refactor(dns): adopt role-based host identities - #2
Merged
Conversation
viasnake
marked this pull request as ready for review
August 23, 2026 22:52
viasnake
force-pushed
the
codex/fix-dns-naming
branch
from
August 23, 2026 22:59
befcd54 to
d37b071
Compare
Derive canonical host FQDNs from inventory_hostname, replace the authoritative SOA and NS identities, and remove legacy host records without compatibility aliases. For each managed zone, compare rendered content after normalizing the SOA serial. Preserve the existing serial when content is unchanged; otherwise increment it once modulo the 32-bit RFC 1982 sequence space.
Keep README focused on setup and targeted playbook execution. Keep mutable infrastructure values in inventory and roles, with only the remaining operational constraint documented beside the relevant task.
viasnake
force-pushed
the
codex/fix-dns-naming
branch
from
August 23, 2026 23:09
d37b071 to
dca706a
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
Inventory host identities and generated DNS data still used topology-based names, and managed zone serials were fixed. Repository documentation also duplicated mutable infrastructure values.
Changes
Impact
The DNS identity replacement is intentionally breaking. Inventory topology, addresses, service aliases, and recursion policy are unchanged.
DMZからrecursive DNSへのアクセスは現状維持。
mise run checkand DNS-host check mode pass. The full site check reaches all DNS hosts but stops at the existing foundation key preflight before DNS roles.