From 8886fe71eebe50dec7cc0a1bd69d38de1d2b33ce Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sat, 4 Jul 2026 11:59:37 +1000 Subject: [PATCH 1/4] Configure resolvers like puppet (openforwarder view + forward zones) Fixes recursion being refused for external clients: the resolver had no allow-recursion, so BIND defaulted to localnets. Mirrors the puppet resolver config exactly. - add openforwarder BindView: match-clients = internal ACLs, recursion yes, allow-recursion/allow-query any (match-clients gates access) - add 4 BindACLs (acl-main.unkin.net / acl-dmz / acl-common / acl-nomad-jobs) from puppet acls.conf - add 26 conditional forward zones (unkin/consul/k8s/dmz upstreams), bound to the openforwarder view; needs operator v0.1.4 to render them on every pod - global forwarders 8.8.8.8/1.1.1.1 (puppet default) - bump operator image to v0.1.4 --- apps/base/bind-internal/resolvers/acls.yaml | 65 +++ .../base/bind-internal/resolvers/cluster.yaml | 2 +- .../resolvers/forward-zones.yaml | 374 ++++++++++++++++++ .../resolvers/kustomization.yaml | 3 + apps/base/bind-internal/resolvers/view.yaml | 23 ++ apps/base/bind-system/deployment.yaml | 2 +- 6 files changed, 467 insertions(+), 2 deletions(-) create mode 100644 apps/base/bind-internal/resolvers/acls.yaml create mode 100644 apps/base/bind-internal/resolvers/forward-zones.yaml create mode 100644 apps/base/bind-internal/resolvers/view.yaml diff --git a/apps/base/bind-internal/resolvers/acls.yaml b/apps/base/bind-internal/resolvers/acls.yaml new file mode 100644 index 0000000..66b8ad5 --- /dev/null +++ b/apps/base/bind-internal/resolvers/acls.yaml @@ -0,0 +1,65 @@ +# Internal client ACLs, mirrored from puppet /etc/named/acls.conf. +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindACL +metadata: + name: acl-main.unkin.net + namespace: bind-internal +spec: + clusterRef: bind-resolvers + entries: + - 198.18.1.10/32 + - 198.18.2.160/27 + - 198.18.21.160/27 + - 198.18.2.192/27 + - 198.18.21.192/27 + - 198.18.13.0/24 + - 198.18.14.0/24 + - 198.18.15.0/24 + - 198.18.16.0/24 + - 198.18.17.0/24 + - 198.18.18.0/24 + - 198.18.19.0/24 + - 198.18.20.0/24 + - 198.18.21.0/24 + - 198.18.22.0/24 + - 198.18.23.0/24 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindACL +metadata: + name: acl-dmz + namespace: bind-internal +spec: + clusterRef: bind-resolvers + entries: + - 198.18.24.0/24 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindACL +metadata: + name: acl-common + namespace: bind-internal +spec: + clusterRef: bind-resolvers + entries: + - 198.18.25.0/24 + - 198.18.26.0/24 + - 198.18.27.0/24 + - 198.18.28.0/24 + - 198.18.29.0/24 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindACL +metadata: + name: acl-nomad-jobs + namespace: bind-internal +spec: + clusterRef: bind-resolvers + entries: + - 198.18.64.0/24 + - 198.18.65.0/24 + - 198.18.66.0/24 + - 198.18.67.0/24 + - 198.18.68.0/24 + - 198.18.69.0/24 diff --git a/apps/base/bind-internal/resolvers/cluster.yaml b/apps/base/bind-internal/resolvers/cluster.yaml index 83f9035..f99b8b9 100644 --- a/apps/base/bind-internal/resolvers/cluster.yaml +++ b/apps/base/bind-internal/resolvers/cluster.yaml @@ -18,8 +18,8 @@ spec: purelb.io/addresses: 198.18.200.7 external-dns.alpha.kubernetes.io/hostname: bind-resolvers.k8s.syd1.au.unkin.net forwarders: + - 8.8.8.8 - 1.1.1.1 - - 9.9.9.9 resources: requests: cpu: 100m diff --git a/apps/base/bind-internal/resolvers/forward-zones.yaml b/apps/base/bind-internal/resolvers/forward-zones.yaml new file mode 100644 index 0000000..ac2a37b --- /dev/null +++ b/apps/base/bind-internal/resolvers/forward-zones.yaml @@ -0,0 +1,374 @@ +# Conditional forward zones, mirrored from puppet openforwarder view. +# Upstreams are the puppet anycast servers (unkin 198.18.19.15, consul .14, +# k8s .20); flip to the in-cluster authoritative/externaldns LBs once zone +# data is migrated. +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-unkin-net + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: unkin.net + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-main-unkin-net + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: main.unkin.net + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-dmz-unkin-net + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: dmz.unkin.net + type: forward + catalog: false + forwarders: + - 10.10.16.32 + - 10.10.16.33 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-network-unkin-net + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: network.unkin.net + type: forward + catalog: false + forwarders: + - 10.10.16.32 + - 10.10.16.33 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-prod-unkin-net + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: prod.unkin.net + type: forward + catalog: false + forwarders: + - 10.10.16.32 + - 10.10.16.33 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-consul + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: consul + type: forward + catalog: false + forwarders: + - 198.18.19.14 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-k8s-syd1-au-unkin-net + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: k8s.syd1.au.unkin.net + type: forward + catalog: false + forwarders: + - 198.18.19.20 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-13-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 13.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-14-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 14.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-15-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 15.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-16-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 16.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-17-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 17.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-19-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 19.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-20-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 20.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-21-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 21.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-22-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 22.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-23-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 23.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-24-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 24.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-25-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 25.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-26-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 26.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-27-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 27.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-28-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 28.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-29-18-198-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 29.18.198.in-addr.arpa + type: forward + catalog: false + forwarders: + - 198.18.19.15 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-8-10-10-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 8.10.10.in-addr.arpa + type: forward + catalog: false + forwarders: + - 10.10.16.32 + - 10.10.16.33 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-16-10-10-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 16.10.10.in-addr.arpa + type: forward + catalog: false + forwarders: + - 10.10.16.32 + - 10.10.16.33 +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: fwd-20-10-10-in-addr-arpa + namespace: bind-internal +spec: + clusterRef: bind-resolvers + viewRef: openforwarder + zoneName: 20.10.10.in-addr.arpa + type: forward + catalog: false + forwarders: + - 10.10.16.32 + - 10.10.16.33 diff --git a/apps/base/bind-internal/resolvers/kustomization.yaml b/apps/base/bind-internal/resolvers/kustomization.yaml index da7cf1f..51fc92e 100644 --- a/apps/base/bind-internal/resolvers/kustomization.yaml +++ b/apps/base/bind-internal/resolvers/kustomization.yaml @@ -4,3 +4,6 @@ kind: Kustomization resources: - cluster.yaml + - acls.yaml + - view.yaml + - forward-zones.yaml diff --git a/apps/base/bind-internal/resolvers/view.yaml b/apps/base/bind-internal/resolvers/view.yaml new file mode 100644 index 0000000..d0c2a60 --- /dev/null +++ b/apps/base/bind-internal/resolvers/view.yaml @@ -0,0 +1,23 @@ +--- +# openforwarder view, mirrored from puppet /etc/named/views.conf. +# match-clients gates access to internal networks; recursion/query are 'any' +# within the view since match-clients already restricts who reaches it. +apiVersion: bind.unkin.net/v1alpha1 +kind: BindView +metadata: + name: openforwarder + namespace: bind-internal +spec: + clusterRef: bind-resolvers + order: 100 + matchClients: + - acl-main.unkin.net + - acl-nomad-jobs + - acl-common + - acl-dmz + recursion: true + allowQuery: + - any + extraOptions: + - "allow-recursion { any; }" + - "allow-query-cache { any; }" diff --git a/apps/base/bind-system/deployment.yaml b/apps/base/bind-system/deployment.yaml index e8e5d41..c090504 100644 --- a/apps/base/bind-system/deployment.yaml +++ b/apps/base/bind-system/deployment.yaml @@ -21,7 +21,7 @@ spec: runAsNonRoot: true containers: - name: operator - image: git.unkin.net/unkin/bind-operator:v0.1.3 + image: git.unkin.net/unkin/bind-operator:v0.1.4 args: - --metrics-bind-address=:8080 - --health-probe-bind-address=:8081 -- 2.47.3 From 5d08e604d2f89ab37c3b79fa8ab6c3d27229f4ce Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sat, 4 Jul 2026 21:25:07 +1000 Subject: [PATCH 2/4] Trim resolver forward zones to internal upstreams Drops the six forward zones that pointed at the 10.10.16.x upstreams (dmz/network/prod.unkin.net + 8/16/20.10.10.in-addr.arpa); 198.18.19.15 is the authoritative for the remaining unkin zones. Consul left as-is. --- .../resolvers/forward-zones.yaml | 97 +------------------ 1 file changed, 3 insertions(+), 94 deletions(-) diff --git a/apps/base/bind-internal/resolvers/forward-zones.yaml b/apps/base/bind-internal/resolvers/forward-zones.yaml index ac2a37b..6c23c1b 100644 --- a/apps/base/bind-internal/resolvers/forward-zones.yaml +++ b/apps/base/bind-internal/resolvers/forward-zones.yaml @@ -1,7 +1,6 @@ -# Conditional forward zones, mirrored from puppet openforwarder view. -# Upstreams are the puppet anycast servers (unkin 198.18.19.15, consul .14, -# k8s .20); flip to the in-cluster authoritative/externaldns LBs once zone -# data is migrated. +# Conditional forward zones, from the puppet openforwarder view. +# Upstreams: unkin authoritative 198.18.19.15, consul 198.18.19.14, k8s 198.18.19.20. +# (Zones that forwarded to 10.10.16.x were dropped; consul left as-is.) --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -33,51 +32,6 @@ spec: --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone -metadata: - name: fwd-dmz-unkin-net - namespace: bind-internal -spec: - clusterRef: bind-resolvers - viewRef: openforwarder - zoneName: dmz.unkin.net - type: forward - catalog: false - forwarders: - - 10.10.16.32 - - 10.10.16.33 ---- -apiVersion: bind.unkin.net/v1alpha1 -kind: BindZone -metadata: - name: fwd-network-unkin-net - namespace: bind-internal -spec: - clusterRef: bind-resolvers - viewRef: openforwarder - zoneName: network.unkin.net - type: forward - catalog: false - forwarders: - - 10.10.16.32 - - 10.10.16.33 ---- -apiVersion: bind.unkin.net/v1alpha1 -kind: BindZone -metadata: - name: fwd-prod-unkin-net - namespace: bind-internal -spec: - clusterRef: bind-resolvers - viewRef: openforwarder - zoneName: prod.unkin.net - type: forward - catalog: false - forwarders: - - 10.10.16.32 - - 10.10.16.33 ---- -apiVersion: bind.unkin.net/v1alpha1 -kind: BindZone metadata: name: fwd-consul namespace: bind-internal @@ -327,48 +281,3 @@ spec: catalog: false forwarders: - 198.18.19.15 ---- -apiVersion: bind.unkin.net/v1alpha1 -kind: BindZone -metadata: - name: fwd-8-10-10-in-addr-arpa - namespace: bind-internal -spec: - clusterRef: bind-resolvers - viewRef: openforwarder - zoneName: 8.10.10.in-addr.arpa - type: forward - catalog: false - forwarders: - - 10.10.16.32 - - 10.10.16.33 ---- -apiVersion: bind.unkin.net/v1alpha1 -kind: BindZone -metadata: - name: fwd-16-10-10-in-addr-arpa - namespace: bind-internal -spec: - clusterRef: bind-resolvers - viewRef: openforwarder - zoneName: 16.10.10.in-addr.arpa - type: forward - catalog: false - forwarders: - - 10.10.16.32 - - 10.10.16.33 ---- -apiVersion: bind.unkin.net/v1alpha1 -kind: BindZone -metadata: - name: fwd-20-10-10-in-addr-arpa - namespace: bind-internal -spec: - clusterRef: bind-resolvers - viewRef: openforwarder - zoneName: 20.10.10.in-addr.arpa - type: forward - catalog: false - forwarders: - - 10.10.16.32 - - 10.10.16.33 -- 2.47.3 From ee7e6c87e309f492035381e05bbe7632c342b754 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sat, 4 Jul 2026 21:51:03 +1000 Subject: [PATCH 3/4] Forward k8s.syd1.au.unkin.net to the in-cluster externaldns service Points the resolver's k8s zone at the bind-externaldns LoadBalancer 198.18.200.8 instead of the puppet k8s anycast 198.18.19.20. --- apps/base/bind-internal/resolvers/forward-zones.yaml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/apps/base/bind-internal/resolvers/forward-zones.yaml b/apps/base/bind-internal/resolvers/forward-zones.yaml index 6c23c1b..3572960 100644 --- a/apps/base/bind-internal/resolvers/forward-zones.yaml +++ b/apps/base/bind-internal/resolvers/forward-zones.yaml @@ -1,5 +1,6 @@ # Conditional forward zones, from the puppet openforwarder view. -# Upstreams: unkin authoritative 198.18.19.15, consul 198.18.19.14, k8s 198.18.19.20. +# Upstreams: unkin authoritative 198.18.19.15, consul 198.18.19.14, k8s 198.18.200.8. +# k8s -> in-cluster bind-externaldns 198.18.200.8. # (Zones that forwarded to 10.10.16.x were dropped; consul left as-is.) --- apiVersion: bind.unkin.net/v1alpha1 @@ -56,7 +57,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.20 + - 198.18.200.8 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone -- 2.47.3 From 6e657d76e4af4540a20e0a3478b52a8445f130f3 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sat, 4 Jul 2026 21:52:09 +1000 Subject: [PATCH 4/4] Forward unkin zones to the in-cluster authoritative service Points unkin.net / main.unkin.net / 13-29.18.198.in-addr.arpa at the bind-authoritative LoadBalancer 198.18.200.6 instead of the puppet anycast 198.18.19.15. Consul left on 198.18.19.14. --- .../resolvers/forward-zones.yaml | 38 +++++++++---------- 1 file changed, 19 insertions(+), 19 deletions(-) diff --git a/apps/base/bind-internal/resolvers/forward-zones.yaml b/apps/base/bind-internal/resolvers/forward-zones.yaml index 3572960..c4c8e82 100644 --- a/apps/base/bind-internal/resolvers/forward-zones.yaml +++ b/apps/base/bind-internal/resolvers/forward-zones.yaml @@ -1,5 +1,5 @@ # Conditional forward zones, from the puppet openforwarder view. -# Upstreams: unkin authoritative 198.18.19.15, consul 198.18.19.14, k8s 198.18.200.8. +# Upstreams: unkin authoritative 198.18.200.6, consul 198.18.19.14, k8s 198.18.200.8. # k8s -> in-cluster bind-externaldns 198.18.200.8. # (Zones that forwarded to 10.10.16.x were dropped; consul left as-is.) --- @@ -15,7 +15,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -29,7 +29,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -71,7 +71,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -85,7 +85,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -99,7 +99,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -113,7 +113,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -127,7 +127,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -141,7 +141,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -155,7 +155,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -169,7 +169,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -183,7 +183,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -197,7 +197,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -211,7 +211,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -225,7 +225,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -239,7 +239,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -253,7 +253,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -267,7 +267,7 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 --- apiVersion: bind.unkin.net/v1alpha1 kind: BindZone @@ -281,4 +281,4 @@ spec: type: forward catalog: false forwarders: - - 198.18.19.15 + - 198.18.200.6 -- 2.47.3