MAAS DNS can be configured for circular dependency

Bug #1928904 reported by Boris Lukashev
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
MAAS
Triaged
Medium
Unassigned
maas-ui
Triaged
Medium
Unassigned

Bug Description

MaaS DNS services have a logic flaw wherein a domain can be created with a record matching the name of a subdomain:
1. create test.tld domain
2. create fail.test.tld record within the domain
3. create fail.test.tld domain
4. observe the blank A record created in the new domain
5. try to remove the record from either location - fails
6. try to rename the 2nd domain
7. observe name of record change in 1st domain, neither can be deleted

This sort of setup comes about when Horizon is given the 1st domain and other services are subset in the parent domain. The records are needed for Vault to issue correct certificates.

Tags: dns
affects: curtin → maas
Alberto Donato (ack)
Changed in maas:
status: New → Triaged
importance: Undecided → Medium
Alberto Donato (ack)
tags: added: ui
tags: removed: ui
Revision history for this message
Adam Collard (adam-collard) wrote :

Is this still an issue in recent versions of MAAS (3.3 onwards)? Is it possible to see the issue using the CLI/API or just the UI?

summary: - MaaS DNS can be configured for circular dependency
+ MAAS DNS can be configured for circular dependency
tags: added: dns
Changed in maas:
status: Triaged → Incomplete
Revision history for this message
Thorsten Merten (thorsten-merten) wrote :

this is still an issue in main

Changed in maas:
status: Incomplete → Triaged
milestone: none → 3.5.0
Changed in maas-ui:
milestone: none → 3.5.0
status: New → Triaged
importance: Undecided → Medium
Revision history for this message
Thorsten Merten (thorsten-merten) wrote :

The deletion of the records seem to work now but we are still able to create a domain if an A record with the same name already exists. I guess this should not be possible.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.