---
title: "List DomainZones"
method: GET
path: "/delivery/v2.1/global/workspaces/{workspaceUUID}/domainzones"
tags: ["CDN and DNS (v2.1)"]
---

# List DomainZones

`GET /delivery/v2.1/global/workspaces/{workspaceUUID}/domainzones`

Retrieves a paginated list of all DomainZone objects in the specified workspace.
The response includes details about each DomainZone such as its configuration,
status, and metadata. Results can be filtered using query parameters.

## Path parameters

- `workspaceUUID` string, required

## Response `200`

Successfully retrieved the list of DomainZone objects. The response includes
basic DomainZone information like name, creation time, and status.

- V2DomainZoneList
  - `apiVersion` 'delivery/v2' | 'delivery/v2.1', required — Version identifier of the API schema
  - `items` V2DomainZone[], required — List of DomainZone resources
    - `apiVersion` 'delivery/v2' | 'delivery/v2.1', required — Version identifier of the API schema
    - `kind` 'DomainZone', required — The string value 'DomainZone' that identifies the schema
    - `metadata` V2ObjectMeta, required — Standard resource metadata fields
      - `creationTimestamp` string, date-time, required
      - `labels` object, required — Labels are key-value pairs attached to resources for organization and categorization
      - `name` string, required — User-provided name that uniquely identifies the resource within its workspace
      - `namespace` string, required — Namespace is the namespace in which the resource exists
      - `uid` string, required — System-generated unique identifier for the resource
    - `spec` V1beta1DomainZoneSpec, required — Desired configuration for the DomainZone
      - `NSDomain` string — (Deprecated) Randomly assigned nameserver domain used in earlier versions.
      - `authorizeByConfigMap` boolean — If true, verifies DNS ownership using a predefined ConfigMap. This is used for Sotoon internal usages.
      - `customNameservers` string[] — Optional user-defined nameservers overriding the system defaults.
      - `dnssec` boolean — Enables DNSSEC for cryptographic validation of DNS data.
      - `email` string — Administrative contact email associated with the domain (used in SOA records).
      - `nameservers` string[] — (Deprecated) Randomly assigned nameserver domain used in earlier versions.
      - `nameserversV4` string[] — Authoritative nameservers (version 4) from the format [a-z].ns.sotoon53.com.
      - `nsNameserver` string — Shared nameserver name used across the entire Kubernetes namespace.
      - `origin` string, required — The base domain or subdomain name this zone manages.
      - `records` object — A collection of DNS record sets, organized by subdomain (e.g., @, *, or api).
      - `ttl` integer — Default record lifetime (in seconds). Determines how long DNS resolvers cache responses.
      - `wsid` string — Unique workspace identifier (UUID) used for internal resource association.
    - `status` V1beta1DomainZoneStatus, required — Current observed state of the DomainZone
      - `reason` string — Human-readable message explaining the current status or failure cause.
      - `status` string, required — Current operational state of the domain zone (e.g., Active, Pending, Error).
  - `kind` 'DomainZoneList', required — The string value 'DomainZoneList' that identifies the schema
  - `metadata` V1ListMeta, required — Standard resource metadata fields
    - `continue` string
    - `remainingItemCount` integer, nullable
    - `resourceVersion` string
    - `selfLink` string

## Other responses

- `400` — Bad Request - invalid request payload or parameters
- `401` — Unauthorized - invalid or expired authentication token
- `403` — Forbidden - insufficient permissions

---

[API](https://skmtc.dev/sotoon/apis/sotoon-api.md) · [All operations](https://skmtc.dev/sotoon/apis/sotoon-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sotoon/sotoon-api/revisions/c937cd9861c5/schema)