chore(dns): retire the sean.pm zone from the platform #727

Merged

binjovi-bot merged 1 commit from chore/retire-seanpm-zone into trunk 2026-09-14 10:19:54 +00:00

Conversation 0 Commits 1 Files changed 3 -4

sean commented 2026-09-14 10:18:11 +00:00

Owner

Copy link

Hermes was the only thing served at sean.pm, and it is gone. This drops the
zone from the ExternalDNS domain filter and from the ACME issuer solver, and
removes the two guard lines in tests/dns-domain-contract.sh that pinned both.

ExternalDNS never managed those records

It runs --registry=txt, and the seanpm zone has no ownership TXT record.
So the A and AAAA records are manual, which is why they outlived the
HTTPRoute that --policy=sync would otherwise have withdrawn them with. They
still point at the portal gateway LoadBalancer, which no longer has a sean.pm
listener, so the name resolves and then fails TLS.

Removing those two records is a Cloud DNS change, not a GitOps one, and is not
part of this commit:

gcloud dns record-sets delete sean.pm. --type=A    --zone=seanpm --project=seanio
gcloud dns record-sets delete sean.pm. --type=AAAA --zone=seanpm --project=seanio

The managed zone stays

sean.pm is a domain the platform hosted a service for, not a domain the
platform owns. The zone carries its NS delegation, and deleting it would
decommission the domain rather than clean up after Hermes.

bash tests/dns-domain-contract.sh passes:
"DNS has six objects, stable zones and owner ID, and one pruning Flux owner".

https://claude.ai/code/session_01GfkEuwuvGSqGyXVuxwT7PA

Hermes was the only thing served at `sean.pm`, and it is gone. This drops the zone from the ExternalDNS domain filter and from the ACME issuer solver, and removes the two guard lines in `tests/dns-domain-contract.sh` that pinned both. ### ExternalDNS never managed those records It runs `--registry=txt`, and the `seanpm` zone has **no ownership TXT record**. So the `A` and `AAAA` records are manual, which is why they outlived the HTTPRoute that `--policy=sync` would otherwise have withdrawn them with. They still point at the portal gateway LoadBalancer, which no longer has a `sean.pm` listener, so the name resolves and then fails TLS. Removing those two records is a Cloud DNS change, not a GitOps one, and is not part of this commit: ``` gcloud dns record-sets delete sean.pm. --type=A --zone=seanpm --project=seanio gcloud dns record-sets delete sean.pm. --type=AAAA --zone=seanpm --project=seanio ``` ### The managed zone stays `sean.pm` is a domain the platform hosted a service for, not a domain the platform owns. The zone carries its NS delegation, and deleting it would decommission the domain rather than clean up after Hermes. `bash tests/dns-domain-contract.sh` passes: *"DNS has six objects, stable zones and owner ID, and one pruning Flux owner"*. https://claude.ai/code/session_01GfkEuwuvGSqGyXVuxwT7PA

sean added 1 commit 2026-09-14 10:18:11 +00:00

chore(dns): retire the sean.pm zone from the platform ... 9646b46bcf

Hermes was the only thing served at sean.pm, and it is gone. This drops
the zone from the ExternalDNS domain filter and from the ACME issuer
solver, and removes the two guard lines that pinned both.

ExternalDNS never managed the sean.pm records. It runs --registry=txt
and the zone has no ownership TXT, so the A and AAAA records are manual
and outlived the HTTPRoute that --policy=sync would otherwise have
withdrawn them with. They still point at the portal gateway, which no
longer has a sean.pm listener, so the name resolves and then fails TLS.
Removing those two records is a Cloud DNS change and is not part of this
commit.

The managed zone itself stays. sean.pm is a domain the platform hosted a
service for, not a domain the platform owns, and the zone carries its NS
delegation.

Claude-Session: https://claude.ai/code/session_01GfkEuwuvGSqGyXVuxwT7PA

binjovi-bot merged commit 9646b46bcf into trunk 2026-09-14 10:19:54 +00:00

binjovi-bot deleted branch chore/retire-seanpm-zone 2026-09-14 10:19:54 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/seanfarm!727

No description provided.