Repository navigation
Conversation
scotwells
force-pushed
the
feat/internal-dns-service-runtime
branch
from
October 9, 2026 00:14
7a144f0 to
198d760
Compare
scotwells
force-pushed
the
feat/internal-dns-service-runtime
branch
from
October 9, 2026 00:17
198d760 to
a02b5a3
Compare
1 of 4 tasks
scotwells
force-pushed
the
feat/internal-dns-service-runtime
branch
from
October 9, 2026 00:23
a02b5a3 to
54e93b3
Compare
scotwells
force-pushed
the
feat/internal-dns-service-runtime
branch
from
October 9, 2026 01:33
54e93b3 to
142105d
Compare
scotwells
added this pull request to stack #240
October 9, 2026 02:17
scotwells
force-pushed
the
feat/internal-dns-service-runtime
branch
2 times, most recently
from
October 12, 2026 17:21
a483c5f to
8eaf237
Compare
scotwells
force-pushed
the
feat/internal-dns-service-runtime
branch
from
October 12, 2026 21:17
8eaf237 to
68930fe
Compare
scotwells
force-pushed
the
feat/internal-dns-service-runtime
branch
from
October 12, 2026 21:40
68930fe to
bcd53c3
Compare
scotwells
force-pushed
the
feat/internal-dns-service-runtime
branch
from
October 12, 2026 22:07
41637cf to
2e865f1
Compare
scotwells
force-pushed
the
feat/internal-dns-service-runtime
branch
from
October 12, 2026 22:16
2e865f1 to
d3c8d4f
Compare
Install jq for fleet readiness checks and verify that the serving image contains the required commands and executable helpers. Run these checks as the serving user during both architecture image builds.
Discover ready Milo projects and reconcile every source namespace without restarting the DNS service. Keep active sources during discovery outages and resolve admission requests against live project identity. Route serving artifacts by resource type and scope access withdrawal to its source namespace so shared namespace names stay isolated.
Include the synchronized parent while preserving this review scope.
Apply validated routing snapshots through the authenticated loopback console. Keep accepted routing available across configuration agent restarts and let Kubernetes manage the upstream dnsdist container.
Use the supported client startup predicate in the shared configuration.
Verify the control response before accepting routing updates and reuse module downloads in the runtime build.
Verify the configured listener through the member readiness check.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Run shared private DNS as deployable services for project workloads.
Product services publish records through project APIs, while network services provides resolver access. Kubernetes runs the upstream dnsdist image directly, and the agent applies validated routing updates without restarting it.
Accepted DNS remains available through agent and control plane outages.
Test plan
Stacked on #237. Architecture: #229.