hashicorp / terraform-provider-dns

Utility provider that supports DNS updates (RFC 2136) and can optionally be configured with secret key based transaction authentication (RFC 2845).
https://registry.terraform.io/providers/hashicorp/dns/latest
Mozilla Public License 2.0
112 stars 71 forks source link

Unable to create or update wildcard records on subdomain #245

Open molldk opened 1 year ago

molldk commented 1 year ago

Terraform CLI and Provider Versions

Terraform v1.3.1 on windows_amd64

Your version of Terraform is out of date! The latest version is 1.3.5. You can update by downloading from https://www.terraform.io/downloads.html

Terraform Configuration

provider "dns" {
  update {
    server = var.servername
    gssapi {
      realm    = var.domain
      username = var.admuser
      password = var.admpass
    }
  }
}

resource "dns_a_record_set" "test" {
  zone      = "contoso.com"
  name      = "*.test"
  addresses = ["127.0.0.1"]
}

Expected Behavior

Create record like a record that does not contain the wildcard character *

Actual Behavior

Got error message: Error: Error updating DNS record: The message or signature supplied for verification has been altered.

If removing the wildcard if creates the record, manually creating the record and importing seems to work as well, but then error when trying to update.

Steps to Reproduce

  1. terraform apply

How much impact is this issue causing?

Medium

Logs

No response

Additional Information

It seems to break when adding the wildcard character on a subdomain. I have not tried wildcard on apex, so can't comment on that part. Removing the wildcard creates and updates the record as expected.

I have changed the domain from my test to contoso.com.

Code of Conduct

bodgit commented 3 months ago

If that's a Windows DNS server then they don't support creating wildcard records using dynamic DNS updates.