datamodel: logging: bogus-log option added

diff --git a/manager/knot_resolver_manager/datamodel/logging_config.py b/manager/knot_resolver_manager/datamodel/logging_config.py
index b43ee152e008857d723b92c7839e8acd32df4cc2..65dc5058088671b3e1723e7eb0d7c48c2a9cd090 100644 (file)
--- a/manager/knot_resolver_manager/datamodel/logging_config.py
+++ b/manager/knot_resolver_manager/datamodel/logging_config.py
@@ -87,12 +87,14 @@ class LoggingSchema(SchemaNode):
     level: Logging level for all processes.
     target: Logging stream target for all processes.
     groups: List of groups for which 'debug' logging level is set.
-    debugging: Advanced debugging parameters for Knot Resolver daemon (kresd).
+    dnssec_bogus: Logging a message for each DNSSEC validation failure.
     dnstap: Logging DNS requests and responses to a unix socket.
+    debugging: Advanced debugging parameters for Knot Resolver daemon (kresd).
     """
 
     level: LogLevelEnum = "notice"
     target: Optional[LogTargetEnum] = None
     groups: Optional[List[LogGroupsEnum]] = None
+    dnssec_bogus: bool = False
     dnstap: Union[Literal[False], DnstapSchema] = False
     debugging: DebuggingSchema = DebuggingSchema()

diff --git a/manager/knot_resolver_manager/datamodel/templates/logging.lua.j2 b/manager/knot_resolver_manager/datamodel/templates/logging.lua.j2
index 0fb2fb123c12f56928347e1047d443c75d08c992..5681325c52795689a9b747db7ecb9b2de9266033 100644 (file)
--- a/manager/knot_resolver_manager/datamodel/templates/logging.lua.j2
+++ b/manager/knot_resolver_manager/datamodel/templates/logging.lua.j2
@@ -17,6 +17,10 @@ log_groups({
 })
 {% endif %}
 
+{% if cfg.logging.dnssec_bogus %}
+modules.load('bogus_log')
+{% endif %}
+
 {% if cfg.logging.dnstap -%}
 -- logging.dnstap
 modules.load('dnstap')