8c0b36521e
Merge pull request 'Reject an apex NS DNSRecord instead of silently appending' (#24) from benvin/apex-ns-dnsrecord-reject into main
v0.3.1
benvin2026-09-27 11:23:47 +10:00
afb4fe2631
reject an apex NS DNSRecord instead of appending to the live RRset
unkin-agent2026-09-27 10:58:45 +10:00
057575b9b5
Merge pull request 'Reconcile zone apex NS off the pod IP placeholder' (#22) from benvin/zone-nameservers into main
v0.3.0
benvin2026-09-26 23:48:59 +10:00
cc714dc2b4
apply records before the apex NS, so in-zone glue exists first
unkin-agent2026-09-26 19:41:53 +10:00
08d46ccce0
read the live apex NS with a signed query, retract nothing when unreadable
unkin-agent2026-09-26 19:25:06 +10:00
dc57ac1b2d
retract apex NS from recorded state, not a live query
unkin-agent2026-09-26 19:06:47 +10:00
e4ed6c8052
converge apex NS per record, not by RRset replace
unkin-agent2026-09-26 18:50:55 +10:00
4a41cbc427
reconcile zone apex NS off the pod IP placeholder
unkin-agent2026-09-26 18:27:11 +10:00
03df5d56b4
Merge pull request 'Inspect zone file and journal before seeding a zone' (#20) from benvin/zone-seed-journal-safe into main
v0.2.7
benvin2026-09-19 23:42:03 +10:00
d1dd5040d5
Abort the seed and probe scripts on the first failed command
unkin-agent2026-09-19 23:31:09 +10:00
949662a334
Read quarantine evidence back when planning a seed
unkin-agent2026-09-19 23:14:26 +10:00
6730b8bcb2
Stage and install the seed zone file in one exec
unkin-agent2026-09-19 23:14:26 +10:00
6b5e465093
Restrict zone names to DNS label characters
unkin-agent2026-09-19 22:55:27 +10:00
da679285f0
Route every zone seed through a fail-closed journal check
unkin-agent2026-09-19 22:55:27 +10:00
f1d47c8ff7
Inspect zone file and journal before seeding a zone
unkin-agent2026-09-19 22:33:48 +10:00
8d5a231a78
Merge pull request 'ci: add buildkit_config CA trust for artifactapi push' (#18) from benvin/buildx-ca-config into main
benvin2026-08-15 18:47:21 +10:00
f2b7d07006
ci: add buildkit_config CA trust for artifactapi push
unkin-agent
2026-08-15 18:30:44 +10:00
7e736248e4
Merge pull request 'ci: use CA-baked plugin-docker-buildx image for artifactapi push' (#17) from benvin/buildx-ca-plugin-image into main
benvin2026-08-15 18:20:59 +10:00
698ca8c102
ci: use CA-baked plugin-docker-buildx image for artifactapi push
unkin-agent
2026-08-15 18:03:44 +10:00
3a88fd95a0
Merge pull request 'ci: push images to artifactapi registry instead of gitea' (#16) from benvin/push-artifactapi into main
benvin2026-07-30 20:55:27 +10:00
eb65ad8f89
ci: push images to artifactapi registry instead of gitea
unkinben2026-07-30 00:34:59 +10:00
2894d85c60
Merge pull request 'Make intra-cluster NOTIFY loop-free (TSIG-keyed allow-notify, no pod IPs in restart config)' (#15) from benvin/notify-fix-loopfree into main
v0.2.6
benvin2026-07-25 23:45:45 +10:00
aab11457af
Make intra-cluster NOTIFY loop-free (TSIG-keyed, no pod IPs in restart config)
unkinben2026-07-25 23:22:45 +10:00
671c43b05b
Merge pull request 'Accept intra-cluster NOTIFY on secondaries via allow-notify' (#14) from benvin/allow-notify-intra-cluster into main
v0.2.5
benvin2026-07-25 22:54:17 +10:00
7771711682
Accept intra-cluster NOTIFY on secondaries via allow-notify
unkinben2026-07-25 22:48:35 +10:00
439aa9ea6b
Merge pull request 'Notify secondaries immediately on primary zone changes' (#13) from benvin/notify-secondaries into main
v0.2.4
benvin2026-07-21 00:23:13 +10:00
6a07f91ea1
Notify secondaries immediately on primary zone changes
unkinben2026-07-21 00:08:00 +10:00
e4ed9cfdb2
Merge pull request 'BindTSIGKey: add secretTemplate for Secret labels/annotations' (#12) from benvin/tsigkey-secret-annotations into main
benvin2026-07-20 23:47:21 +10:00
9c81320df8
BindTSIGKey: add secretTemplate for labels/annotations on the managed Secret
unkinben2026-07-20 23:45:41 +10:00
243e776b59
Merge pull request 'Sort render inputs so config is deterministic (stop restart loop)' (#11) from benvin/deterministic-render into main
v0.2.3
benvin2026-07-12 23:09:34 +10:00
59612f157a
Sort render inputs so config is deterministic (stop restart loop)
unkinben2026-07-12 23:03:00 +10:00
8fac152537
Merge pull request 'Roll pods on config change via a pod-template config hash' (#10) from benvin/config-hash-rollout into main
v0.2.2
benvin2026-07-12 22:46:51 +10:00
2deea3e023
Roll pods on config change via a pod-template config hash
unkinben2026-07-12 22:40:02 +10:00
ef8c41cb0f
Merge pull request 'Fix authoritative secondary replication (TSIG transfer + stable primary)' (#9) from benvin/fix-secondary-replication into main
v0.2.1
benvin2026-07-12 21:33:39 +10:00
9ab475532c
Merge pull request 'Add companion TSIG API and BindTSIGAPI CRD' (#8) from benvin/tsig-companion-api into main
v0.2.0
benvin2026-07-12 19:01:34 +10:00
53db084c2d
Add companion TSIG API and BindTSIGAPI CRD
unkinben2026-07-11 12:44:13 +10:00
49df29a072
Merge pull request 'Add a primary (write) Service routing to pod-0' (#7) from benvin/primary-write-service into main
v0.1.5
benvin2026-07-04 22:37:40 +10:00
ea3d71fa93
Merge pull request 'Support externalTrafficPolicy on the client Service' (#6) from benvin/svc-external-traffic-policy into main
benvin2026-07-04 22:37:03 +10:00
28ae6538cb
Add a primary (write) Service routing to pod-0
unkinben2026-07-04 22:29:55 +10:00
e0bd3973ed
Support externalTrafficPolicy on the client Service
unkinben2026-07-04 22:15:22 +10:00
547d168c12
Merge pull request 'Render forward zones into named.conf on every pod' (#5) from benvin/forward-zones-config into main
v0.1.4
benvin2026-07-04 21:16:03 +10:00
9bc4436c79
Render forward zones into named.conf on every pod
unkinben2026-07-04 11:55:03 +10:00
f0e851c0bc
Merge pull request 'Add clusterRef to BindTSIGKey' (#4) from benvin/tsigkey-clusterref into main
v0.1.3
benvin2026-07-04 00:03:42 +10:00
55e80b467c
Add clusterRef to BindTSIGKey
unkinben2026-07-03 23:44:35 +10:00
cd25c94efc
Merge pull request 'Fix zone provisioning: seed glue + IP primaries' (#3) from benvin/fix-zone-seed into main
v0.1.2
benvin2026-07-03 21:39:45 +10:00
fb103a9e95
Fix zone provisioning: seed glue + IP primaries
unkinben2026-07-03 21:33:31 +10:00
bba8c6302f
Merge pull request 'Bundle CRDs into a single install manifest' (#2) from benvin/crd-install-bundle into main
v0.1.1
benvin2026-07-03 19:36:31 +10:00
947b45d09f
Bundle CRDs into a single install manifest
unkinben2026-07-03 18:54:54 +10:00
53bf0859e6
Merge pull request 'Initial bind-operator: 9 CRDs + controllers' (#1) from benvin/initial-operator into main
v0.1.0
benvin2026-07-03 18:42:26 +10:00
e60080efa2
Drop redundant dynamic cluster mode
unkinben2026-07-03 18:32:09 +10:00