oci 2.135.1__py3-none-any.whl → 2.136.0__py3-none-any.whl

oci/dns/models/__init__.py

@@ -22,14 +22,18 @@ from .create_tsig_key_details import CreateTsigKeyDetails
 from .create_view_details import CreateViewDetails
 from .create_zone_base_details import CreateZoneBaseDetails
 from .create_zone_details import CreateZoneDetails
+from .dnssec_config import DnssecConfig
+from .dnssec_key_version_ds_data import DnssecKeyVersionDsData
 from .dynect_migration_details import DynectMigrationDetails
 from .external_downstream import ExternalDownstream
 from .external_master import ExternalMaster
+from .ksk_dnssec_key_version import KskDnssecKeyVersion
 from .migration_replacement import MigrationReplacement
 from .nameserver import Nameserver
 from .patch_domain_records_details import PatchDomainRecordsDetails
 from .patch_rr_set_details import PatchRRSetDetails
 from .patch_zone_records_details import PatchZoneRecordsDetails
+from .promote_zone_dnssec_key_version_details import PromoteZoneDnssecKeyVersionDetails
 from .rr_set import RRSet
 from .record import Record
 from .record_collection import RecordCollection
@@ -45,6 +49,7 @@ from .resolver_rule_details import ResolverRuleDetails
 from .resolver_summary import ResolverSummary
 from .resolver_vnic_endpoint import ResolverVnicEndpoint
 from .resolver_vnic_endpoint_summary import ResolverVnicEndpointSummary
+from .stage_zone_dnssec_key_version_details import StageZoneDnssecKeyVersionDetails
 from .steering_policy import SteeringPolicy
 from .steering_policy_answer import SteeringPolicyAnswer
 from .steering_policy_attachment import SteeringPolicyAttachment
@@ -82,6 +87,7 @@ from .view_summary import ViewSummary
 from .zone import Zone
 from .zone_summary import ZoneSummary
 from .zone_transfer_server import ZoneTransferServer
+from .zsk_dnssec_key_version import ZskDnssecKeyVersion
 
 # Maps type names to classes for dns services.
 dns_type_mapping = {
@@ -101,14 +107,18 @@ dns_type_mapping = {
     "CreateViewDetails": CreateViewDetails,
     "CreateZoneBaseDetails": CreateZoneBaseDetails,
     "CreateZoneDetails": CreateZoneDetails,
+    "DnssecConfig": DnssecConfig,
+    "DnssecKeyVersionDsData": DnssecKeyVersionDsData,
     "DynectMigrationDetails": DynectMigrationDetails,
     "ExternalDownstream": ExternalDownstream,
     "ExternalMaster": ExternalMaster,
+    "KskDnssecKeyVersion": KskDnssecKeyVersion,
     "MigrationReplacement": MigrationReplacement,
     "Nameserver": Nameserver,
     "PatchDomainRecordsDetails": PatchDomainRecordsDetails,
     "PatchRRSetDetails": PatchRRSetDetails,
     "PatchZoneRecordsDetails": PatchZoneRecordsDetails,
+    "PromoteZoneDnssecKeyVersionDetails": PromoteZoneDnssecKeyVersionDetails,
     "RRSet": RRSet,
     "Record": Record,
     "RecordCollection": RecordCollection,
@@ -124,6 +134,7 @@ dns_type_mapping = {
     "ResolverSummary": ResolverSummary,
     "ResolverVnicEndpoint": ResolverVnicEndpoint,
     "ResolverVnicEndpointSummary": ResolverVnicEndpointSummary,
+    "StageZoneDnssecKeyVersionDetails": StageZoneDnssecKeyVersionDetails,
     "SteeringPolicy": SteeringPolicy,
     "SteeringPolicyAnswer": SteeringPolicyAnswer,
     "SteeringPolicyAttachment": SteeringPolicyAttachment,
@@ -160,5 +171,6 @@ dns_type_mapping = {
     "ViewSummary": ViewSummary,
     "Zone": Zone,
     "ZoneSummary": ZoneSummary,
-    "ZoneTransferServer": ZoneTransferServer
+    "ZoneTransferServer": ZoneTransferServer,
+    "ZskDnssecKeyVersion": ZskDnssecKeyVersion
 }

oci/dns/models/create_zone_details.py

@@ -33,6 +33,14 @@ class CreateZoneDetails(CreateZoneBaseDetails):
     #: This constant has a value of "PRIVATE"
     SCOPE_PRIVATE = "PRIVATE"
 
+    #: A constant which can be used with the dnssec_state property of a CreateZoneDetails.
+    #: This constant has a value of "ENABLED"
+    DNSSEC_STATE_ENABLED = "ENABLED"
+
+    #: A constant which can be used with the dnssec_state property of a CreateZoneDetails.
+    #: This constant has a value of "DISABLED"
+    DNSSEC_STATE_DISABLED = "DISABLED"
+
     def __init__(self, **kwargs):
         """
         Initializes a new CreateZoneDetails object with values from keyword arguments. The default value of the :py:attr:`~oci.dns.models.CreateZoneDetails.migration_source` attribute
@@ -82,6 +90,11 @@ class CreateZoneDetails(CreateZoneBaseDetails):
             The value to assign to the external_downstreams property of this CreateZoneDetails.
         :type external_downstreams: list[oci.dns.models.ExternalDownstream]
 
+        :param dnssec_state:
+            The value to assign to the dnssec_state property of this CreateZoneDetails.
+            Allowed values for this property are: "ENABLED", "DISABLED"
+        :type dnssec_state: str
+
         """
         self.swagger_types = {
             'migration_source': 'str',
@@ -93,7 +106,8 @@ class CreateZoneDetails(CreateZoneBaseDetails):
             'view_id': 'str',
             'scope': 'str',
             'external_masters': 'list[ExternalMaster]',
-            'external_downstreams': 'list[ExternalDownstream]'
+            'external_downstreams': 'list[ExternalDownstream]',
+            'dnssec_state': 'str'
         }
 
         self.attribute_map = {
@@ -106,7 +120,8 @@ class CreateZoneDetails(CreateZoneBaseDetails):
             'view_id': 'viewId',
             'scope': 'scope',
             'external_masters': 'externalMasters',
-            'external_downstreams': 'externalDownstreams'
+            'external_downstreams': 'externalDownstreams',
+            'dnssec_state': 'dnssecState'
         }
 
         self._migration_source = None
@@ -119,6 +134,7 @@ class CreateZoneDetails(CreateZoneBaseDetails):
         self._scope = None
         self._external_masters = None
         self._external_downstreams = None
+        self._dnssec_state = None
         self._migration_source = 'NONE'
 
     @property
@@ -261,6 +277,89 @@ class CreateZoneDetails(CreateZoneBaseDetails):
         """
         self._external_downstreams = external_downstreams
 
+    @property
+    def dnssec_state(self):
+        """
+        Gets the dnssec_state of this CreateZoneDetails.
+        The state of DNSSEC on the zone.
+
+        For DNSSEC to function, every parent zone in the DNS tree up to the top-level domain (or an independent
+        trust anchor) must also have DNSSEC correctly set up.
+        After enabling DNSSEC, you must add a DS record to the zone's parent zone containing the
+        `KskDnssecKeyVersion` data. You can find the DS data in the `dsData` attribute of the `KskDnssecKeyVersion`.
+        Then, use the `PromoteZoneDnssecKeyVersion` operation to promote the `KskDnssecKeyVersion`.
+
+        New `KskDnssecKeyVersion`s are generated annually, a week before the existing `KskDnssecKeyVersion`'s expiration.
+        To rollover a `KskDnssecKeyVersion`, you must replace the parent zone's DS record containing the old
+        `KskDnssecKeyVersion` data with the data from the new `KskDnssecKeyVersion`.
+
+        To remove the old DS record without causing service disruption, wait until the old DS record's TTL has
+        expired, and the new DS record has propagated. After the DS replacement has been completed, then the
+        `PromoteZoneDnssecKeyVersion` operation must be called.
+
+        Metrics are emitted in the `oci_dns` namespace daily for each `KskDnssecKeyVersion` indicating how many
+        days are left until expiration.
+        We recommend that you set up alarms and notifications for KskDnssecKeyVersion expiration so that the
+        necessary parent zone updates can be made and the `PromoteZoneDnssecKeyVersion` operation can be called.
+
+        Enabling DNSSEC results in additional records in DNS responses which increases their size and can
+        cause higher response latency.
+
+        For more information, see `DNSSEC`__.
+
+        __ https://docs.cloud.oracle.com/iaas/Content/DNS/Concepts/dnssec.htm
+
+        Allowed values for this property are: "ENABLED", "DISABLED"
+
+
+        :return: The dnssec_state of this CreateZoneDetails.
+        :rtype: str
+        """
+        return self._dnssec_state
+
+    @dnssec_state.setter
+    def dnssec_state(self, dnssec_state):
+        """
+        Sets the dnssec_state of this CreateZoneDetails.
+        The state of DNSSEC on the zone.
+
+        For DNSSEC to function, every parent zone in the DNS tree up to the top-level domain (or an independent
+        trust anchor) must also have DNSSEC correctly set up.
+        After enabling DNSSEC, you must add a DS record to the zone's parent zone containing the
+        `KskDnssecKeyVersion` data. You can find the DS data in the `dsData` attribute of the `KskDnssecKeyVersion`.
+        Then, use the `PromoteZoneDnssecKeyVersion` operation to promote the `KskDnssecKeyVersion`.
+
+        New `KskDnssecKeyVersion`s are generated annually, a week before the existing `KskDnssecKeyVersion`'s expiration.
+        To rollover a `KskDnssecKeyVersion`, you must replace the parent zone's DS record containing the old
+        `KskDnssecKeyVersion` data with the data from the new `KskDnssecKeyVersion`.
+
+        To remove the old DS record without causing service disruption, wait until the old DS record's TTL has
+        expired, and the new DS record has propagated. After the DS replacement has been completed, then the
+        `PromoteZoneDnssecKeyVersion` operation must be called.
+
+        Metrics are emitted in the `oci_dns` namespace daily for each `KskDnssecKeyVersion` indicating how many
+        days are left until expiration.
+        We recommend that you set up alarms and notifications for KskDnssecKeyVersion expiration so that the
+        necessary parent zone updates can be made and the `PromoteZoneDnssecKeyVersion` operation can be called.
+
+        Enabling DNSSEC results in additional records in DNS responses which increases their size and can
+        cause higher response latency.
+
+        For more information, see `DNSSEC`__.
+
+        __ https://docs.cloud.oracle.com/iaas/Content/DNS/Concepts/dnssec.htm
+
+
+        :param dnssec_state: The dnssec_state of this CreateZoneDetails.
+        :type: str
+        """
+        allowed_values = ["ENABLED", "DISABLED"]
+        if not value_allowed_none_or_none_sentinel(dnssec_state, allowed_values):
+            raise ValueError(
+                f"Invalid value for `dnssec_state`, must be None or one of {allowed_values}"
+            )
+        self._dnssec_state = dnssec_state
+
     def __repr__(self):
         return formatted_flat_dict(self)
 

oci/dns/models/dnssec_config.py

@@ -0,0 +1,105 @@
+# coding: utf-8
+# Copyright (c) 2016, 2024, Oracle and/or its affiliates.  All rights reserved.
+# This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+# NOTE: This class is auto generated by OracleSDKGenerator. DO NOT EDIT. API Version: 20180115
+
+
+from oci.util import formatted_flat_dict, NONE_SENTINEL, value_allowed_none_or_none_sentinel  # noqa: F401
+from oci.decorators import init_model_state_from_kwargs
+
+
+@init_model_state_from_kwargs
+class DnssecConfig(object):
+    """
+    DNSSEC configuration data.
+
+    A zone may have a maximum of 10 `DnssecKeyVersions`, regardless of signing key type.
+    """
+
+    def __init__(self, **kwargs):
+        """
+        Initializes a new DnssecConfig object with values from keyword arguments.
+        The following keyword arguments are supported (corresponding to the getters/setters of this class):
+
+        :param ksk_dnssec_key_versions:
+            The value to assign to the ksk_dnssec_key_versions property of this DnssecConfig.
+        :type ksk_dnssec_key_versions: list[oci.dns.models.KskDnssecKeyVersion]
+
+        :param zsk_dnssec_key_versions:
+            The value to assign to the zsk_dnssec_key_versions property of this DnssecConfig.
+        :type zsk_dnssec_key_versions: list[oci.dns.models.ZskDnssecKeyVersion]
+
+        """
+        self.swagger_types = {
+            'ksk_dnssec_key_versions': 'list[KskDnssecKeyVersion]',
+            'zsk_dnssec_key_versions': 'list[ZskDnssecKeyVersion]'
+        }
+
+        self.attribute_map = {
+            'ksk_dnssec_key_versions': 'kskDnssecKeyVersions',
+            'zsk_dnssec_key_versions': 'zskDnssecKeyVersions'
+        }
+
+        self._ksk_dnssec_key_versions = None
+        self._zsk_dnssec_key_versions = None
+
+    @property
+    def ksk_dnssec_key_versions(self):
+        """
+        Gets the ksk_dnssec_key_versions of this DnssecConfig.
+        A read-only array of key signing key (KSK) versions.
+
+
+        :return: The ksk_dnssec_key_versions of this DnssecConfig.
+        :rtype: list[oci.dns.models.KskDnssecKeyVersion]
+        """
+        return self._ksk_dnssec_key_versions
+
+    @ksk_dnssec_key_versions.setter
+    def ksk_dnssec_key_versions(self, ksk_dnssec_key_versions):
+        """
+        Sets the ksk_dnssec_key_versions of this DnssecConfig.
+        A read-only array of key signing key (KSK) versions.
+
+
+        :param ksk_dnssec_key_versions: The ksk_dnssec_key_versions of this DnssecConfig.
+        :type: list[oci.dns.models.KskDnssecKeyVersion]
+        """
+        self._ksk_dnssec_key_versions = ksk_dnssec_key_versions
+
+    @property
+    def zsk_dnssec_key_versions(self):
+        """
+        Gets the zsk_dnssec_key_versions of this DnssecConfig.
+        A read-only array of zone signing key (ZSK) versions.
+
+
+        :return: The zsk_dnssec_key_versions of this DnssecConfig.
+        :rtype: list[oci.dns.models.ZskDnssecKeyVersion]
+        """
+        return self._zsk_dnssec_key_versions
+
+    @zsk_dnssec_key_versions.setter
+    def zsk_dnssec_key_versions(self, zsk_dnssec_key_versions):
+        """
+        Sets the zsk_dnssec_key_versions of this DnssecConfig.
+        A read-only array of zone signing key (ZSK) versions.
+
+
+        :param zsk_dnssec_key_versions: The zsk_dnssec_key_versions of this DnssecConfig.
+        :type: list[oci.dns.models.ZskDnssecKeyVersion]
+        """
+        self._zsk_dnssec_key_versions = zsk_dnssec_key_versions
+
+    def __repr__(self):
+        return formatted_flat_dict(self)
+
+    def __eq__(self, other):
+        if other is None:
+            return False
+
+        return self.__dict__ == other.__dict__
+
+    def __ne__(self, other):
+        return not self == other

oci/dns/models/dnssec_key_version_ds_data.py

@@ -0,0 +1,121 @@
+# coding: utf-8
+# Copyright (c) 2016, 2024, Oracle and/or its affiliates.  All rights reserved.
+# This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+# NOTE: This class is auto generated by OracleSDKGenerator. DO NOT EDIT. API Version: 20180115
+
+
+from oci.util import formatted_flat_dict, NONE_SENTINEL, value_allowed_none_or_none_sentinel  # noqa: F401
+from oci.decorators import init_model_state_from_kwargs
+
+
+@init_model_state_from_kwargs
+class DnssecKeyVersionDsData(object):
+    """
+    Data for a parent zone DS record corresponding to this key-signing key (KSK).
+    """
+
+    #: A constant which can be used with the digest_type property of a DnssecKeyVersionDsData.
+    #: This constant has a value of "SHA_256"
+    DIGEST_TYPE_SHA_256 = "SHA_256"
+
+    def __init__(self, **kwargs):
+        """
+        Initializes a new DnssecKeyVersionDsData object with values from keyword arguments.
+        The following keyword arguments are supported (corresponding to the getters/setters of this class):
+
+        :param rdata:
+            The value to assign to the rdata property of this DnssecKeyVersionDsData.
+        :type rdata: str
+
+        :param digest_type:
+            The value to assign to the digest_type property of this DnssecKeyVersionDsData.
+            Allowed values for this property are: "SHA_256", 'UNKNOWN_ENUM_VALUE'.
+            Any unrecognized values returned by a service will be mapped to 'UNKNOWN_ENUM_VALUE'.
+        :type digest_type: str
+
+        """
+        self.swagger_types = {
+            'rdata': 'str',
+            'digest_type': 'str'
+        }
+
+        self.attribute_map = {
+            'rdata': 'rdata',
+            'digest_type': 'digestType'
+        }
+
+        self._rdata = None
+        self._digest_type = None
+
+    @property
+    def rdata(self):
+        """
+        Gets the rdata of this DnssecKeyVersionDsData.
+        Presentation-format DS record data that must be added to the parent zone. For more information about RDATA,
+        see `Supported DNS Resource Record Types`__
+
+        __ https://docs.cloud.oracle.com/iaas/Content/DNS/Reference/supporteddnsresource.htm
+
+
+        :return: The rdata of this DnssecKeyVersionDsData.
+        :rtype: str
+        """
+        return self._rdata
+
+    @rdata.setter
+    def rdata(self, rdata):
+        """
+        Sets the rdata of this DnssecKeyVersionDsData.
+        Presentation-format DS record data that must be added to the parent zone. For more information about RDATA,
+        see `Supported DNS Resource Record Types`__
+
+        __ https://docs.cloud.oracle.com/iaas/Content/DNS/Reference/supporteddnsresource.htm
+
+
+        :param rdata: The rdata of this DnssecKeyVersionDsData.
+        :type: str
+        """
+        self._rdata = rdata
+
+    @property
+    def digest_type(self):
+        """
+        Gets the digest_type of this DnssecKeyVersionDsData.
+        The type of the digest associated with the rdata.
+
+        Allowed values for this property are: "SHA_256", 'UNKNOWN_ENUM_VALUE'.
+        Any unrecognized values returned by a service will be mapped to 'UNKNOWN_ENUM_VALUE'.
+
+
+        :return: The digest_type of this DnssecKeyVersionDsData.
+        :rtype: str
+        """
+        return self._digest_type
+
+    @digest_type.setter
+    def digest_type(self, digest_type):
+        """
+        Sets the digest_type of this DnssecKeyVersionDsData.
+        The type of the digest associated with the rdata.
+
+
+        :param digest_type: The digest_type of this DnssecKeyVersionDsData.
+        :type: str
+        """
+        allowed_values = ["SHA_256"]
+        if not value_allowed_none_or_none_sentinel(digest_type, allowed_values):
+            digest_type = 'UNKNOWN_ENUM_VALUE'
+        self._digest_type = digest_type
+
+    def __repr__(self):
+        return formatted_flat_dict(self)
+
+    def __eq__(self, other):
+        if other is None:
+            return False
+
+        return self.__dict__ == other.__dict__
+
+    def __ne__(self, other):
+        return not self == other