unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Enable PTR synthesis in external-dns (#292)

Browse Source 
Post-cutover verification (argocd-apps#288) found the reverse zone 200.18.198.in-addr.arpa empty: external-dns only writes PTRs when --rfc2136-create-ptr is set, and nothing else feeds that zone. Reverse resolution for the k8s LB range was already absent for clients pre-migration (no forwarder existed), so this completes the reverse path rather than fixing a regression.

- Adds --rfc2136-create-ptr to the external-dns rfc2136 args

Verification after merge: dig -x 198.18.200.2 @198.18.200.7 returns puppetca.k8s.syd1.au.unkin.net (allow a reconcile cycle + negative-cache expiry).

Reviewed-on: #292
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
This commit was merged in pull request #292.
This commit is contained in:
Ben Vincent
2026-07-26 00:05:54 +10:00
committed by BenVincent
parent aff06a633a
commit eff97b8d03
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/overlays/au-syd1/externaldns/values.yaml
+4
View File
@@ -48,6 +48,10 @@ extraArgs:
- --rfc2136-port=53
- --rfc2136-zone=k8s.syd1.au.unkin.net
- --rfc2136-zone=200.18.198.in-addr.arpa
# Synthesize PTR records into the reverse zone for every A record managed in
# the forward zone (the reverse zone + resolver forwarder exist since #288;
# without this flag nothing writes PTRs).
- --rfc2136-create-ptr
- --rfc2136-tsig-keyname=externaldns-key
- --rfc2136-tsig-secret-alg=$(EXTERNAL_DNS_RFC2136_TSIG_ALGORITHM)
- --rfc2136-tsig-axfr