The OpenStack Designate project is the DNS-as-a-Service (DNSaaS) component offered by OpenStack. Designate integrates with DNS servers such as BIND9, PowerDNS, Infoblox in order to provide management of DNS information via REST APIs which are secured by Keystone authentication.
Let us walk through the process of enabling and configuring Designate within a Platform9 Managed OpenStack environment.
You must have administrative access to a Platform9-managed OpenStack (KVM) environment.
You must have access and required privileges to operate a Supported Designate DNS backend.
Note: Designate is an optional infrastructure feature which is not enabled by default within Platform9 environments. Please contact Platform9 support if you would like to enable Designate within your environment.
Configuring OpenStack Designate
You may configure OpenStack Designate within your Managed OpenStack by completing the following steps.
Step 1: Authorize host with DNS role
In order to integrate Designate with your DNS infrastructure, you must first configure an on-premises compute node to run the Designate software (designate-mdns and designate-worker).
Log in to Platform9 as an administrator.
Select a compute node on which to install Designate. Click Configure Host > DNS > Make this host a Designate node.
Click Update Designate details.
Designate will now be installed on the selected compute node.
Step 2: Configure Designate backends
After authorizing a Designate host in your environment, you must then configure Designate to interface with one or more DNS servers by modifying Designate's Pools configuration file, pools.yaml.
Login to the compute node running Designate.
Create the directory /etc/designate/.
Create and edit /etc/designate/pools.yaml.
A sample pools.yaml configuration which integrates with BIND9 is shown below.
After saving this file, update Designate's pool configuration with these changes using the designate-manage utility.
Verifying Designate integration
Once you have configured Designate, verify that it has been properly configured and you are able to successfully provision DNS zones and DNS records.
Note: The following steps require a workstation with the OpenStack CLI tools installed.
Step 1: Create DNS zone
In order to test proper integration of Designate with the authoritative name server, let us create an example DNS zone called corp.example.org.
If Designate is properly configured, the zone status should transition to 'ACTIVE' state.
Step 2: Create DNS record
Let us create a DNS 'A' record for www.corp.example.org that points to 198.51.100.10.
Step 3: Verify record existence
Finally, let us verify our DNS record was successfully created.
The process of configuring OpenStack Designate for your Platform9 Managed OpenStack Cloud is now complete.
For more information on using and configuring Designate, refer to the OpenStack Designate official documentation.