Update Helm release dns-operator to v0.17.2

[konflux-staging]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
dns-operator (source)	minor	0.0.0 → 0.17.2

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

Kuadrant/dns-operator (dns-operator)

v0.17.2

Compare Source

What's Changed

Security & Dependencies

• Upgrade Go to 1.26.7 and update security dependencies
• Bump google.golang.org/grpc in /coredns/plugin
• Fix: populate coredns/plugin go.sum with all transitive module checksums

v0.17.1

Compare Source

What's Changed

Bug Fixes

• fix: replace deprecated reflect.Ptr with reflect.Pointer

Security & Dependencies

• Upgrade golang.org/x/net to v0.55.0
• Bump golang.org/x/crypto from 0.51.0 to 0.52.0
• Bump coredns to 1.14.6 in coredns/plugin

Toolchain

• Upgrade Go to 1.26.3 → 1.26.4

CI / Build

• Bump golangci-lint to v2.12.2
• Use go install for golangci-lint

Full Changelog: Kuadrant/dns-operator@v0.17.0...v0.17.1

v0.17.0

Compare Source

What's Changed

• chore(coredns): Update toolchain to go1.24.12 by @​mikenairn in #​715
• Add version back to release.mk by @​Boomatang in #​720
• improve doc-verification skill by @​maksymvavilov in #​712
• fix(coredns): add warnings when CRD missing by @​mikenairn in #​700
• fix(release): add set-image-refs target for consistent image management by @​mikenairn in #​721
• ADD: Document migrating existing clusters to use groups. by @​Boomatang in #​698
• Add exercising DNS fail-over via groups documentation by @​Boomatang in #​708
• Add documentation for migrating away from DNS Groups by @​Boomatang in #​718
• chore(coredns): remove externalTrafficPolicy:Local by @​mikenairn in #​732
• update CoreDNS docs by @​maksymvavilov in #​711
• fix(make): use order-only prerequisites for LOCALBIN tool targets by @​mikenairn in #​734
• docs: fix broken links and remove unsupported Helm docs by @​mikenairn in #​736
• add yaml output for cli by @​maksymvavilov in #​695
• FIX: Broken link by @​Boomatang in #​747
• Release Docs Update by @​Boomatang in #​744
• test: add runtime reconfiguration integration test for group changes by @​mikenairn in #​746
• properly undo the wc replacement in registry by @​maksymvavilov in #​750
• Enable s390x support by @​vinayakray19 in #​745
• Update Go to 1.25.7 by @​philbrookes in #​755
• update coredns plugin dependency to v1.14.2 by @​philbrookes in #​756
• Update Go to 1.25.8 by @​philbrookes in #​757
• fix: derive setup-envtest version from controller-runtime by @​mikenairn in #​759
• Upgrade gRPC-Go to 1.79.3 by @​thomasmaas in #​758
• fix: gate TLD early-exit on ICANN flag in findDNSZoneForHost by @​maksymvavilov in #​765
• chore(deps): Upgrade Go to 1.25.9 by @​thomasmaas in #​764
• chore(deps): Upgrade Go to 1.25.9 in CoreDNS plugin by @​mikenairn in #​766
• chore(deps): Bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /coredns/plugin by @​dependabot[bot] in #​754
• chore(deps): Bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 by @​dependabot[bot] in #​763

New Contributors

• @​vinayakray19 made their first contribution in #​745

Full Changelog: Kuadrant/dns-operator@v0.16.2...v0.17.0

v0.16.4

Compare Source

Security & Dependencies

• Upgrade Go toolchain from 1.26.4 to 1.26.7 across all three Go modules (fixes Go stdlib CVEs: net/url, crypto/tls, html/template, net/http)
• Upgrade golang.org/x/text and go.opentelemetry.io/otel to latest stable versions (fixes CVE-2026-41178)
• go mod tidy across all submodules

Full Changelog: Kuadrant/dns-operator@v0.16.3...v0.16.4

v0.16.3

Compare Source

What's Changed

Security & Dependencies

• Upgrade golang.org/x/net to v0.55.0 (CVE-2026-33811)
• Bump golang.org/x/crypto from 0.51.0 to 0.52.0 (CVE-2026-27145)

Toolchain

• Upgrade Go to 1.26.4 (CVE-2026-27145)

CI / Build

• Bump golangci-lint to v2.12.2
• Use go install for golangci-lint
• Bump golangci-lint to v2.12.2 in CI workflow

Full Changelog: Kuadrant/dns-operator@v0.16.2...v0.16.3

v0.16.2

Compare Source

What's Changed

• docs: fix broken links and remove unsupported Helm docs by @​R-Lawton in #​751
• Backport patch-safe fixes for v0.16.2 by @​thomasmaas in #​769
• Prepare release v0.16.2 by @​thomasmaas in #​770
• [0.16] fix(make): use order-only prerequisites for LOCALBIN tool targets by @​mikenairn in #​772

New Contributors

• @​R-Lawton made their first contribution in #​751

Full Changelog: Kuadrant/dns-operator@v0.16.1...v0.16.2

v0.16.0

Compare Source

What's Changed

• docs(release): remove step to update community catalogs by @​mikenairn in #​596
• add clenup cmd for old TXTs by @​maksymvavilov in #​597
• chore: Update kind (0.30.0) and node image (1.32.0) by @​mikenairn in #​598
• remove replaces generating code by @​philbrookes in #​604
• chore(coredns plugin): Re-Implement zone lookup by @​mikenairn in #​606
• chore(local-setup): Add basic loadbalanced example coredns record by @​mikenairn in #​607
• Fix cli release workflow by @​maksymvavilov in #​605
• chore(deps): Bump github.com/quic-go/quic-go from 0.48.2 to 0.49.1 in /coredns/plugin by @​dependabot[bot] in #​603
• Get Zone Records by @​Boomatang in #​602
• add CLAUDE.md by @​philbrookes in #​613
• Healthcheck Probe e2e tests by @​philbrookes in #​614
• remove relatedEndpoints by @​maksymvavilov in #​617
• rename cli and subcommands by @​maksymvavilov in #​616
• Set operator group at runtime by @​Boomatang in #​628
• fix(plan): Update on any endpoint label changes by @​mikenairn in #​643
• refactor: Add base DNSRecord reconciler by @​mikenairn in #​629
• gh-599 rename remaining references by @​maksymvavilov in #​646
• fix(regression): premature record reconcile check by @​mikenairn in #​650
• Bug: with getting dnsrecord list by @​Boomatang in #​635
• fix: wildcard root hosts by @​mikenairn in #​659
• add-active-group cmd by @​maksymvavilov in #​644
• change name of cli by @​maksymvavilov in #​661
• get-active-group cmd by @​maksymvavilov in #​653
• remove-active-group by @​maksymvavilov in #​655
• Claude slash command | Verify-pr by @​Boomatang in #​660
• Refactor CLI logging by @​Boomatang in #​667
• Add group and targets to registry entries by @​mikenairn in #​652
• use providers restricted to the domain by @​maksymvavilov in #​662
• gh-210 backoff on conflict by @​maksymvavilov in #​483
• Refactor: list of objects to list of strings by @​Boomatang in #​668
• doc(coredns): configure bind9 edge server with group by @​mikenairn in #​645
• Refactor default TTL in EndpointsBuilder by @​azgabur in #​630
• chore(deps): Bump golang.org/x/crypto from 0.36.0 to 0.45.0 by @​dependabot[bot] in #​649
• Refactor metrics to the collector pattern by @​Boomatang in #​676
• fix: wrapped zap log level and mode with custom flags. by @​crstrn13 in #​642
• go: bump to v1.25.3 by @​KevFan in #​674
• add output formatter by @​maksymvavilov in #​673
• improving Claude in project by @​maksymvavilov in #​678
• minor doc changes by @​maksymvavilov in #​679
• feat: Add DNS spec validation to inmemory provider by @​mikenairn in #​688
• Add race checker to testing by @​azgabur in #​680
• add plan unit test by @​maksymvavilov in #​682
• DNS Groups. by @​philbrookes in #​669
• add in pprof option for the controller by @​maleck13 in #​687
• UPDATE: adjust controller-runtime cache by @​Boomatang in #​696
• chore(coredns plugin): Update to Go 1.24 and CoreDNS v1.13.1 by @​mikenairn in #​697
• chore(deps): Bump github.com/quic-go/quic-go from 0.49.1 to 0.57.0 in /coredns/plugin by @​dependabot[bot] in #​675
• chore(deps): Bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 in /coredns/plugin by @​dependabot[bot] in #​699
• feat(dev): Add configurable pprof bind address for local runs by @​mikenairn in #​703
• feat(coredns): Add support for custom SOA RNAME email address by @​philbrookes in #​706
• chore(deps): Upgrade Go to 1.25.5 by @​philbrookes in #​710
• feat: Add NS record type support for multi-cluster delegation by @​mikenairn in #​702
• refactor(provider): Improve zone matching with sentinel errors by @​mikenairn in #​704
• update maintainers by @​maksymvavilov in #​717

New Contributors

• @​azgabur made their first contribution in #​630
• @​crstrn13 made their first contribution in #​642

Full Changelog: Kuadrant/dns-operator@v0.15.0...v0.16.0

v0.15.0

Compare Source

Multi Cluster CoreDNS integration to technical preview stage.

Updates the CoreDNS provider to rely solely on the new multi cluster mechanism introduced by the "Cluster Aware DNSRecord Delegation" rfc. Unlike other providers, this will be the only supported way of achieving multi cluster support when using CoreDNS.

• Cluster Aware DNSRecord delegation
  • Adds support for default provider secrets.
  • Add multi cluster support to the dns operator by making it aware of other clusters allowing it to process DNSRecord resources on other clusters as well as its own.
  • Add support to delegate the processing of a DNSRecord to another DNSRecord created and managed by the dns operator.
  • Adds a new provider implementation (endpoint) that allows any resource that fulfils the contract for an external-dns Endpoint resource to act as a central "zone" resource that can be updated by many other endpoint resources.

What's Changed

• tests(e2e): allow multiple records to be created in each namespace by @​mikenairn in #​440
• ci: add CoreDNS provider to e2e job by @​mikenairn in #​441
• ci(e2e): increase default number of records created for multi record tests to two by @​mikenairn in #​442
• chore: update go to 1.23.6 by @​maleck13 in #​452
• feat: add bind9 edge server to local-setup by @​mikenairn in #​454
• chore: update golangci lint v2.1.6 by @​mikenairn in #​456
• coredns(plugin): implement Transfer interface by @​mikenairn in #​453
• chore: build and load coredns image in local setup by @​mikenairn in #​457
• chore: remove forward directive from coredns examples by @​mikenairn in #​460
• ci: rename CI-E2E job and update triggers by @​mikenairn in #​464
• ci: rename CI-E2E workflow file by @​mikenairn in #​465
• fix: sometimes clean azure error returns an empty error by @​philbrookes in #​467
• fix: prevent index out of range in plan by @​maksymvavilov in #​468
• feat: txt records per hostname and owner by @​maksymvavilov in #​461
• test: make providers selectable for e2e workflow by @​maksymvavilov in #​476
• lint: add loggercheck linter by @​mikenairn in #​486
• feat: optional provider ref by @​maksymvavilov in #​488
• build(deps): bump golang.org/x/oauth2 from 0.19.0 to 0.27.0 by @​dependabot[bot] in #​490
• docs: add details for renewing azure credentials in e2e workflow by @​philbrookes in #​495
• chore: Go 1.24 and controller-runtime update by @​mikenairn in #​496
• chore: create operator resources during local-setup by @​mikenairn in #​497
• fix: panic when using default secret by @​mikenairn in #​500
• fix: kind-load-image target for podman compatibility by @​Boomatang in #​494
• chore: remove name mapper from the TXT registry code by @​maksymvavilov in #​475
• chore: update finalizer removal logic to check status condition for "ProviderEndpointsRemoved" by @​Boomatang in #​491
• ci: allow tests to be skipped only on PRs by @​mikenairn in #​508
• ci: negate input values used to select providers by @​mikenairn in #​509
• test: update ginkgo cli version to v2.22.0 by @​mikenairn in #​510
• feat: cluster aware dnsrecord controller by @​mikenairn in #​489
• fix: status update on delete events by @​mikenairn in #​514
• feat: add endpoints provider by @​philbrookes in #​504
• feat: dnsrecord delegation by @​mikenairn in #​517
• feat: add delegation role controller option by @​mikenairn in #​519
• fix: watch default secrets by @​maksymvavilov in #​512
• feat: override controller flags with configMap by @​maksymvavilov in #​516
• fix: remove duplicate flags by @​adam-cattermole in #​521
• feat: add provider label to DNSrecord by @​Boomatang in #​511
• cli: kubectl plugin for common debug information by @​maksymvavilov in #​526
• refactor: rename name mapper by @​maksymvavilov in #​502
• cli: add release workflow by @​maksymvavilov in #​534
• ci: run e2e workflow when triggering_actor has write permissions by @​philbrookes in #​532
• ci: only check user permissions on pull requests by @​philbrookes in #​545
• cli: replace bash script with CLI command for cluster secret generation by @​Boomatang in #​530
• ci: update e2e workflow event test to pull_request_target by @​philbrookes in #​547
• ci: use github.event_name instead of github.event by @​philbrookes in #​548
• fix: make delegate field immutable by @​philbrookes in #​549
• test: Update integration test suite for primary and secondary testing by @​mikenairn in #​551
• fix: remote dnsrecord controller logging by @​mikenairn in #​553
• feat(metrics): emit dns record metadata as metric by @​maksymvavilov in #​552
• feat: multicluster dnsrecord delegation by @​mikenairn in #​520
• fix: delegated record labelling by @​mikenairn in #​554
• dev: multicluster-local-setup make target improvements by @​mikenairn in #​555
• feat: apply ready for delegation status to all delegating records by @​mikenairn in #​556
• feat: update delegation authoritative record naming by @​mikenairn in #​557
• feat(metrcis): add Authoritative Records Metric for Primary Synchronization Verification by @​Boomatang in #​550
• fix: delegating records with wildcard root hosts by @​mikenairn in #​560
• refactor: delegation and authoritative record creation logic by @​mikenairn in #​561
• provider(coredns): update CoreDNS to use delegation for multicluster by @​mikenairn in #​559
• fix: rename metric by @​Boomatang in #​565
• refactor: Separate local and remote reconcilers by @​mikenairn in #​568
• doc(cli): add doc aboud kubectl-dns binary by @​maksymvavilov in #​567
• feat(metrics): add Multi-Cluster Observability Metrics by @​Boomatang in #​558
• chore: add version and sha to build by @​maksymvavilov in #​569
• feat: Add support for multiple primary controllers by @​mikenairn in #​571
• fix: emit _ready metric for delegating records by @​maksymvavilov in #​573
• feat(metrics): Introduce metric collector by @​Boomatang in #​582
• fix: equate not set delegate field to false in CR validation by @​maksymvavilov in #​580
• provider(coredns): remove NAMESERVERS from config by @​mikenairn in #​585
• coredns(plugin): Update module name and versions by @​mikenairn in #​589
• provider(authoritative_dnsecord): Manage authoritative records by @​mikenairn in #​588
• docs: dns record delegation by @​Boomatang in #​584
• docs: update CoreDNS docs by @​mikenairn in #​590
• dep: go 1.24.6 by @​KevFan in #​595

New Contributors

• @​Boomatang made their first contribution in #​494
• @​adam-cattermole made their first contribution in #​521

Full Changelog: Kuadrant/dns-operator@v0.14.0...v0.15.0

v0.14.0

Compare Source

Adds support for a new "coredns" provider #​391

What's Changed

• coredns(local-setup): Update dnsprovider make targets to include coredns by @​mikenairn in #​424
• fix: update example DNS Records by @​philbrookes in #​423
• deps: Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @​dependabot in #​420
• coreds(deployment): Update namespaced deployments to include coredns by @​mikenairn in #​428
• docs: update contributing guide with details for contacting team by @​philbrookes in #​431
• coredns(provider): Update e2e tests by @​mikenairn in #​433
• coredns(provider): Initial implementation by @​maleck13 in #​421
• tests: CoreDNS provider and test updates by @​mikenairn in #​435

Full Changelog: Kuadrant/dns-operator@v0.13.0...v0.14.0

v0.13.0

Compare Source

Includes minor updates and changes plus some of the ground work for core dns integration

v0.12.0

Compare Source

What's Changed

• reconcile premature on probes nil -> healthy by @​maksymvavilov in #​317

Full Changelog: Kuadrant/dns-operator@v0.11.0...v0.12.0

v0.11.0

Compare Source

What's Changed

• README to it's correct path by @​didierofrivia in #​314
• probes unhealthy only if threshold exeeded by @​maksymvavilov in #​315

Full Changelog: Kuadrant/dns-operator@v0.10.1...v0.11.0

v0.10.1

Compare Source

Full Changelog: Kuadrant/dns-operator@v0.10.0...v0.10.1

v0.10.0

Compare Source

What's Changed

• Helm docs by @​didierofrivia in #​309
• remove old healthchecks by @​maksymvavilov in #​310
• fix: Azure provider error parsing by @​mikenairn in #​312
• Bug: ensure we watch health probes in dnsrecord controller by @​maksymvavilov in #​308

Full Changelog: Kuadrant/dns-operator@v0.9.0...v0.10.0

v0.9.0

Compare Source

What's Changed

• feat: Support overlay generation with remote refs by @​mikenairn in #​302
• add basic unit test to see passed headers are added to the request by @​maleck13 in #​304
• refactor CEL validation on healthcheck specs by @​maksymvavilov in #​303
• ensure we remove healthcheckprobes if healthcheck unset by @​maleck13 in #​307

Full Changelog: Kuadrant/dns-operator@v0.8.0...v0.9.0

v0.8.0

Compare Source

Full Changelog: Kuadrant/dns-operator@v0.8.0...v0.8.0

What's Changed

• update probe logic not to share memory by @​maleck13 in #​288
• Report healtchecks to status by @​maksymvavilov in #​280
• block wildcard probes by @​maksymvavilov in #​290
• Preparing info for ArtifactHub.io by @​didierofrivia in #​291
• decouple healthy from ready conditions by @​maksymvavilov in #​292
• jitter initial probe execution time by @​maksymvavilov in #​299
• fix: Namespaced deployment overlay generation by @​mikenairn in #​301
• remove writing out lastCheckedAt status by @​maleck13 in #​300

Full Changelog: Kuadrant/dns-operator@v0.7.0...v0.8.0

v0.7.0

Compare Source

What's Changed

• fix e2e multi record test issues by @​mikenairn in #​225
• tests: Use unique zone hostnames for each integration test by @​mikenairn in #​226
• chore: Remove unused field "queuedFor" from record status by @​mikenairn in #​227
• go version bump to 1.22 by @​maksymvavilov in #​229
• custom test timeouts for specific providers (Azure) by @​philbrookes in #​236
• gh-223: sanitize all Azure API errors by @​philbrookes in #​234
• gh-232: traffic manager profile hash generation update by @​philbrookes in #​235
• Concurrent DNS Records test by @​philbrookes in #​233
• Update ginkgo binary version v2.17.1 by @​mikenairn in #​240
• add verify-helm-build to verify-all make target by @​maksymvavilov in #​242
• add perms and docs for azure by @​maleck13 in #​231
• tests: Add ginkgo flags makefile variable by @​mikenairn in #​245
• ci: Only run happy path tests for Azure on PRs by @​mikenairn in #​248
• ci: Export dns operator metrics on success by @​mikenairn in #​246
• ci: Fix GINKGO_FLAGS env var in e2e by @​mikenairn in #​249
• metrics: Instrumented provider http clients by @​mikenairn in #​244
• Add api to generate endpoints by @​maksymvavilov in #​207
• ci: Fix image build jobs to use ref instead of sha on tags by @​mikenairn in #​250
• More updates to health check spec. by @​philbrookes in #​259
• add azure mention by @​maleck13 in #​268
• format by @​maleck13 in #​269
• helm manifests template based by @​eguzki in #​264
• add DNSHealthProbe CRD by @​philbrookes in #​243
• Updated worker code by @​maleck13 in #​273
• fix healthcheck api by @​maksymvavilov in #​275
• Add related endpoints to DNSRecord status by @​maksymvavilov in #​241
• add tooling to convert endpoints to a tree and back by @​philbrookes in #​266
• ci: Improve build images job for release tags by @​eguzki in #​274
• Handle GEO- prefix for contintents for AWS by @​maleck13 in #​276
• add default duration of 5m by @​maleck13 in #​279
• Create/Delete HealthCheckProbeCR from DNSRecord Reconciler by @​maksymvavilov in #​271
• fix: Multiple same host/target records by @​mikenairn in #​284
• ci: on release check version string is the expected one by @​eguzki in #​278
• ci: set release version by @​eguzki in #​285
• Dockerfile: do not prefix release version with 'v' by @​eguzki in #​286
• consult healtcheck probes when publishing enpoints by @​maksymvavilov in #​277

New Contributors

• @​eguzki made their first contribution in #​264

Full Changelog: Kuadrant/dns-operator@v0.6.0...v0.7.0

v0.6.0

Compare Source

What's Changed

• Version commit hash by @​ehearneRedHat in #​191
• fix: default operator img tag to latest by @​mikenairn in #​215
• ci: Update olm bundle/helm chart verification by @​mikenairn in #​216
• Add license scan report and status by @​fossabot in #​212
• log dnsrecord reconcile duration by @​mikenairn in #​217
• bug: Sanitize provider error messages on zone lookup by @​mikenairn in #​220
• Add Azure provider by @​philbrookes in #​211
• chore: Immutable RootHost field on DNSRecord by @​mikenairn in #​219

New Contributors

• @​ehearneRedHat made their first contribution in #​191
• @​fossabot made their first contribution in #​212

Full Changelog: Kuadrant/dns-operator@v0.5.0...v0.6.0

v0.5.0

Compare Source

What's Changed

• Init operator including DNS apis and controllers by @​mikenairn in #​1
• Copy MGC DNS apis, controllers and packages by @​mikenairn in #​2
• Add local-setup and CI GH Workflow by @​mikenairn in #​3
• Add Tests and CI config by @​mikenairn in #​4
• Add build-images workflow by @​mikenairn in #​5
• Fix CR samples by @​mikenairn in #​6
• Provider API Update by @​mikenairn in #​7
• Set default image by @​mikenairn in #​8
• fix: few small issues rbac, version etc.. by @​mikenairn in #​9
• rename module kuadrant-dns-operator -> dns-operator by @​mikenairn in #​13
• Update base CSV, add release prep script and docs by @​mikenairn in #​21
• Remove metrics auth proxy by @​mikenairn in #​24
• add basic description by @​maleck13 in #​52
• Add external-dns(v0.14.0) as a dependency by @​mikenairn in #​43
• remove health checker by @​maleck13 in #​54
• Add e2e test suite by @​mikenairn in #​53
• add optional rootHost by @​maleck13 in #​55
• release: Document release process by @​mikenairn in #​58
• add owner ID to DNS Record spec by @​philbrookes in #​59
• state private zones as unsupported by @​maleck13 in #​62
• registry: Use txt registry for owned records by @​mikenairn in #​56
• ci: Enable CI jobs for GH merge queue by @​mikenairn in #​64
• Temporarily copy external dns plan and registry code by @​mikenairn in [#​67](https://r

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[konflux-staging]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.