Repository navigation
Conversation
scotwells
changed the title
scotwells
force-pushed
the
fix/internal-dns-name-references
branch
2 times, most recently
from
October 12, 2026 17:21
3ebfa8a to
2770683
Compare
scotwells
force-pushed
the
fix/internal-dns-name-references
branch
2 times, most recently
from
October 12, 2026 21:17
c96fd61 to
a32a731
Compare
scotwells
force-pushed
the
fix/internal-dns-name-references
branch
2 times, most recently
from
October 12, 2026 22:05
1a095af to
61920e4
Compare
scotwells
force-pushed
the
fix/internal-dns-name-references
branch
from
October 12, 2026 22:07
61920e4 to
7fdf439
Compare
scotwells
force-pushed
the
fix/internal-dns-name-references
branch
from
October 12, 2026 22:16
7fdf439 to
38041c1
Compare
scotwells
force-pushed
the
fix/internal-dns-name-references
branch
from
October 12, 2026 22:59
38041c1 to
cd43bb8
Compare
scotwells
added this pull request to stack #240
October 12, 2026 23:05
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Customers attach private zones by name and configure additional DNS names using registration labels. DNS resolves resource identities into controller-owned status.
User experience
DNSZoneAssociationandDNSNamingPolicyreferences contain onlyname. Naming rules usematchLabelsormatchExpressionsonDNSRegistration.metadata.labels, so any authorized publisher can use them. An omitted or empty selector matches all registrations in the context. Overlapping rules produce one name per zone. Schemas and CEL reject unsupported selector operators and incompatible values. Selectors support up to 64 label matches, 64 expressions, and 64 values per expression.If a referenced zone or context is recreated, customers recreate the association or policy to attach the replacement. Scoped grants authorize publishing.
Validation
Local API-backed tests cover selector matching, context isolation, overlapping rules, malformed selectors, lifetime protection, and authorization. Schema and CEL tests run against a Kubernetes API server without an admission webhook. Internal DNS tests, lint, and the repository build pass locally.
Depends on #243. Architecture examples are maintained in #229.