How to change the policy of a zone?

[bortzmeyer]

I want to migrate a zone to another policy but I find no way to apply a new policy. The obvious one fails;

 % cascade  zone add --source /etc/cascade/zones/cours-dns.fr --policy ovh-no-ed25519 cours-dns.fr 
2026-07-15T07:08:00.002914Z ERROR cascade: Failed to add zone: a zone of this name already exists

Is the only way to remove the zone and re-add it?

[ximon18]

Hi @bortzmeyer,

Unfortunately this is not yet possible. We are keeping track of this limitation via #868.

One limited workaround is to edit the policy currently used by the zone and do cascade policy reload, but that will affect all zones using the same policy.

Otherwise as you say the zone must be removed and re-added.

Ximon

[bortzmeyer]

One limited workaround is to edit the policy currently used by the zone and do cascade policy reload, but that will affect all zones using the same policy.

Indeed. I had a policy for several zones and wanted to separate the zones in two groups.

Otherwise as you say the zone must be removed and re-added.

If the new policy uses a different algorithm, it seems there is no proper rollover (I changed from 15 to 13 and the new policy fully applies, nothing is left of keys and signatures of the previous algorithm).

[ximon18]

This is very appreciated feedback @bortzmeyer ! ❤️