From a5d223fefe4f4b3b908602a20603df20e9a493ba Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sun, 20 Sep 2026 00:07:15 +1000 Subject: [PATCH] Roll bind-operator to v0.2.7 (journal-aware zone seeding) Deploy bind-operator v0.2.7. The operator seeded a fresh skeleton zone file at serial 1 over zones whose BIND journal was still on disk at a higher serial; BIND rejected the inconsistent pair (`addzone failed: out of range`) and, with a PVC per replica, the stale journal outlived restarts while every reconcile rewrote the skeleton, so it never converged. That SERVFAILed roughly 1 in 3 authoritative answers for k8s.syd1.au.unkin.net and resolvers cached the failures. - Bumps the operator image to v0.2.7 - Bumps the CRD install pin to the v0.2.7 tag, which changes the CRDs Expect one rolling restart of the operator Deployment as the new image lands. --- apps/base/bind-system/deployment.yaml | 2 +- apps/base/bind-system/kustomization.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/base/bind-system/deployment.yaml b/apps/base/bind-system/deployment.yaml index abe8f61..744c590 100644 --- a/apps/base/bind-system/deployment.yaml +++ b/apps/base/bind-system/deployment.yaml @@ -21,7 +21,7 @@ spec: runAsNonRoot: true containers: - name: operator - image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/bind-operator:v0.2.6 + image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/bind-operator:v0.2.7 args: - --metrics-bind-address=:8080 - --health-probe-bind-address=:8081 diff --git a/apps/base/bind-system/kustomization.yaml b/apps/base/bind-system/kustomization.yaml index 3562333..80509cb 100644 --- a/apps/base/bind-system/kustomization.yaml +++ b/apps/base/bind-system/kustomization.yaml @@ -6,7 +6,7 @@ resources: - namespace.yaml # CRDs are pulled from the bind-operator repo at the matching tag rather than # vendored here, so they never drift from the operator. - - https://git.unkin.net/unkin/bind-operator/raw/tag/v0.2.6/config/crd/install.yaml + - https://git.unkin.net/unkin/bind-operator/raw/tag/v0.2.7/config/crd/install.yaml - rbac.yaml - agent-dns-rbac.yaml - deployment.yaml -- 2.47.3