Skip to content

docs: Propose internal DNS for VPC resources - #589

Draft
scotwells wants to merge 12 commits into
mainfrom
docs/internal-dns-vpc-integration
Draft

scotwells wants to merge 12 commits into
mainfrom
docs/internal-dns-vpc-integration

Conversation

@scotwells

@scotwells scotwells commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Summary

VPC workloads resolve private resource names through inherited resolver settings. This proposal defines how network services provide VPC DNS access while product services publish their records. Network services submits the DNS context, region, and private destination and verifies the Galactic network path before delivering resolver settings. Architecture diagrams, commented API examples, and release criteria explain the consumer experience and integration boundaries.

Test plan

  • Verify API examples against the DNS access contract.
  • Verify ownership and readiness boundaries against the network design.
  • Verify generated manifests and deployment renders in CI.
  • Verify required repository checks.

Related to datum-cloud/enhancements#921.

Describe automatic private names and inherited resolver settings for VPC
resources. Define ownership across project, federation, and edge APIs.

Key changes:
- Define regional access and trusted network identity.
- Show commented API examples and rollout criteria.
Describe the VPC DNS integration as network services so the proposal uses
product terminology.

Key changes:
- Align prose, diagrams, and YAML explanations.
Use the DNSRecordContribution kind when describing product publication.

Key changes:
- Match the publication contract in the DNS API.
Keep the proposal on the current network services baseline.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant