py

@@ -0,0 +1,168 @@
+# Generated by Django 5.1.6 on 2025-03-04 12:09
+
+import django.db.models.deletion
+import netbox_dns.fields.choice_array
+import taggit.managers
+import utilities.json
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("extras", "0122_charfield_null_choices"),
+        ("netbox_dns", "0014_alter_unique_constraints_lowercase"),
+        ("tenancy", "0017_natural_ordering"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="DNSSECKeyTemplate",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True, primary_key=True, serialize=False
+                    ),
+                ),
+                ("created", models.DateTimeField(auto_now_add=True, null=True)),
+                ("last_updated", models.DateTimeField(auto_now=True, null=True)),
+                (
+                    "custom_field_data",
+                    models.JSONField(
+                        blank=True,
+                        default=dict,
+                        encoder=utilities.json.CustomFieldJSONEncoder,
+                    ),
+                ),
+                ("name", models.CharField(max_length=255)),
+                ("description", models.CharField(blank=True, max_length=200)),
+                ("type", models.CharField(max_length=3)),
+                ("lifetime", models.PositiveIntegerField(blank=True, null=True)),
+                ("algorithm", models.CharField()),
+                ("key_size", models.PositiveIntegerField(blank=True, null=True)),
+                (
+                    "tags",
+                    taggit.managers.TaggableManager(
+                        through="extras.TaggedItem", to="extras.Tag"
+                    ),
+                ),
+                (
+                    "tenant",
+                    models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.PROTECT,
+                        related_name="netbox_dns_dnssec_key_templates",
+                        to="tenancy.tenant",
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name": "DNSSEC Key Template",
+                "verbose_name_plural": "DNSSEC Key Templates",
+                "ordering": ("name",),
+                "unique_together": {("name", "type")},
+            },
+        ),
+        migrations.CreateModel(
+            name="DNSSECPolicy",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True, primary_key=True, serialize=False
+                    ),
+                ),
+                ("created", models.DateTimeField(auto_now_add=True, null=True)),
+                ("last_updated", models.DateTimeField(auto_now=True, null=True)),
+                (
+                    "custom_field_data",
+                    models.JSONField(
+                        blank=True,
+                        default=dict,
+                        encoder=utilities.json.CustomFieldJSONEncoder,
+                    ),
+                ),
+                ("name", models.CharField(max_length=255, unique=True)),
+                ("description", models.CharField(blank=True, max_length=200)),
+                ("dnskey_ttl", models.PositiveIntegerField(blank=True, null=True)),
+                ("purge_keys", models.PositiveIntegerField(blank=True, null=True)),
+                ("publish_safety", models.PositiveIntegerField(blank=True, null=True)),
+                ("retire_safety", models.PositiveIntegerField(blank=True, null=True)),
+                (
+                    "signatures_jitter",
+                    models.PositiveIntegerField(blank=True, null=True),
+                ),
+                (
+                    "signatures_refresh",
+                    models.PositiveIntegerField(blank=True, null=True),
+                ),
+                (
+                    "signatures_validity",
+                    models.PositiveIntegerField(blank=True, null=True),
+                ),
+                (
+                    "signatures_validity_dnskey",
+                    models.PositiveIntegerField(blank=True, null=True),
+                ),
+                ("max_zone_ttl", models.PositiveIntegerField(blank=True, null=True)),
+                (
+                    "zone_propagation_delay",
+                    models.PositiveIntegerField(blank=True, null=True),
+                ),
+                ("create_cdnskey", models.BooleanField(default=True)),
+                (
+                    "cds_digest_types",
+                    netbox_dns.fields.choice_array.ChoiceArrayField(
+                        base_field=models.CharField(),
+                        blank=True,
+                        default=list,
+                        null=True,
+                        size=None,
+                    ),
+                ),
+                ("parent_ds_ttl", models.PositiveIntegerField(blank=True, null=True)),
+                (
+                    "parent_propagation_delay",
+                    models.PositiveIntegerField(blank=True, null=True),
+                ),
+                ("use_nsec3", models.BooleanField(default=True)),
+                (
+                    "nsec3_iterations",
+                    models.PositiveIntegerField(blank=True, null=True),
+                ),
+                ("nsec3_opt_out", models.BooleanField(default=False)),
+                ("nsec3_salt_size", models.PositiveIntegerField(blank=True, null=True)),
+                (
+                    "key_templates",
+                    models.ManyToManyField(
+                        blank=True,
+                        related_name="policies",
+                        to="netbox_dns.dnsseckeytemplate",
+                    ),
+                ),
+                (
+                    "tags",
+                    taggit.managers.TaggableManager(
+                        through="extras.TaggedItem", to="extras.Tag"
+                    ),
+                ),
+                (
+                    "tenant",
+                    models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.PROTECT,
+                        related_name="netbox_dns_dnssec_policy",
+                        to="tenancy.tenant",
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name": "DNSSEC Policy",
+                "verbose_name_plural": "DNSSEC Policies",
+                "ordering": ("name",),
+            },
+        ),
+    ]

netbox_dns/migrations/0016_dnssec_policy_status.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.1.7 on 2025-03-09 18:23
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("netbox_dns", "0015_dnssec"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="dnssecpolicy",
+            name="status",
+            field=models.CharField(default="active"),
+        ),
+    ]

netbox_dns/migrations/0017_dnssec_policy_zone_zone_template.py

@@ -0,0 +1,41 @@
+# Generated by Django 5.1.6 on 2025-03-10 15:40
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("netbox_dns", "0016_dnssec_policy_status"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="zone",
+            name="dnssec_policy",
+            field=models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.PROTECT,
+                related_name="zones",
+                to="netbox_dns.dnssecpolicy",
+            ),
+        ),
+        migrations.AddField(
+            model_name="zone",
+            name="inline_signing",
+            field=models.BooleanField(default=True),
+        ),
+        migrations.AddField(
+            model_name="zonetemplate",
+            name="dnssec_policy",
+            field=models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.SET_NULL,
+                related_name="zone_templates",
+                to="netbox_dns.dnssecpolicy",
+            ),
+        ),
+    ]

netbox_dns/models/__init__.py

@@ -6,3 +6,5 @@ from .registration_contact import *
 from .registrar import *
 from .zone_template import *
 from .record_template import *
+from .dnssec_key_template import *
+from .dnssec_policy import *

netbox_dns/models/dnssec_key_template.py

@@ -0,0 +1,114 @@
+from django.db import models
+from django.urls import reverse
+from django.utils.translation import gettext_lazy as _
+
+from netbox.models import NetBoxModel
+from netbox.search import SearchIndex, register_search
+from netbox.models.features import ContactsMixin
+
+from netbox_dns.choices import (
+    DNSSECKeyTemplateTypeChoices,
+    DNSSECKeyTemplateAlgorithmChoices,
+    DNSSECKeyTemplateKeySizeChoices,
+)
+from netbox_dns.validators import validate_key_template
+
+
+__all__ = (
+    "DNSSECKeyTemplate",
+    "DNSSECKeyTemplateIndex",
+)
+
+
+class DNSSECKeyTemplate(ContactsMixin, NetBoxModel):
+    name = models.CharField(
+        verbose_name=_("Name"),
+        max_length=255,
+    )
+    description = models.CharField(
+        verbose_name=_("Description"),
+        max_length=200,
+        blank=True,
+    )
+
+    type = models.CharField(
+        verbose_name=_("Type"),
+        choices=DNSSECKeyTemplateTypeChoices,
+        max_length=3,
+        blank=False,
+        null=False,
+    )
+    lifetime = models.PositiveIntegerField(
+        verbose_name=_("Lifetime"),
+        blank=True,
+        null=True,
+    )
+    algorithm = models.CharField(
+        verbose_name=_("Algorithm"),
+        choices=DNSSECKeyTemplateAlgorithmChoices,
+        blank=False,
+        null=False,
+    )
+    key_size = models.PositiveIntegerField(
+        verbose_name=_("Key Size"),
+        choices=DNSSECKeyTemplateKeySizeChoices,
+        blank=True,
+        null=True,
+    )
+
+    tenant = models.ForeignKey(
+        verbose_name=_("Tenant"),
+        to="tenancy.Tenant",
+        on_delete=models.PROTECT,
+        related_name="netbox_dns_dnssec_key_templates",
+        blank=True,
+        null=True,
+    )
+
+    clone_fields = (
+        "description",
+        "type",
+        "lifetime",
+        "algorithm",
+        "key_size",
+        "tenant",
+    )
+
+    class Meta:
+        verbose_name = _("DNSSEC Key Template")
+        verbose_name_plural = _("DNSSEC Key Templates")
+        unique_together = (
+            "name",
+            "type",
+        )
+
+        ordering = ("name",)
+
+    def __str__(self):
+        return f"{str(self.name)} [{self.type}]"
+
+    # TODO: Remove in version 1.3.0 (NetBox #18555)
+    def get_absolute_url(self):
+        return reverse("plugins:netbox_dns:dnsseckeytemplate", kwargs={"pk": self.pk})
+
+    def get_type_color(self):
+        return DNSSECKeyTemplateTypeChoices.colors.get(self.type)
+
+    def clean(self, *args, **kwargs):
+        super().clean(*args, **kwargs)
+
+        validate_key_template(self)
+
+    def save(self, *args, **kwargs):
+        validate_key_template(self)
+
+        super().save(*args, **kwargs)
+
+
+@register_search
+class DNSSECKeyTemplateIndex(SearchIndex):
+    model = DNSSECKeyTemplate
+    fields = (
+        ("name", 100),
+        ("description", 500),
+    )