Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Limit external-dns to exactly one zone #82

Merged
merged 63 commits into from
Mar 22, 2022
Merged

Conversation

mogul
Copy link
Collaborator

@mogul mogul commented Mar 2, 2022

See kubernetes-sigs/external-dns#422

This also ensures that prerequisite_binaries_present works even if the binaries are available via aliases.

@mogul mogul requested a review from a team March 2, 2022 02:13
@mogul mogul enabled auto-merge (rebase) March 2, 2022 02:13
robert-bryson
robert-bryson previously approved these changes Mar 2, 2022
@mogul mogul force-pushed the another-fix-for-finding-binaries branch from b100e11 to 43dfd6f Compare March 2, 2022 06:28
@mogul mogul changed the title fix: "type -p" is not available in /bin/sh Limit external-dns to exactly one zone Mar 2, 2022
@mogul mogul mentioned this pull request Mar 2, 2022
The Bitnami one we were using (probably based on an old blog post) gets an "F" security rating in artifacthub.io despite being maintained and regularly updated. The official one gets an "A".
@mogul mogul force-pushed the another-fix-for-finding-binaries branch from af3fe98 to d96b883 Compare March 2, 2022 07:33
@mogul mogul closed this Mar 2, 2022
auto-merge was automatically disabled March 2, 2022 07:56

Pull request was closed

@mogul mogul deleted the another-fix-for-finding-binaries branch March 2, 2022 07:56
@mogul mogul restored the another-fix-for-finding-binaries branch March 2, 2022 09:11
@mogul mogul reopened this Mar 2, 2022
@mogul
Copy link
Collaborator Author

mogul commented Mar 2, 2022

(I don't know why this closed.)

@mogul mogul enabled auto-merge (rebase) March 2, 2022 09:12
nickumia-reisys
nickumia-reisys previously approved these changes Mar 2, 2022
Copy link
Contributor

@nickumia-reisys nickumia-reisys left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@mogul
Copy link
Collaborator Author

mogul commented Mar 17, 2022

OK, this is pretty much back to where it was, as far as GSA/data.gov#3706. All that remains is properly waiting for DNS to be resolvable before proceeding with tests.

@mogul
Copy link
Collaborator Author

mogul commented Mar 17, 2022

Fixed the DNS resolution waiting-loop in test.sh. This would be passing if we hadn't somehow dropped the DS records from the data.gov domain when we moved the data.gov zone to Route53...! I will make a pull-request on 18f/dns in the morning to fix that.

@mogul
Copy link
Collaborator Author

mogul commented Mar 17, 2022

Now blocked waiting on 18F/dns#593

@mogul
Copy link
Collaborator Author

mogul commented Mar 17, 2022

That was quick! Now just waiting on the test to pass.

@mogul mogul enabled auto-merge (rebase) March 17, 2022 21:11
@mogul mogul force-pushed the another-fix-for-finding-binaries branch from 8c01e16 to e2e81e8 Compare March 17, 2022 21:13
Copy link
Contributor

@nickumia-reisys nickumia-reisys left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@nickumia-reisys
Copy link
Contributor

Unless DNSSEC takes a long time to setup too based on DNS propagation, the test failed for no apparent reason.. Unless the dns server being requested to do dnssec validation was just a bad one 😕
image

Copy link
Contributor

@nickumia-reisys nickumia-reisys left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀 🚀 🚀 🚀 🚀 🚀

@mogul mogul merged commit 189ca3c into main Mar 22, 2022
@mogul mogul deleted the another-fix-for-finding-binaries branch March 22, 2022 19:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants