Foreman » Smart Proxy

it appears i can update it manually and there is no permission issue and /etc/rndc.key works.

but A record was never created automatically. why?

here is my /etc/named.conf file:
// named.conf

include "/etc/rndc.key";

controls {
inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "rndc-key"; };
};

options {
include "/etc/named/options.conf";
};

include "/etc/named.rfc1912.zones";

// Public view read by Server Admin
include "/etc/zones.conf";
logging {
category update { update_log; };
channel update_log {
file "/var/named/logs/dns-update.log" versions 2 size 20m;
print-time yes;
print-category yes;
print-severity yes;
severity info;
};
};

and here is the /etc/zones.conf file:

zone "11.168.192.in-addr.arpa" {
type master;
file "/var/named/dynamic/db.11.168.192.in-addr.arpa";
update-policy {
grant rndc-key zonesub ANY;
};
};
zone "samsung.lab" {
type master;
file "/var/named/dynamic/db.samsung.lab";
update-policy {
grant rndc-key zonesub ANY;
};
};