Tracking issue for open PR #24 (author: fobispo-tc).
Adds a port.DNSProvisioner interface with an RFC 2136 (DDNS) adapter using TSIG authentication (miekg/dns), hooked into VerifyDNS (auto-create records before verify) and Revoke (best-effort cleanup), behind a new dns.provisioner config section independent of the dns.type verifier setting. For org-level deployments where the RA controls the DNS zone, this removes the manual _ans, _ans-badge, and _443._tcp TLSA record steps, collapsing registration from 4 steps to 2.
Created during an open-PR triage pass so each in-flight PR has a corresponding tracking issue. Full details and discussion on the PR.
Tracking issue for open PR #24 (author: fobispo-tc).
Adds a
port.DNSProvisionerinterface with an RFC 2136 (DDNS) adapter using TSIG authentication (miekg/dns), hooked intoVerifyDNS(auto-create records before verify) andRevoke(best-effort cleanup), behind a newdns.provisionerconfig section independent of thedns.typeverifier setting. For org-level deployments where the RA controls the DNS zone, this removes the manual_ans,_ans-badge, and_443._tcpTLSA record steps, collapsing registration from 4 steps to 2.Created during an open-PR triage pass so each in-flight PR has a corresponding tracking issue. Full details and discussion on the PR.