Topic54 problems· 1 reviewed

DNS

54 incident problems about DNS. Start with the reviewed ones.

All problems (54)

NETWORK-1606A Wi-Fi profile update is correct and one SSID still advertises the wrong DNSOne SSID still advertises the wrong DNS after a profile update.NetworkIntermediate8 minPro K8S-1554A cert-manager renewal starts and Route53 validation still failsDNS validation fails only for one delegated zone after renewal automation changes.KubernetesIntermediate10 minPro K8S-1458An ExternalDNS rollout updates public records and one cluster path still flapsAn ExternalDNS rollout updates public records and one cluster path still flaps focuses on Service Discovery and asks the reader to isolate the key signal in AWS. Record flapping often comes from ownership-marker collisions rather than from...KubernetesIntermediate10 minPro NETWORK-1410A service discovery cutover finishes and clients keep dialing the old backendA service discovery cutover finishes and clients keep dialing the old backend focuses on Service Discovery and asks the reader to isolate the key signal in ubuntu. Negative caches can outlive the moment a record appears and make a correct...NetworkIntermediate11 minPro NETWORK-1420A service discovery SRV cutover looks correct in dig and fails in appsA service discovery SRV cutover looks correct in dig and fails in apps focuses on Service Discovery and asks the reader to isolate the key signal in ubuntu. SRV migrations can fail on target-label caches even when the top-level SRV record a...NetworkIntermediate11 minPro NETWORK-1430A service discovery SRV cutover looks correct in dig and still fails in appsA service discovery SRV cutover looks correct in dig and still fails in apps focuses on Service Discovery and asks the reader to isolate the key signal in ubuntu. SRV migrations can fail at the target-label layer even when the top-level SRV reco...NetworkIntermediate11 minPro NETWORK-1450An SRV cutover looks correct in dig output and still fails in appsApplications keep failing after a service-discovery cutover even though direct queries show the intended answers.NetworkIntermediate11 minPro NETWORK-1440An SRV cutover looks correct in direct dig and still fails in appsAn SRV cutover looks correct in direct dig and still fails in apps focuses on Service Discovery and asks the reader to isolate the key signal in ubuntu. SRV migrations can fail at the target-label level even when the top-level record already loo...NetworkIntermediate11 minPro K8S-1427A Cilium FQDN policy allows bootstrap package downloads and blocks long-lived...A Cilium FQDN policy allows bootstrap package downloads and blocks long... focuses on dns and asks the reader to isolate the key signal in cilium. FQDN policies can look correct at startup and still fail later when a differe...KubernetesAdvanced13 minPro K8S-1417A Cilium FQDN policy allows image pulls and blocks a later gRPC dependencyA Cilium FQDN policy allows image pulls and blocks a later gRPC dependency focuses on dns and asks the reader to isolate the key signal in cilium. FQDN policies can diverge when different stages of the pod lifecycle query through...KubernetesAdvanced13 minPro K8S-1437A Cilium FQDN policy allows startup downloads and blocks steady-state gRPCA Cilium FQDN policy allows startup downloads and blocks steady-state gRPC focuses on dns and asks the reader to isolate the key signal in cilium. FQDN policy issues can appear only after sidecars or alternate resolvers expo...KubernetesAdvanced13 minPro LINUX-1456A split-DNS VPN rollout looks right and one process namespace still misses...A split-DNS VPN rollout looks right and one process namespace still misses... focuses on dns and asks the reader to isolate the key signal in ubuntu. DNS rollouts can fail only in long-lived namespaces that never re-read resolved state.LinuxAdvanced13 minPro LINUX-1594A chrony source file is fixed and one VM still driftsOne VM still drifts after a chrony source file fix.LinuxIntermediate7 minPro LINUX-1574A chrony source reorder is correct and one VM still driftsOne VM still drifts after chrony source reorder and reload.LinuxIntermediate7 minPro LINUX-1584A chrony template is corrected and one node still steps timeOne node still steps time after a chrony template correction.LinuxIntermediate7 minPro LINUX-1564A chrony pool is fixed and one VM still skewsOne VM drifts again only after DHCP renew.LinuxIntermediate8 minPro K8S-1606A CoreDNS rewrite fix lands and one namespace still resolves old namesOne namespace still resolves old names after a CoreDNS rewrite fix.KubernetesIntermediate8 minPro K8S-1586A CoreDNS rewrite fix lands and one namespace still resolves stale namesOne namespace still resolves stale names after a CoreDNS rewrite fix.KubernetesIntermediate8 minPro K8S-1596A CoreDNS rewrite is fixed and one namespace still resolves stale namesOne namespace still resolves stale names after a CoreDNS rewrite fix.KubernetesIntermediate8 minPro K8S-1576A CoreDNS rewrite rule changes and one service still resolves the old suffixOne service keeps resolving the old suffix after a CoreDNS rewrite update.KubernetesIntermediate8 minPro