Add DNS A record

Add apex A record with 600s TTL; @ means the zone root

yc dns zone add-records --name myzone --record '@ 600 A 1.2.3.4'
tool
yc32 commands
tags
ycdnsnetwork

More yc commands

  • Create VM with cloud-init
    yc compute instance create --name web-1 --zone ru-central1-a --network-interface subnet-name=sub-a,nat-ip-version=ipv4 --create-boot-disk image-family=ubuntu-2204-lts,size=20 --metadata-from-file user-data=cloud-init.yaml

    Boot VM with public NAT IP and cloud-init user-data bootstrap

  • Create managed PostgreSQL 16 cluster
    yc managed-postgresql cluster create --name <name> --environment production --postgresql-version 16 --network-name <name> --host zone-id=ru-central1-a,subnet-name=<name> --resource-preset s3-c2-m8 --disk-size 50 --disk-type network-ssd

    Provision HA PG16 cluster; note: pick s3 preset for prod, not burstable b-class

  • List PostgreSQL cluster hosts
    yc managed-postgresql cluster list-hosts --cluster-name <name> --format json | jq -r '.[] | "\(.name)\t\(.role)\t\(.health)"'

    Show host FQDNs with MASTER/REPLICA role and health for connection routing

  • Create PostgreSQL database and user
    yc managed-postgresql user create <name> --cluster-name <name> --password-stdin && yc managed-postgresql database create <name> --cluster-name <name> --owner <name>

    Create user via stdin then DB with that owner; note: password-stdin avoids shell history leak

  • Connect to managed PG with verify-full TLS
    curl -s https://storage.yandexcloud.net/cloud-certs/CA.pem -o ~/.postgresql/root.crt && psql "host=<host> port=6432 sslmode=verify-full dbname=<name> user=<name> target_session_attrs=read-write"

    Connect via 6432 PgBouncer with YC CA; note: verify-full needs root.crt to pin the host

all 32 yc commands