-
Notifications
You must be signed in to change notification settings - Fork 2.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
TXT records with multiple targets are not handled properly #2762
Comments
I think I see this as well in AWS. I have a zone with multiple, existing TXT entries on the root domain: {
"Name": "example.com.",
"Type": "TXT",
"TTL": 86400,
"ResourceRecords": [
{
"Value": "\"v=spf1 a mx a:completeupdates.com ~all\""
},
{
"Value": "\"google-site-verification=pKt0HRP...aomM\""
},
{
"Value": "\"google-site-verification=wsObL_...3gWME-Bj5E\""
}
]
}, and in the updates it's trying to make I get this in the log: time="2022-07-30T00:59:57Z" level=info msg="Desired change: CREATE example.com A [Id: /hostedzone/ZZZZZZZZZZZ]"
time="2022-07-30T00:59:57Z" level=info msg="Desired change: CREATE example.com TXT [Id: /hostedzone/ZZZZZZZZZZZ]"
time="2022-07-30T00:59:57Z" level=error msg="Failure in zone example.com. [Id: /hostedzone/ZZZZZZZZZZZ]"
time="2022-07-30T00:59:57Z" level=error msg="InvalidChangeBatch: [Tried to create resource record set [name='example.com.', type='TXT'] but it already exists]\n\tstatus code: 400, request id: f31254aa-a72f-4e80-8008-c6fdda55774e" |
I believe I am also seeing this issue, or one quite similar. If we have a
and will continue to create new |
I'm seeing this issue using: Environment: I only have one nginx ingress. spec:
The dns is created correctly but on every loop it creates another |
I found this workaround: Using a --text-prefix that helps disambiguate and separate these out, it creates predictability here (and a few more records). |
The Kubernetes project currently lacks enough contributors to adequately respond to all issues. This bot triages un-triaged issues according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle stale |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues. This bot triages un-triaged issues according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle rotten |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. This bot triages issues according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /close not-planned |
@k8s-triage-robot: Closing this issue, marking it as "Not Planned". In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
What happened:
I have multiple TXT records for one of my domains, some of them are not managed by
external-dns
TXT registry. This results in TXT endpoints with several targets coming from the DNS provider, but TXT registry just takes the first target.https://github.com/kubernetes-sigs/external-dns/blob/master/registry/txt.go#L107
This results in either:
external-dns
as it fails to "see" the TXT record it looks for, as the target is not the first one in the listexternal-dns
removed byexternal-dns
ifexternal-dns
managed TXT target is the first one in the listWhat you expected to happen:
TXT registry should iterate over TXT targets instead of just picking the first one.
How to reproduce it (as minimally and precisely as possible):
Create a TXT record in addition to the one created by
external-dns
.Environment:
external-dns --version
): 0.11.1The text was updated successfully, but these errors were encountered: