PowerDNS
Authoritative DNS for the lab zone — drives ACME DNS-01 challenges through cert-manager.
Quick facts
What it is
Wildcard *.apps.sub.comptech-lab.com → 160.30.63.134 covers the bulk of the platform. Explicit A records exist where wildcards don't synthesise (e.g. *.kafka.apps.sub.comptech-lab.com needs bootstrap.kafka... and broker-{0,1,2}.kafka... records explicitly because of RFC 4592 single-label matching).
Architecture
Add diagrams or topology notes here — how this component sits relative to DC/DR, what replicates, and what speaks to it. Mermaid blocks render as plain text today; embed images under /assets/ when needed.
Configuration
Add chart values overrides, important env vars, OIDC client config, secret references. Link to the source files in infra/gitops-rke2 rather than copying YAML wholesale — the repo is the source of truth.
Operations
Add runbook notes: backup, restore, common troubleshooting, dashboards, on-call cheatsheet entries.
Failover
Add DC/DR cutover/cutback notes: edge HAProxy backend name, healthcheck path, measured cutover/cutback times, smoke-test commands.
References
- Add upstream chart / project links, ADR refs, MR links, and cross-references to other tools in this catalogue.