retract apex NS from recorded state, not a live query

An unsigned localhost query silently returns nothing for a zone behind a BindView, which would strand the placeholder. Record what was published instead.
2026-09-26 19:06:47 +10:00
parent e4ed6c8052
commit dc57ac1b2d
9 changed files with 134 additions and 76 deletions
@@ -243,6 +243,13 @@ spec:
                x-kubernetes-list-map-keys:
                - type
                x-kubernetes-list-type: map
+              nameservers:
+                description: |-
+                  Nameservers records the apex NS names the operator last published, so a
+                  change to spec.nameservers knows which entries to retract.
+                items:
+                  type: string
+                type: array
              observedGeneration:
                format: int64
                type: integer
@@ -2909,6 +2909,13 @@ spec:
                x-kubernetes-list-map-keys:
                - type
                x-kubernetes-list-type: map
+              nameservers:
+                description: |-
+                  Nameservers records the apex NS names the operator last published, so a
+                  change to spec.nameservers knows which entries to retract.
+                items:
+                  type: string
+                type: array
              observedGeneration:
                format: int64
                type: integer