unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

Declare the acme.unkin.net nameservers #495

Merged
benvin merged 2 commits from benvin/acme-zone-nameservers into main 2026-09-27 00:10:14 +10:00
Conversation 0 Commits 2 Files Changed 3
+13 -2
unkin-agent commented 2026-09-27 00:01:19 +10:00
Member
Copy Link
Copy Source

The zone was seeded with an apex NS ns1.acme.unkin.net glued to the primary pod IP. Both were later corrected by hand, so the live RRset and the ns1 address exist only in the zone journal -- a reseed republishes the pod IP and breaks DNS-01 for every *.unkin.net cert. Declaring them makes git the source of truth.

  • declare the two published apex NS names
  • declare the in-zone ns1 address, which a seed would otherwise glue to the pod IP

Matches what the zone serves today, so applying it changes no records. Requires bind-operator v0.3.0.

The zone was seeded with an apex `NS ns1.acme.unkin.net` glued to the primary pod IP. Both were later corrected by hand, so the live RRset and the ns1 address exist only in the zone journal -- a reseed republishes the pod IP and breaks DNS-01 for every `*.unkin.net` cert. Declaring them makes git the source of truth. - declare the two published apex NS names - declare the in-zone ns1 address, which a seed would otherwise glue to the pod IP Matches what the zone serves today, so applying it changes no records. Requires bind-operator v0.3.0.
benvin changed target branch from benvin/bind-operator-v0.3.0 to main 2026-09-27 00:06:25 +10:00
benvin added 2 commits 2026-09-27 00:06:25 +10:00
roll bind-operator to v0.3.0
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
b8a51baac0 
The apex NS convergence needs the CRD that carries spec.nameservers.
declare the acme.unkin.net nameservers
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
a440634192 
The live apex NS and ns1 glue were corrected by hand and exist only in the zone
journal; a reseed would republish the primary pod IP.
benvin merged commit 148dac8ca2 into main 2026-09-27 00:10:14 +10:00
benvin deleted branch benvin/acme-zone-nameservers 2026-09-27 00:10:14 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#495
Delete Branch "benvin/acme-zone-nameservers"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?