Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable DNSSEC validation #675

Merged
merged 2 commits into from
Nov 28, 2023
Merged

Enable DNSSEC validation #675

merged 2 commits into from
Nov 28, 2023

Conversation

yokaze
Copy link
Contributor

@yokaze yokaze commented Nov 24, 2023

This PR enables DNSSEC validation for non-cluster DNS queries.

Signed-off-by: Daichi Sakaue [email protected]

@yokaze yokaze self-assigned this Nov 24, 2023
@yokaze yokaze force-pushed the dnssec branch 5 times, most recently from 65f765e to b18335f Compare November 27, 2023 05:12
Signed-off-by: Daichi Sakaue <[email protected]>
@yokaze yokaze changed the title wip Enable DNSSEC validation Nov 27, 2023
@yokaze yokaze marked this pull request as ready for review November 27, 2023 06:09
@yokaze yokaze requested a review from masa213f November 27, 2023 06:10
@@ -245,6 +259,12 @@ func testKubernetes() {
return err
}).Should(Succeed())

By("querying www.dnssec-failed.org using node DNS from ubuntu pod")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This test is OK.

Could you update the By() just before? Currently, we uses "www.cybozu.com".
By("querying www.google.com using node DNS from ubuntu pod")

Signed-off-by: Daichi Sakaue <[email protected]>
@yokaze yokaze requested a review from masa213f November 28, 2023 05:41
Copy link
Contributor

@masa213f masa213f left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@yokaze yokaze merged commit 20eadbd into main Nov 28, 2023
6 checks passed
@yokaze yokaze deleted the dnssec branch November 28, 2023 08:38
yokaze added a commit that referenced this pull request Nov 29, 2023
* Enable DNSSEC validation

Signed-off-by: Daichi Sakaue <[email protected]>
yokaze added a commit that referenced this pull request Nov 29, 2023
Backport #675 to enable DNSSEC validation
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants