.TH "GCLOUD_DOMAINS_REGISTRATIONS_CONFIGURE_DNS" 1



.SH "NAME"
.HP
gcloud domains registrations configure dns \- configure DNS settings of a Cloud Domains registration



.SH "SYNOPSIS"
.HP
\f5gcloud domains registrations configure dns\fR \fIREGISTRATION\fR [\fB\-\-validate\-only\fR] [\fB\-\-cloud\-dns\-zone\fR=\fICLOUD_DNS_ZONE\fR\ |\ \fB\-\-dns\-settings\-from\-file\fR=\fIDNS_SETTINGS_FILE_NAME\fR\ |\ \fB\-\-name\-servers\fR=\fINAME_SERVER\fR,...,[...]\ |\ \fB\-\-use\-google\-domains\-dns\fR] [\fB\-\-async\fR] [\fB\-\-disable\-dnssec\fR] [\fB\-\-unsafe\-dns\-update\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

Configure DNS settings of a Cloud Domains registration.

In most cases, this command is used for changing the authoritative name servers
and DNSSEC options for the given domain. However, advanced options like glue
records are available.



.SH "EXAMPLES"

To start an interactive flow to configure DNS settings for
\f5\fIexample.com\fR\fR, run:

.RS 2m
$ gcloud domains registrations configure dns example.com
.RE

To use Cloud DNS managed\-zone \f5\fIexample\-zone\fR\fR for
\f5\fIexample.com\fR\fR, run:

.RS 2m
$ gcloud domains registrations configure dns example.com \e
    \-\-cloud\-dns\-zone=example\-zone
.RE

DNSSEC will not be enabled as it may not be safe to enable it (e.g. when the
Cloud DNS managed\-zone was signed less than 24h ago).

To use a signed Cloud DNS managed\-zone \f5\fIexample\-zone\fR\fR for
\f5\fIexample.com\fR\fR and enable DNSSEC, run:

.RS 2m
$ gcloud domains registrations configure dns example.com \e
    \-\-cloud\-dns\-zone=example\-zone \-\-no\-disable\-dnssec
.RE

To change DNS settings for \f5\fIexample.com\fR\fR according to information from
a YAML file \f5\fIdns_settings.yaml\fR\fR, run:

.RS 2m
$ gcloud domains registrations configure dns example.com \e
    \-\-dns\-settings\-from\-file=dns_settings.yaml
.RE

To disable DNSSEC, run:

.RS 2m
$ gcloud domains registrations configure dns example.com \e
    \-\-disable\-dnssec
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m

Registration resource \- The domain registration to configure DNS settings for.
This represents a Cloud resource. (NOTE) Some attributes are not given arguments
in this group but can be set in other ways.

To set the \f5project\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5registration\fR on the command line with a fully
specified name;
.IP "\(em" 2m
provide the argument \f5\-\-project\fR on the command line;
.IP "\(em" 2m
set the property \f5core/project\fR.
.RE
.sp

To set the \f5location\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5registration\fR on the command line with a fully
specified name;
.IP "\(em" 2m
location is always global.
.RE
.sp

This must be specified.


.RS 2m
.TP 2m
\fIREGISTRATION\fR

ID of the registration or fully qualified identifier for the registration.

To set the \f5registration\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5registration\fR on the command line.
.RE
.sp


.RE
.RE
.sp

.SH "COMMONLY USED FLAGS"

.RS 2m
.TP 2m
\fB\-\-validate\-only\fR

Don't actually configure DNS settings of the registration. Only validate
arguments.

.TP 2m

Set the authoritative name servers for the given domain.


.RS 2m
Warning: Do not change name servers if ds_records is non\-empty.
Clear ds_records first by calling this command with the
\-\-disable\-dnssec flag, and wait 24 hours before changing
name servers. Otherwise your domain may stop serving.
.RE



.RE
.sp
At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-cloud\-dns\-zone\fR=\fICLOUD_DNS_ZONE\fR

The name of the Cloud DNS managed\-zone to set as the name server for the
domain. If it's in the same project, you can use short name. If not, use the
full resource name, e.g.:
\-\-cloud\-dns\-zone=projects/example\-project/managedZones/example\-zone.

.RS 2m
.TP 2m
\fB\-\-dns\-settings\-from\-file\fR=\fIDNS_SETTINGS_FILE_NAME\fR

A YAML file containing the required DNS settings. If specified, its content will
replace the values currently used in the registration resource. If the file is
missing some of the dns_settings fields, those fields will be cleared.

Examples of file contents:

.RS 2m
googleDomainsDns:
  dsState: DS_RECORDS_PUBLISHED
glueRecords:
\- hostName: ns1.example.com
  ipv4Addresses:
  \- 8.8.8.8
\- hostName: ns2.example.com
  ipv4Addresses:
  \- 8.8.8.8
.RE

.RS 2m
customDns:
  nameServers:
  \- new.ns1.com
  \- new.ns2.com
  dsRecords:
  \- keyTag: 24
    algorithm: RSASHA1
    digestType: SHA256
    digest: 2e1cfa82b035c26cbbbdae632cea070514eb8b773f616aaeaf668e2f0be8f10d
  \- keyTag: 42
    algorithm: RSASHA1
    digestType: SHA256
    digest: 2e1cfa82bf35c26cbbbdae632cea070514eb8b773f616aaeaf668e2f0be8f10d
.RE

.TP 2m
\fB\-\-name\-servers\fR=\fINAME_SERVER\fR,...,[...]

List of DNS name servers for the domain.

.TP 2m
\fB\-\-use\-google\-domains\-dns\fR

(DEPRECATED) Use free name servers provided by Google Domains.

The \-\-use\-google\-domains\-dns option is deprecated; See
https://cloud.google.com/domains/docs/deprecations/feature\-deprecations.


.RE
.RE
.sp

.SH "OTHER FLAGS"

.RS 2m
.TP 2m
\fB\-\-async\fR

Return immediately, without waiting for the operation in progress to complete.

.TP 2m
\fB\-\-disable\-dnssec\fR

Use this flag to disable DNSSEC, or to skip enabling it when switching to a
Cloud DNS Zone or Google Domains nameservers.

.TP 2m
\fB\-\-unsafe\-dns\-update\fR

(DEPRECATED) Use this flag to allow DNS changes that may make your domain stop
serving.

The \-\-unsafe\-dns\-update option is deprecated. To complete an unsafe DNS
operation first disable DNSSEC, then change name servers, then (optionally)
enable DNSSEC.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha domains registrations configure dns
.RE

.RS 2m
$ gcloud beta domains registrations configure dns
.RE