desec-stack/api/desecapi/management/commands/sync-to-pdns.py

from django.core.management import BaseCommand, CommandError, call_command
from django.db import transaction

from desecapi import pdns
from desecapi.exceptions import PDNSException
from desecapi.models import Domain
from desecapi.pdns_change_tracker import PDNSChangeTracker


class Command(BaseCommand):
    help = "Sync RRsets from local API database to pdns."

    def add_arguments(self, parser):
        parser.add_argument(
            "domain-name",
            nargs="*",
            help="Domain name to sync. If omitted, will import all API domains.",
        )

    def handle(self, *args, **options):
        domains = Domain.objects.all()

        if options["domain-name"]:
            domains = domains.filter(name__in=options["domain-name"])
            domain_names = domains.values_list("name", flat=True)

            for domain_name in options["domain-name"]:
                if domain_name not in domain_names:
                    raise CommandError("{} is not a known domain".format(domain_name))

        catalog_alignment = False
        for domain in domains:
            self.stdout.write("%s ..." % domain.name, ending="")
            try:
                created = self._sync_domain(domain)
                if created:
                    self.stdout.write(f" created (was missing) ...", ending="")
                    catalog_alignment = True
                self.stdout.write(" synced")
            except Exception as e:
                self.stdout.write(" failed")
                msg = "Error while processing {}: {}".format(domain.name, e)
                raise CommandError(msg)

        if catalog_alignment:
            call_command("align-catalog-zone")

    @staticmethod
    @transaction.atomic
    def _sync_domain(domain):
        created = False

        # Create domain on pdns if it does not exist
        try:
            PDNSChangeTracker.CreateDomain(domain_name=domain.name).pdns_do()
        except PDNSException as e:
            # Domain already exists
            if e.response.status_code == 409:
                pass
            else:
                raise e
        else:
            created = True

        # modifications actually merged with additions in CreateUpdateDeleteRRSets
        modifications = {
            (rrset.type, rrset.subname) for rrset in domain.rrset_set.all()
        }
        deletions = {
            (rrset["type"], rrset["subname"]) for rrset in pdns.get_rrset_datas(domain)
        } - modifications
        deletions.discard(("SOA", ""))  # do not remove SOA record

        # Update zone on nslord, propagate to nsmaster
        PDNSChangeTracker.CreateUpdateDeleteRRSets(
            domain.name, set(), modifications, deletions
        ).pdns_do()
        pdns._pdns_put(
            pdns.NSMASTER, "/zones/{}/axfr-retrieve".format(pdns.pdns_id(domain.name))
        )

        return created