Google Cloud DNS supports DNSSEC, but the released PD Google Cloud DNS module does not sign zones or manage their signing keys. A missing signing control is expected rather than evidence of an incomplete module login.

Separate signing from ordinary records

The module manages its supported DNS record types. A DS record used for a child-zone delegation is not a substitute for configuring this zone’s own signing and publishing the correct material at its parent.

Manage signing through the supported Google Cloud DNS workflow with the administrator responsible for the project and registrar. Google’s DNSSEC configuration guide covers that provider-side procedure.

Check an existing signed domain

1. Identify the exact project, managed zone, DNS suffix and registrar/parent.
2. Check signing and key state through the supported provider controls.
3. Compare the parent DS with the zone’s current signing material.
4. Verify a public validating DNS response separately from a module connection test.
5. Retain the redacted provider/validation result for diagnosis.

A module zone-list status does not establish that the whole chain of trust validates. A permission refusal differs from an incorrect parent DS or delegation problem; do not broaden credentials simply to reveal a control the module does not supply.

Plan disabling or moving signing

Follow Google’s current DNSSEC procedure for the affected chain. Remove the relevant parent/registrar DS first and wait for cached DS data to expire while signing remains available, before disabling the zone’s signing. Handle child-zone trust dependencies as required by the provider’s procedure.

Do not assume a BIND export/import transfers signing keys or reconstructs the parent chain. Keep signing separate from ordinary-record migration, and investigate validation failures before repeatedly changing DNS data. Have your Google Cloud/DNS administrator establish responsibility for the parent, keys and intended transition before making signing changes.

See the PD Google Cloud DNS Blesta guide for related tasks, or explore the module.