Reject an apex NS DNSRecord instead of silently appending #24

Merged

benvin merged 1 commits from benvin/apex-ns-dnsrecord-reject into main

2026-09-27 11:23:47 +10:00

Author	SHA1	Message	Date
unkin-agent	afb4fe2631	reject an apex NS DNSRecord instead of appending to the live RRset ci/woodpecker/pr/pre-commit Pipeline was successful Details ci/woodpecker/pr/build Pipeline was successful Details ci/woodpecker/pr/test Pipeline was successful Details BIND ignores an RRset-wide delete at a zone apex, so a DNSRecord for the apex NS can only add to what the zone was seeded with while reporting success. BindZone.spec.nameservers converges it per rdata.	2026-09-27 10:58:45 +10:00