Render forward zones into named.conf on every pod #5

2026-07-04T11:55:38+10:00

unkinben commented

2026-07-04 11:55:38 +10:00

A resolver's conditional-forward zones must be on all pods (config, not replicated data). They were rndc addzone'd on the primary only, so queries load-balanced to a secondary missed the forwarding — internal names wouldn't resolve.

Changes

render type:forward BindZones into named.conf, inside their viewRef view (or top-level when no views)
BindCluster lists forward zones + watches BindZone to re-render/reconfig
BindZone controller skips forward zones (config-managed; no seed/addzone/finalizer)
unit test

No CRD change. Merge + tag v0.1.4; then bump the operator image. Enables the puppet-style resolver (view openforwarder + conditional forward zones).

A resolver's conditional-forward zones must be on **all** pods (config, not replicated data). They were `rndc addzone`'d on the primary only, so queries load-balanced to a secondary missed the forwarding — internal names wouldn't resolve. ## Changes - render `type:forward` BindZones into named.conf, inside their `viewRef` view (or top-level when no views) - BindCluster lists forward zones + watches BindZone to re-render/reconfig - BindZone controller skips forward zones (config-managed; no seed/addzone/finalizer) - unit test No CRD change. **Merge + tag v0.1.4**; then bump the operator image. Enables the puppet-style resolver (view openforwarder + conditional forward zones).

unkinben added 1 commit 2026-07-04 11:55:39 +10:00

Render forward zones into named.conf on every pod

ci/woodpecker/pr/build Pipeline was successful

Details

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/test Pipeline was successful

Details

9bc4436c79

type:forward zones are pure configuration (conditional forwarding), not
replicated data, so a resolver needs them on all pods. They were being
rndc-addzone'd on the primary only, so queries hitting a secondary pod
missed the forwarding. Render them into named.conf instead.

- render forward zones inside their view (or top-level when no views)
- BindCluster lists type:forward zones and watches BindZone to re-render
- BindZone controller skips forward zones (config-managed, no addzone)
- unit test for forward-zone-in-view rendering

benvin merged commit 547d168c12 into main

2026-07-04 21:16:03 +10:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/bind-operator#5