chef/cookbooks/bind9/templates/default/designate-rndc-access.conf.erb
key "designate-key" {
algorithm hmac-md5;
secret "<%= @rndc_key -%>";
};
controls {
# listen on the admin interface and
# allow access via the designate-key
# from ips of admin_network
inet <%= @admin_ip -%> allow { <%= @admin_network -%>/<%= @admin_subnet -%>; } keys { designate-key; };
};