Skip to content

Releases: PastureStack/external-dns-sync

Release list

v0.8.1

v0.8.1 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 13:36
v0.8.1
7ff253b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

image=ghcr.io/pasturestack/external-dns-sync:v0.8.1
digest=sha256:0dd0a346573f1661abf920a0d87a153a312515882b16a8ef5983614fa725c751
producer=7ff253bd84c13fd6748b9ca9737370de9ff5535f

Assets 15

External DNS Sync v0.8.0

External DNS Sync v0.8.0

Choose a tag to compare

View all tags
@chen21019 chen21019 released this 24 Jul 22:10
v0.8.0
dacc0bf

External DNS Sync v0.8.0

This release preserves the first-party Route 53 external-DNS service for
PastureStack-compatible environments.

Runtime

  • Publishes only the Amazon Route 53 provider.
  • Runs as non-root UID/GID 10001:10001 on Ubuntu 26.04.
  • Uses a semantic image reference:
    ghcr.io/pasturestack/external-dns-sync:v0.8.0.
  • Provides a dependency-aware GET /ping health endpoint on port 10000.
  • Supports environment-scoped API credentials injected through the compatible
    agent-role protocol.
  • Reads neutral PastureStack DNS policy labels first and retains four bounded
    historical label identifiers for in-place upgrades.
  • Combines an optional platform CA with the system bundle without modifying
    the system trust store.

Safety and compatibility

  • Restricts published provider registration to Route 53.
  • Validates platform, metadata, and Route 53 endpoint URLs.
  • Rejects redirects for credential-bearing API clients.
  • Bounds response bodies and Route 53 retries.
  • Propagates DNS apply failures instead of reporting false success.
  • Applies A records before the ownership TXT record and stops before ownership
    publication if an address update fails.
  • Reconciles stale owned records after restart even when the desired set is
    empty.
  • Preserves upstream Git history, authorship, dates, Apache-2.0 licensing, and
    vendored dependency notices.

Validation

  • Race-enabled unit tests and static analysis passed.
  • Route 53-compatible create, update, restart, and complete owned-record
    removal lifecycle passed.
  • Health, non-root, OCI metadata, license-file, and secret-redaction gates
    passed.
  • Trivy 0.70.0 reported 0 HIGH, 0 CRITICAL, and 0 image-secret findings.

PastureStack is an independent community effort to preserve, audit, and
modernize the Rancher 1.6 ecosystem. It is not affiliated with or endorsed by
Rancher Labs or SUSE.

Loading