Address DNS issues with googleapis RPZ and forwarding (#2891)

* add empty DNS zone for googleapis to net stages

* add ipv6 records for private/restricted

* avoid permadiff in rpz ipv6 addresses

tests/fast/stages/s2_networking_a_simple/ncc.yaml

@@ -23,7 +23,7 @@ counts:
   google_compute_router_nat: 2
   google_compute_shared_vpc_host_project: 3
   google_compute_subnetwork: 5
-  google_dns_managed_zone: 9
+  google_dns_managed_zone: 10
   google_dns_policy: 3
   google_dns_record_set: 3
   google_dns_response_policy: 1
@@ -41,5 +41,5 @@ counts:
   google_project_service_identity: 20
   google_storage_bucket_object: 1
   google_tags_tag_binding: 3
-  modules: 22
-  resources: 175
+  modules: 23
+  resources: 176

tests/fast/stages/s2_networking_a_simple/simple.yaml

@@ -29,7 +29,7 @@ counts:
   google_compute_shared_vpc_host_project: 3
   google_compute_subnetwork: 5
   google_compute_vpn_tunnel: 2
-  google_dns_managed_zone: 9
+  google_dns_managed_zone: 10
   google_dns_policy: 3
   google_dns_record_set: 3
   google_dns_response_policy: 1
@@ -45,6 +45,6 @@ counts:
   google_project_service_identity: 20
   google_storage_bucket_object: 1
   google_tags_tag_binding: 3
-  modules: 27
+  modules: 28
   random_id: 3
-  resources: 192
+  resources: 193

tests/fast/stages/s2_networking_a_simple/vpn.yaml

@@ -27,7 +27,7 @@ counts:
   google_compute_shared_vpc_host_project: 3
   google_compute_subnetwork: 5
   google_compute_vpn_tunnel: 12
-  google_dns_managed_zone: 9
+  google_dns_managed_zone: 10
   google_dns_policy: 3
   google_dns_record_set: 3
   google_dns_response_policy: 1
@@ -43,6 +43,6 @@ counts:
   google_project_service_identity: 20
   google_storage_bucket_object: 1
   google_tags_tag_binding: 3
-  modules: 29
+  modules: 30
   random_id: 17
-  resources: 239
+  resources: 240

tests/fast/stages/s2_networking_b_nva/ncc-ra.yaml

@@ -30,7 +30,7 @@ counts:
   google_compute_shared_vpc_host_project: 3
   google_compute_subnetwork: 10
   google_compute_vpn_tunnel: 4
-  google_dns_managed_zone: 9
+  google_dns_managed_zone: 10
   google_dns_policy: 4
   google_dns_record_set: 3
   google_dns_response_policy: 1
@@ -48,6 +48,6 @@ counts:
   google_project_service_identity: 19
   google_storage_bucket_object: 1
   google_tags_tag_binding: 3
-  modules: 37
+  modules: 38
   random_id: 6
-  resources: 256
+  resources: 257

tests/fast/stages/s2_networking_b_nva/regional.yaml

@@ -34,7 +34,7 @@ counts:
   google_compute_shared_vpc_host_project: 3
   google_compute_subnetwork: 12
   google_compute_vpn_tunnel: 4
-  google_dns_managed_zone: 9
+  google_dns_managed_zone: 10
   google_dns_policy: 6
   google_dns_record_set: 3
   google_dns_response_policy: 1
@@ -50,6 +50,6 @@ counts:
   google_project_service_identity: 19
   google_storage_bucket_object: 1
   google_tags_tag_binding: 3
-  modules: 45
+  modules: 46
   random_id: 6
-  resources: 264
+  resources: 265

tests/fast/stages/s2_networking_b_nva/simple.yaml

@@ -34,7 +34,7 @@ counts:
   google_compute_shared_vpc_host_project: 3
   google_compute_subnetwork: 10
   google_compute_vpn_tunnel: 4
-  google_dns_managed_zone: 9
+  google_dns_managed_zone: 10
   google_dns_policy: 4
   google_dns_record_set: 3
   google_dns_response_policy: 1
@@ -50,6 +50,6 @@ counts:
   google_project_service_identity: 19
   google_storage_bucket_object: 1
   google_tags_tag_binding: 3
-  modules: 41
+  modules: 42
   random_id: 6
-  resources: 242
+  resources: 243

tests/fast/stages/s2_networking_c_separate_envs/simple.yaml

@@ -28,7 +28,7 @@ counts:
   google_compute_shared_vpc_host_project: 2
   google_compute_subnetwork: 4
   google_compute_vpn_tunnel: 4
-  google_dns_managed_zone: 6
+  google_dns_managed_zone: 8
   google_dns_policy: 2
   google_dns_record_set: 2
   google_dns_response_policy: 2
@@ -43,6 +43,6 @@ counts:
   google_project_service_identity: 16
   google_storage_bucket_object: 1
   google_tags_tag_binding: 2
-  modules: 20
+  modules: 22
   random_id: 6
-  resources: 212
+  resources: 214