unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Finish the DNS migration off the Puppet zone to in-cluster bind #324

New Issue
Open
opened 2026-08-02 16:24:31 +10:00 by unkinben · 0 comments
unkinben commented 2026-08-02 16:24:31 +10:00
Owner
Copy Link
Copy Source

Problem
PR #287 repointed external-dns writes to the in-cluster bind but reads stayed on the frozen legacy VM authoritative (fixed live by the router upstream change to 198.18.200.7). The migration is incomplete: the legacy VM zone copy is stranded, and some resolvers return a bogus SOA localhost for k8s.syd1.au.unkin.net.

Proposal

  • complete the cutover: make the in-cluster bind-operator authoritative for k8s.syd1.au.unkin.net (+ reverse) and the unkin.net apex records, retire/freeze the legacy VM zone copy
  • fix the bogus SOA localhost stub shadowing the zone on the estate resolvers
  • re-apply #287 (external-dns write target) once reads are fully cut over

Acceptance

  • one authoritative source for the zone (in-cluster bind); no stranded VM copy; SOA correct; new records resolve estate-wide.
**Problem** PR #287 repointed external-dns writes to the in-cluster bind but reads stayed on the frozen legacy VM authoritative (fixed live by the router upstream change to 198.18.200.7). The migration is incomplete: the legacy VM zone copy is stranded, and some resolvers return a bogus `SOA localhost` for k8s.syd1.au.unkin.net. **Proposal** - complete the cutover: make the in-cluster bind-operator authoritative for k8s.syd1.au.unkin.net (+ reverse) and the unkin.net apex records, retire/freeze the legacy VM zone copy - fix the bogus SOA localhost stub shadowing the zone on the estate resolvers - re-apply #287 (external-dns write target) once reads are fully cut over **Acceptance** - one authoritative source for the zone (in-cluster bind); no stranded VM copy; SOA correct; new records resolve estate-wide.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#324
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?