argocd-apps

T

unkinben 0c1156282f bind-internal: allow localhost to query the authoritative cluster (#267 )

## Why

Every bind-operator dynamic update is refused (`update ... denied due to allow-query`) because the operator execs `nsupdate` against `127.0.0.1` inside the primary pod, and the BindCluster `allow-query` listed only the client subnets (`auth-acl-main`) and the pod net (`10.42.0.0/16`) — not loopback. This blocked ALL DNSRecords (identity, s3, dashboard, lb1) from ever applying.

## Change

- Add `localhost` to the BindCluster `allow-query` in `apps/base/bind-internal/authoritative/cluster.yaml`. The `client-update` TSIG key still gates the actual update.

---------

Co-authored-by: benvin <neotheo@gmail.com>
Reviewed-on: #267
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>

2026-07-19 00:10:56 +10:00

.claude/commands

chore: bump almalinux9 image tags (#188 )

2026-06-07 00:35:12 +10:00

.woodpecker

chore: bump almalinux9 image tags (#188 )

2026-06-07 00:35:12 +10:00

apps

bind-internal: allow localhost to query the authoritative cluster (#267 )

2026-07-19 00:10:56 +10:00

argocd

Deploy cephrgw-operator to cephrgw-system (#261 )