create
Enable DNSSEC keys and create associated DNSKEY records for your DNS zone
Usage
ionosctl dns dnssec create [flags]Aliases
[sec dnskey key keys][c post]Description
Options
--algorithm string Algorithm used to generate signing keys (both Key Signing Keys and Zone Signing Keys) (default "RSASHA256")
-u, --api-url string Override default host URL. If contains placeholder, location will be embedded. Preferred over the config file override 'dns' and env var 'IONOS_API_URL' (default "https://dns.%s.ionos.com")
--cols strings Set of columns to be printed on output
Available columns: [Id KeyTag DigestAlgorithmMnemonic Digest Validity Flags PubKey ComposedKeyData Algorithm KskBits ZskBits NsecMode Nsec3Iterations Nsec3SaltBits]
-c, --config string Configuration file used for authentication (default "$XDG_CONFIG_HOME/ionosctl/config.yaml")
-D, --depth int Level of detail for response objects (default 1)
-F, --filters strings Limit results to results containing the specified filter:KEY1=VALUE1,KEY2=VALUE2
-f, --force Force command to execute without user input
-h, --help Print usage
--ksk-bits int Key signing key length in bits. kskBits >= zskBits: [1024/2048/4096] (default 1024)
--limit int Maximum number of items to return per request (default 50)
-l, --location string Location of the resource to operate on. When unset, list commands query all locations. Can be one of: de/fra (default "de/fra")
--no-headers Don't print table headers when table output is used
--nsec-mode string NSEC mode.. Can be one of: NSEC, NSEC3 (default "NSEC")
--nsec3-iterations int Number of iterations for NSEC3. [0..50]
--nsec3-salt-bits int Salt length in bits for NSEC3. [64..128], multiples of 8 (default 64)
--offset int Number of items to skip before starting to collect the results
--order-by string Property to order the results by
-o, --output string Desired output format [text|json|api-json] (default "text")
--query string JMESPath query string to filter the output
-q, --quiet Quiet output
-t, --timeout int Timeout in seconds for --wait and other wait operations (default 600)
--validity int Signature validity in days [90..365] (default 90)
-v, --verbose count Increase verbosity level [-v, -vv, -vvv]
-w, --wait Wait for the resource to reach AVAILABLE state after the command completes. No-op for list commands
-z, --zone string The name or ID of the DNS zone (required)
--zsk-bits int Zone signing key length in bits. zskBits <= kskBits: [1024/2048/4096] (default 1024)Examples
Last updated