The cobbler master exports cobbler.main.unkin.net as a CNAME whose value
is the bare hostname. BIND's legacy zone-file load completes that against
$ORIGIN, but dns-updater renders RFC2136 updates with no $ORIGIN, so the
bare label becomes root-absolute (ausyd1nxvm2098.) and dead-ends in
NXDOMAIN on the k8s authoritative/resolvers. Qualify the target so both
publish paths resolve identically.
unkinben