Trim resolver forward zones to internal upstreams
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful

Drops the six forward zones that pointed at the 10.10.16.x upstreams
(dmz/network/prod.unkin.net + 8/16/20.10.10.in-addr.arpa); 198.18.19.15
is the authoritative for the remaining unkin zones. Consul left as-is.
This commit is contained in:
2026-07-04 21:25:07 +10:00
parent 8886fe71ee
commit 5d08e604d2
@@ -1,7 +1,6 @@
# Conditional forward zones, mirrored from puppet openforwarder view. # Conditional forward zones, from the puppet openforwarder view.
# Upstreams are the puppet anycast servers (unkin 198.18.19.15, consul .14, # Upstreams: unkin authoritative 198.18.19.15, consul 198.18.19.14, k8s 198.18.19.20.
# k8s .20); flip to the in-cluster authoritative/externaldns LBs once zone # (Zones that forwarded to 10.10.16.x were dropped; consul left as-is.)
# data is migrated.
--- ---
apiVersion: bind.unkin.net/v1alpha1 apiVersion: bind.unkin.net/v1alpha1
kind: BindZone kind: BindZone
@@ -33,51 +32,6 @@ spec:
--- ---
apiVersion: bind.unkin.net/v1alpha1 apiVersion: bind.unkin.net/v1alpha1
kind: BindZone kind: BindZone
metadata:
name: fwd-dmz-unkin-net
namespace: bind-internal
spec:
clusterRef: bind-resolvers
viewRef: openforwarder
zoneName: dmz.unkin.net
type: forward
catalog: false
forwarders:
- 10.10.16.32
- 10.10.16.33
---
apiVersion: bind.unkin.net/v1alpha1
kind: BindZone
metadata:
name: fwd-network-unkin-net
namespace: bind-internal
spec:
clusterRef: bind-resolvers
viewRef: openforwarder
zoneName: network.unkin.net
type: forward
catalog: false
forwarders:
- 10.10.16.32
- 10.10.16.33
---
apiVersion: bind.unkin.net/v1alpha1
kind: BindZone
metadata:
name: fwd-prod-unkin-net
namespace: bind-internal
spec:
clusterRef: bind-resolvers
viewRef: openforwarder
zoneName: prod.unkin.net
type: forward
catalog: false
forwarders:
- 10.10.16.32
- 10.10.16.33
---
apiVersion: bind.unkin.net/v1alpha1
kind: BindZone
metadata: metadata:
name: fwd-consul name: fwd-consul
namespace: bind-internal namespace: bind-internal
@@ -327,48 +281,3 @@ spec:
catalog: false catalog: false
forwarders: forwarders:
- 198.18.19.15 - 198.18.19.15
---
apiVersion: bind.unkin.net/v1alpha1
kind: BindZone
metadata:
name: fwd-8-10-10-in-addr-arpa
namespace: bind-internal
spec:
clusterRef: bind-resolvers
viewRef: openforwarder
zoneName: 8.10.10.in-addr.arpa
type: forward
catalog: false
forwarders:
- 10.10.16.32
- 10.10.16.33
---
apiVersion: bind.unkin.net/v1alpha1
kind: BindZone
metadata:
name: fwd-16-10-10-in-addr-arpa
namespace: bind-internal
spec:
clusterRef: bind-resolvers
viewRef: openforwarder
zoneName: 16.10.10.in-addr.arpa
type: forward
catalog: false
forwarders:
- 10.10.16.32
- 10.10.16.33
---
apiVersion: bind.unkin.net/v1alpha1
kind: BindZone
metadata:
name: fwd-20-10-10-in-addr-arpa
namespace: bind-internal
spec:
clusterRef: bind-resolvers
viewRef: openforwarder
zoneName: 20.10.10.in-addr.arpa
type: forward
catalog: false
forwarders:
- 10.10.16.32
- 10.10.16.33