Skip to content

Configure private DNS using resource names and registration labels - #244

Draft
scotwells wants to merge 50 commits into
fix/internal-dns-default-domainfrom
fix/internal-dns-name-references
Draft

scotwells wants to merge 50 commits into
fix/internal-dns-default-domainfrom
fix/internal-dns-name-references

Conversation

@scotwells

@scotwells scotwells commented Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Configure private zones, registrations, and naming policies using resource names. Naming rules select registration labels from any authorized publisher. DNS stores ownership identities in private service records and exposes name-only references in customer status. API-server coverage verifies reference validation and isolation between contexts.

User experience

Zone associations and naming policies use resolverContextRef.name; registrations select a zone through dnsZoneRef.name. Naming rules use matchLabels or matchExpressions on registration labels. An omitted or empty selector matches every registration in that context.

Test plan

  • CI: API and controller tests
  • CI: Lint and generated manifests
  • CI: Container packaging
  • CI: Repository end-to-end tests

Stacked on #243. Architecture: #229.

@scotwells scotwells changed the title Configure private DNS zones and naming policies by name Configure private DNS using resource names and registration labels Oct 12, 2026
@scotwells
scotwells force-pushed the fix/internal-dns-name-references branch 2 times, most recently from 3ebfa8a to 2770683 Compare October 12, 2026 17:21
@scotwells
scotwells force-pushed the fix/internal-dns-name-references branch 2 times, most recently from c96fd61 to a32a731 Compare October 12, 2026 21:17
@scotwells
scotwells force-pushed the fix/internal-dns-name-references branch 2 times, most recently from 1a095af to 61920e4 Compare October 12, 2026 22:05
@scotwells
scotwells force-pushed the fix/internal-dns-name-references branch from 61920e4 to 7fdf439 Compare October 12, 2026 22:07
@scotwells
scotwells force-pushed the fix/internal-dns-name-references branch from 7fdf439 to 38041c1 Compare October 12, 2026 22:16
@scotwells
scotwells force-pushed the fix/internal-dns-name-references branch from 38041c1 to cd43bb8 Compare October 12, 2026 22:59
@scotwells
scotwells added this pull request to stack #240 October 12, 2026 23:05
Discover ready Milo projects and reconcile every source namespace without
restarting the DNS service. Keep active sources during discovery outages
and resolve admission requests against live project identity.

Route serving artifacts by resource type and scope access withdrawal to
its source namespace so shared namespace names stay isolated.
Include the synchronized parent while preserving this review scope.
Use the supported client startup predicate in the shared configuration.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant