bindcar 0.7.0

HTTP REST API for managing BIND9 zones via rndc
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97

[package]
name = "bindcar"
version = "0.7.0"
edition = "2021"
rust-version = "1.88"
authors = ["Erick Bourgeois <firestoned@firestoned.io>"]
license = "MIT"
description = "HTTP REST API for managing BIND9 zones via rndc"
repository = "https://github.com/firestoned/bindcar"
keywords = ["dns", "bind9", "rndc", "api", "kubernetes"]
categories = ["api-bindings", "network-programming", "web-programming::http-server"]
readme = "README.md"

# Library configuration
[lib]
name = "bindcar"
path = "src/lib.rs"

# Binary configuration
[[bin]]
name = "bindcar"
path = "src/main.rs"

[dependencies]
# HTTP server framework
axum = "0.8"
tower = "0.5"
tower-http = { version = "0.7", features = ["trace"] }

# Async runtime
tokio = { version = "1", features = ["full"] }

# Serialization
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"

# Date/Time
chrono = "0.4"

# Logging
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] }

# Error handling
anyhow = "1.0"
thiserror = "2.0"

# OpenAPI / Swagger
utoipa = { version = "5", features = ["axum_extras"] }
utoipa-swagger-ui = { version = "9", features = ["axum"] }

# Metrics
prometheus = "0.14"
lazy_static = "1.5"

# Rate limiting
tower_governor = "0.8"

# RNDC client
rndc = "0.1.5"

# CLI argument parsing
clap = { version = "4", features = ["derive"] }

# Parsing
nom = "8"

# Constant-time comparison for shared-secret API token (avoids timing side-channels)
subtle = "2.6"

# Secure temp files (0600) for passing the TSIG key to nsupdate via -k instead of argv
tempfile = "3"

# Kubernetes client (optional, for token validation)
kube = { version = "4.0", features = ["client", "rustls-tls"], optional = true }
k8s-openapi = { version = "0.28", default-features = false, optional = true }
sha2 = "0.10"

[features]
default = []
k8s-token-review = ["kube", "k8s-openapi"]

[dev-dependencies]
# Testing
serde_json = "1.0"
tower = { version = "0.5", features = ["util"] }
serial_test = "3.4"
tempfile = "3.27"

# Enable k8s-openapi version for tests and examples
k8s-openapi = { version = "0.28", features = ["v1_32"] }

[profile.release]
opt-level = 3
lto = true
codegen-units = 1
strip = true