Skip to content

test: Validate internal DNS on the shared Kubernetes environment - #239

Draft
scotwells wants to merge 55 commits into
feat/internal-dns-service-runtimefrom
test/internal-dns-distributed-qualification
Draft

scotwells wants to merge 55 commits into
feat/internal-dns-service-runtimefrom
test/internal-dns-distributed-qualification

Conversation

@scotwells

@scotwells scotwells commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Validate private DNS on the shared Kubernetes end-to-end foundation.

Independent project APIs and distributed controllers publish into one shared CoreDNS serving fleet. Qualification covers overlapping names, public recursion, publisher RBAC, explicit withdrawal, replay protection, and serving during control plane outages. Galactic access and guest resolver delivery remain separate release qualification requirements.

Test plan

  • Local Kubernetes: All 61 checks pass for two tenants, distributed publication, withdrawal, outage recovery, and native dnsdist process continuity.
  • CI: Tests, lint, and generated manifests.
  • CI: Container and runtime packaging.
  • CI: Kubernetes tenant isolation and recovery.

Stacked on #238. Architecture: #229.

@scotwells
scotwells force-pushed the test/internal-dns-distributed-qualification branch from b487553 to a1f5154 Compare October 9, 2026 00:23
scotwells added a commit that referenced this pull request Oct 9, 2026
@scotwells
scotwells force-pushed the test/internal-dns-distributed-qualification branch from a1f5154 to d835960 Compare October 9, 2026 01:33
scotwells added a commit that referenced this pull request Oct 9, 2026
@scotwells
scotwells added this pull request to stack #240 October 9, 2026 02:17
@scotwells scotwells changed the title test: Validate distributed private DNS end to end test: Validate internal DNS on the shared Kubernetes environment Oct 9, 2026
@scotwells
scotwells force-pushed the test/internal-dns-distributed-qualification branch from ed5cb75 to 72b9277 Compare October 12, 2026 17:09
@scotwells
scotwells force-pushed the test/internal-dns-distributed-qualification branch 2 times, most recently from 5881153 to fca9c6a Compare October 12, 2026 21:17
@scotwells
scotwells force-pushed the test/internal-dns-distributed-qualification branch 3 times, most recently from 7da69df to 4b2a716 Compare October 12, 2026 22:07
@scotwells
scotwells force-pushed the test/internal-dns-distributed-qualification branch from 4b2a716 to fb6a544 Compare October 12, 2026 22:16
…ty-pr239

# Conflicts:
#	config/internal-dns/fleet.example.yaml
Include the synchronized parent while preserving this review scope.
Run the pinned upstream daemon in Kubernetes and verify that routing
updates and agent recovery preserve its running container.
Share downloaded modules with the Kubernetes qualification build.
Qualify native dnsdist with the shared member query readiness checks.
Use the serving role definitions in the Kubernetes qualification renderer.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant