unkin/puppet-prod
3
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Fix cobbler.main.unkin.net CNAME to resolve on k8s DNS #491

Merged
benvin merged 1 commits from benvin/cobbler-cname-fqdn into develop 2026-07-20 23:17:12 +10:00
Conversation 0 Commits 1 Files Changed 1
+4 -1
unkinben commented 2026-07-20 23:13:30 +10:00
Owner
Copy Link
Copy Source

The cobbler master exports cobbler.main.unkin.net as a CNAME whose value is the bare hostname (ausyd1nxvm2098). The legacy puppet DNS master loaded this into a zone file under $ORIGIN main.unkin.net., so BIND completed the bare label to ausyd1nxvm2098.main.unkin.net. and it resolved. dns-updater renders RFC2136 updates with no $ORIGIN, so the same bare label becomes root-absolute (ausyd1nxvm2098.) and dead-ends in NXDOMAIN — the record exists on the k8s authoritative servers (and via the resolvers at 198.18.200.7) but has no reachable address. This is the same failure already documented and fixed for haproxy in profiles::haproxy::dns.

Changes:

  • Set the cobbler CNAME value to the fully-qualified ${facts.networking.fqdn}. (trailing dot) so the target is origin-independent and resolves identically on both the legacy zone-file export and the dns-updater nsupdate path.
  • Add an explanatory comment mirroring the one in profiles::haproxy::dns to prevent reintroducing a bare label.
The cobbler master exports `cobbler.main.unkin.net` as a CNAME whose value is the bare hostname (`ausyd1nxvm2098`). The legacy puppet DNS master loaded this into a zone file under `$ORIGIN main.unkin.net.`, so BIND completed the bare label to `ausyd1nxvm2098.main.unkin.net.` and it resolved. `dns-updater` renders RFC2136 updates with no `$ORIGIN`, so the same bare label becomes root-absolute (`ausyd1nxvm2098.`) and dead-ends in NXDOMAIN — the record exists on the k8s authoritative servers (and via the resolvers at 198.18.200.7) but has no reachable address. This is the same failure already documented and fixed for haproxy in `profiles::haproxy::dns`. Changes: - Set the cobbler CNAME `value` to the fully-qualified `${facts.networking.fqdn}.` (trailing dot) so the target is origin-independent and resolves identically on both the legacy zone-file export and the dns-updater nsupdate path. - Add an explanatory comment mirroring the one in `profiles::haproxy::dns` to prevent reintroducing a bare label.
unkinben added 1 commit 2026-07-20 23:13:30 +10:00
Fix cobbler CNAME target to be fully-qualified b4d70d6008 
The cobbler master exports cobbler.main.unkin.net as a CNAME whose value
is the bare hostname. BIND's legacy zone-file load completes that against
$ORIGIN, but dns-updater renders RFC2136 updates with no $ORIGIN, so the
bare label becomes root-absolute (ausyd1nxvm2098.) and dead-ends in
NXDOMAIN on the k8s authoritative/resolvers. Qualify the target so both
publish paths resolve identically.
benvin merged commit 206a4521e5 into develop 2026-07-20 23:17:12 +10:00
benvin deleted branch benvin/cobbler-cname-fqdn 2026-07-20 23:17:12 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/puppet-prod#491
Delete Branch "benvin/cobbler-cname-fqdn"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?