viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[ci skip] technitium: add primary-secondary DNS HA with AXFR zone replication

Browse source 
Secondary instance on a separate node replicates all zones from primary via
zone transfer. LoadBalancer routes DNS queries to both pods. PDB ensures at
least 1 DNS pod survives voluntary disruptions. Setup job automates zone
transfer enablement and secondary zone creation via Technitium REST API.
This commit is contained in:
Viktor Barzin 2026-02-28 14:14:20 +00:00
parent 3ebf4557f5
commit 0274cc0722
4 changed files with 312 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

43
stacks/platform/modules/technitium/main.tf
View file

@ -4,6 +4,8 @@ variable "homepage_token" {}
variable "technitium_db_password" {}
variable "nfs_server" { type = string }
variable "mysql_host" { type = string }
variable "technitium_username" { type = string }
variable "technitium_password" { type = string }
resource "kubernetes_namespace" "technitium" {
metadata {
@ -91,7 +93,11 @@ resource "kubernetes_deployment" "technitium" {
}
spec {
strategy {
type = "Recreate"
type = "RollingUpdate"
rolling_update {
max_unavailable = "0"
max_surge = "1"
}
}
# replicas = 1
selector {
@ -107,12 +113,13 @@ resource "kubernetes_deployment" "technitium" {
"diun.include_tags" = "latest"
}
labels = {
app = "technitium"
app = "technitium"
"dns-server" = "true"
}
}
spec {
# Prefer nodes running Traefik for network locality
affinity {
# Prefer nodes running Traefik for network locality
pod_affinity {
preferred_during_scheduling_ignored_during_execution {
weight = 100
@ -128,6 +135,19 @@ resource "kubernetes_deployment" "technitium" {
}
}
}
# Spread DNS pods across nodes for HA
pod_anti_affinity {
required_during_scheduling_ignored_during_execution {
label_selector {
match_expressions {
key = "dns-server"
operator = "In"
values = ["true"]
}
}
topology_key = "kubernetes.io/hostname"
}
}
}
container {
image = "technitium/dns-server:latest"
@ -151,6 +171,20 @@ resource "kubernetes_deployment" "technitium" {
port {
container_port = 80
}
liveness_probe {
tcp_socket {
port = 53
}
initial_delay_seconds = 10
period_seconds = 10
}
readiness_probe {
tcp_socket {
port = 53
}
initial_delay_seconds = 5
period_seconds = 5
}
volume_mount {
mount_path = "/etc/dns"
name = "nfs-config"
@ -184,7 +218,6 @@ resource "kubernetes_deployment" "technitium" {
}
}
resource "kubernetes_service" "technitium-web" {
metadata {
name = "technitium-web"
@ -234,7 +267,7 @@ resource "kubernetes_service" "technitium-dns" {
}
external_traffic_policy = "Local"
selector = {
app = "technitium"
"dns-server" = "true"
}
}
}