reconcile zone apex NS off the pod IP placeholder

Add BindZone.spec.nameservers and sync the apex NS RRset on every reconcile.
2026-09-26 18:27:11 +10:00
parent 03df5d56b4
commit 4a41cbc427
14 changed files with 346 additions and 39 deletions
@@ -71,10 +71,11 @@ spec:
    - key transfer-key
  updateKeyRef: transfer-key
  dynamicUpdate: true
+  # Published apex NS, kept in sync on every reconcile. Full names only; an
+  # in-zone name (as here) needs its address record below.
+  nameservers:
+    - ns1.internal.example.com.
  records:
-    - name: "@"
-      type: NS
-      values: ["ns1.internal.example.com."]
    - name: ns1
      type: A
      values: ["10.0.0.53"]