70e5b0ed55
- symlink named.conf to the projected file so kubelet updates reach named - drop the config hash from the pod template; hash only the entrypoint - reconfig each pod once its mounted config matches, tracked in status - surface reconfig failures with checkconf detail on ConfigApplied