If your authoritative DNS server is not FreeIPA, you can run the following command on your IPA server to generate the necessary DNS records, which you can then go and put into your authoritative DNS zone file:
ipa dns-update-system-records --dry-run
See https://www.freeipa.org/page/Howto/Updating_FreeIPA_system_DNS_records_on_a_remote_DNS_server for more information.
If FreeIPA is your authoritative DNS server, you can regenerate your DNS records on the fly by running the same command, without the
---dry-run flag. If you're not sure your records are correct, or want to see the records, use the
--dry-run flag to compare and contrast what is currently configured in the system.