-
Notifications
You must be signed in to change notification settings - Fork 543
GEP-2627 DNS Configuration - Initial Provisional PR #2712
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
de9a857
0293ba4
8cbf889
fc9f3ab
c4ea5fa
70853cc
da94d23
bc8dcac
75b2a6c
cb0e3ee
b9ce316
9a14949
daa16a7
13216cd
0327e6e
f96929d
f92966e
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change | ||||
---|---|---|---|---|---|---|
@@ -0,0 +1,52 @@ | ||||||
# GEP-2627: DNS configuration within Gateway API | ||||||
|
||||||
* Issue: [#2627](https://github.com/kubernetes-sigs/gateway-api/issues/2627) | ||||||
* Status: Provisional | ||||||
|
||||||
## TLDR | ||||||
|
||||||
For gateway infrastructure to be valuable we need to be able to connect clients to these gateways. A common way to achieve this is to use domain names/hostnames and DNS. The guidelines for DNS configuration are a critical piece of service networking, but this is currently not expressible as part of Gateway API. Instead of leaving this unspecified and having implementations likely to do this in different ways, the purpose of this proposal is to provide a standard way to specify DNS for Gateways. | ||||||
|
||||||
## Goals | ||||||
* Provide DNS specification for Gateway resources | ||||||
* Support multiple DNS providers and a selection mechanism for Gateways | ||||||
* Provide Gateway status to communicate the state of provisioned DNS | ||||||
* Increase portability and supportability between Gateway API implementations and third party controllers offering DNS integration. | ||||||
|
||||||
## Non-Goals | ||||||
|
||||||
* Providing any upstream hostname validation mechanisms. We can provide status for validation failure, but implementations are responsible for validation. | ||||||
* Multi-cluster DNS for multi-cluster ingress solutions (at least not as part of the initial API) | ||||||
Comment on lines
+18
to
+19
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Make sure to add a little context explaining why these are non-goals. |
||||||
|
||||||
## Use Cases | ||||||
|
||||||
As a cluster administrator, I manage a set of domains and a set of gateways. I would like to declaratively define which gateways should be used for provisioning DNS records, and, if necessary, which DNS provider to use to configure connectivity for clients accessing these domains and my gateway so that I can see and configure which DNS provider is being used. | ||||||
|
||||||
As a cluster administrator, I would like to have the DNS names automatically populated into my specified DNS zones as a set of records based on the assigned addresses of my gateways so that I do not have to undertake external automation or management of this essential task. | ||||||
|
||||||
As a cluster administrator I would have the status of the DNS records reported back to me, so that I can leverage existing kube based monitoring tools to know the status of the integration. | ||||||
|
||||||
As a cluster administrator, I would like the DNS records to be updated automatically if the `spec` of assigned gateways changes, whether those changes are for IP address or hostname. | ||||||
|
||||||
As a DNS administrator, I should be able to ensure that only approved External DNS controllers can make changes to DNS zone configuration. (This should in general be taken care of by DNS system <-> External DNS controller interactions like user credentials and operation status responses, but it is important to remember that it needs to happen). | ||||||
maleck13 marked this conversation as resolved.
Show resolved
Hide resolved
|
||||||
|
||||||
maleck13 marked this conversation as resolved.
Show resolved
Hide resolved
|
||||||
## API | ||||||
|
||||||
Initial draft will not offer an API yet until the use cases are agreed. Some thoughts worth thinking about: | ||||||
- I think it is important that we try to move away from APIs based on annotations which, while convenient, are not a full API and suffer from several limitations. An example: I want to configure a listener with a domain I own that is in a different provider than the domains of the other listeners. I want to add a new option to configure a particular weighting and so on. Soon you end up with a large set of connected annotations that often grow in complexity that really should be expressed as an API. | ||||||
|
||||||
- It is also important that this API can be delegated to controllers other than the Gateway API provider/implementor. This is because there are existing solutions that may want to support whatever API decided upon. It should not **have** to be a gateway provider that has to integrate with many DNS providers. | ||||||
|
||||||
## Conformance Details | ||||||
|
||||||
TBD | ||||||
|
||||||
## Alternatives | ||||||
|
||||||
it is possible to use `external-dns` to manage dns based on HTTPRoutes and Gateways https://github.com/kubernetes-sigs/external-dns/blob/7f3c10d65297ec1c4bcc8dd6f88c189b7f3e80d0/docs/tutorials/gateway-api.md. The aim of this GEP is not remove this as an option, but instead provide a common API that could then be leveraged by something like external-dns. | ||||||
|
||||||
The Kuadrant project (full disclosure I work on this project), offers a [DNSPolicy API](https://docs.kuadrant.io/1.2.x/kuadrant-operator/doc/reference/dnspolicy/#dnspolicy) which in part was the basis and inspiration for opening this GEP. The DNSPolicy offered by Kuadrant goes beyond what is outlined here as it also handles multi-cluster ingress and offers common routing options such as GEO and Weighted responses. | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. You don't need to make a disclaimer for this CNCF project 🤷
Suggested change
However this might make more sense under |
||||||
|
||||||
## References | ||||||
|
||||||
TBD |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,7 @@ | ||
apiVersion: internal.gateway.networking.k8s.io/v1alpha1 | ||
kind: GEPDetails | ||
number: 2627 | ||
name: DNS configuration for Gateway API | ||
status: Provisional | ||
authors: | ||
- maleck13 |
Uh oh!
There was an error while loading. Please reload this page.