DNS - Datum Cloud Docs

dns.networking.miloapis.com/v1alpha1

SPDX-License-Identifier: AGPL-3.0-only One-shot discovery/snapshot of existing DNS records for a DNSZone. On creation, a controller queries common RR types for the zone and stores them in .status for easy extraction/translation into DNSRecordSet objects. This object is write-once (status) and has no lifecycle beyond initial discovery. Package v1alpha1 contains API Schema definitions for the dns v1alpha1 API group.

Resource Types

DNSRecordSet
DNSRecordSetList
DNSZone
DNSZoneClass
DNSZoneClassList
DNSZoneDiscovery
DNSZoneDiscoveryList
DNSZoneList#### AAAARecordSpec_Appears in:_
RecordEntry

Field	Description	Default	Validation
`content` string			Format: ipv6

ALIASRecordSpecALIASRecordSpec is like CNAME but intended for providers that implement an ALIAS/ANAME-style record.

The content is a hostname (FQDN or relative) with an optional trailing dot.Appears in:

RecordEntry

Field	Description	Default	Validation
`content` string			MaxLength: 253 MinLength: 1 Pattern: `^([A-Za-z0-9_](?:[-A-Za-z0-9_]\{0,61\}[A-Za-z0-9_])?)(?:\.([A-Za-z0-9_](?:[-A-Za-z0-9_]\{0,61\}[A-Za-z0-9_])?))*\.?$`

ARecordSpec_Appears in:_

RecordEntry

Field	Description	Default	Validation
`content` string			Format: ipv4

CAARecordSpec_Appears in:_

RecordEntry

Field	Description	Validation
`flag` integer	0–255 flag	Maximum: 255 Minimum: 0
`tag` string	RFC-style tags: keep it simple: [a-z0-9]+	MinLength: 1 Pattern: `^[a-z0-9]+$`
`value` string		MinLength: 1

CNAMERecordSpec_Appears in:_

RecordEntry

Field	Description	Default	Validation
`content` string			MaxLength: 253 MinLength: 1 Pattern: `^([A-Za-z0-9_](?:[-A-Za-z0-9_]\{0,61\}[A-Za-z0-9_])?)(?:\.([A-Za-z0-9_](?:[-A-Za-z0-9_]\{0,61\}[A-Za-z0-9_])?))*\.?$`

DNSRecordSetDNSRecordSet is the Schema for the dnsrecordsets API_Appears in:_

DNSRecordSetList

Field	Description	Default	Validation
`apiVersion` string	`dns.networking.miloapis.com/v1alpha1`
`kind` string	`DNSRecordSet`
`metadata` ObjectMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`spec` DNSRecordSetSpec	spec defines the desired state of DNSRecordSet
`status` DNSRecordSetStatus	status defines the observed state of DNSRecordSet

DNSRecordSetListDNSRecordSetList contains a list of DNSRecordSet

Field	Description	Default	Validation
`apiVersion` string	`dns.networking.miloapis.com/v1alpha1`
`kind` string	`DNSRecordSetList`
`metadata` ListMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`items` DNSRecordSet array

DNSRecordSetSpecDNSRecordSetSpec defines the desired state of DNSRecordSet_Appears in:_

DNSRecordSet

Field	Description	Validation
`dnsZoneRef` LocalObjectReference	DNSZoneRef references the DNSZone (same namespace) this recordset belongs to.	Required: {}
`recordType` RRType	RecordType is the DNS RR type for this recordset.	Enum: [A AAAA ALIAS CNAME TXT MX SRV CAA NS SOA PTR TLSA HTTPS SVCB] Required: {}
`records` RecordEntry array	Records contains one or more owner names with values appropriate for the RecordType.	MinItems: 1

DNSRecordSetStatusDNSRecordSetStatus defines the observed state of DNSRecordSet.Appears in:

DNSRecordSet

Field	Description	Default	Validation
`conditions` Condition array	Conditions includes Accepted and Programmed readiness.
`recordSets` RecordSetStatus array	RecordSets captures per-owner (per name) status and conditions.

DNSZoneDNSZone is the Schema for the dnszones API_Appears in:_

DNSZoneList

Field	Description	Default	Validation
`apiVersion` string	`dns.networking.miloapis.com/v1alpha1`
`kind` string	`DNSZone`
`metadata` ObjectMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`spec` DNSZoneSpec	spec defines the desired state of DNSZone
`status` DNSZoneStatus	status defines the observed state of DNSZone

DNSZoneClassDNSZoneClass is the Schema for the dnszoneclasses API_Appears in:_

DNSZoneClassList

Field	Description	Default	Validation
`apiVersion` string	`dns.networking.miloapis.com/v1alpha1`
`kind` string	`DNSZoneClass`
`metadata` ObjectMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`spec` DNSZoneClassSpec	spec defines the desired state of DNSZoneClass
`status` DNSZoneClassStatus	status defines the observed state of DNSZoneClass

DNSZoneClassListDNSZoneClassList contains a list of DNSZoneClass

Field	Description	Default	Validation
`apiVersion` string	`dns.networking.miloapis.com/v1alpha1`
`kind` string	`DNSZoneClassList`
`metadata` ListMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`items` DNSZoneClass array

DNSZoneClassSpecDNSZoneClassSpec defines the desired state of DNSZoneClass_Appears in:_

DNSZoneClass

Field	Description	Validation
`controllerName` string	ControllerName identifies the downstream controller/backend implementation (e.g., “powerdns”, “hickory”).	Required: {}
`nameServerPolicy` NameServerPolicy	NameServerPolicy defines how nameservers are assigned for zones using this class.
`defaults` ZoneDefaults	Defaults provides optional default values applied to managed zones.

DNSZoneClassStatusDNSZoneClassStatus defines the observed state of DNSZoneClass.Appears in:

DNSZoneClass

Field	Description	Default	Validation
`conditions` Condition array	Conditions represent the current state of the resource. Common types include ”Accepted” and “Programmed” to standardize readiness reporting across controllers.

DNSZoneDiscoveryDNSZoneDiscovery is the Schema for the DNSZone discovery API.Appears in:

DNSZoneDiscoveryList

Field	Description	Default	Validation
`apiVersion` string	`dns.networking.miloapis.com/v1alpha1`
`kind` string	`DNSZoneDiscovery`
`metadata` ObjectMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`spec` DNSZoneDiscoverySpec	spec defines the desired target for discovery.
`status` DNSZoneDiscoveryStatus	status contains the discovered data (write-once).

DNSZoneDiscoveryListDNSZoneDiscoveryList contains a list of DNSZoneDiscovery

Field	Description	Default	Validation
`apiVersion` string	`dns.networking.miloapis.com/v1alpha1`
`kind` string	`DNSZoneDiscoveryList`
`metadata` ListMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`items` DNSZoneDiscovery array

DNSZoneDiscoverySpecDNSZoneDiscoverySpec defines the desired discovery target.Appears in:

DNSZoneDiscovery

Field	Description	Default	Validation
`dnsZoneRef` LocalObjectReference	DNSZoneRef references the DNSZone (same namespace) this discovery targets.		Required: {}

DNSZoneDiscoveryStatusDNSZoneDiscoveryStatus defines the observed snapshot of a DNS zone.Appears in:

DNSZoneDiscovery

Field	Description	Default	Validation
`conditions` Condition array	Conditions includes Accepted and Discovered.
`recordSets` DiscoveredRecordSet array	RecordSets is the set of discovered RRsets grouped by RecordType.

DNSZoneListDNSZoneList contains a list of DNSZone

Field	Description	Default	Validation
`apiVersion` string	`dns.networking.miloapis.com/v1alpha1`
`kind` string	`DNSZoneList`
`metadata` ListMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`items` DNSZone array

DNSZoneSpecDNSZoneSpec defines the desired state of DNSZone_Appears in:_

DNSZone

Field	Description	Default	Validation
`domainName` string	DomainName is the FQDN of the zone (e.g., “example.com”).		MaxLength: 253 MinLength: 1 Pattern: `^[a-z0-9]([-a-z0-9][a-z0-9])?(\.[a-z0-9]([-a-z0-9][a-z0-9])?)*$` Required: {}
`dnsZoneClassName` string	DNSZoneClassName references the DNSZoneClass used to provision this zone.		Required: {}

DNSZoneStatusDNSZoneStatus defines the observed state of DNSZone.Appears in:

DNSZone

Field	Description	Default	Validation
`nameservers` string array	Nameservers lists the active authoritative nameservers for this zone.
`recordCount` integer	RecordCount is the number of DNSRecordSet resources in this namespace that reference this zone.
`conditions` Condition array	Conditions tracks state such as Accepted and Programmed readiness.
`domainRef` DomainRef	DomainRef references the Domain this zone belongs to.

DiscoveredRecordSetDiscoveredRecordSet groups discovered records by type.Appears in:

DNSZoneDiscoveryStatus

Field	Description	Default	Validation
`recordType` RRType	RecordType is the DNS RR type for this recordset.		Enum: [A AAAA ALIAS CNAME TXT MX SRV CAA NS SOA PTR TLSA HTTPS SVCB] Required: {}
`records` RecordEntry array	Records contains one or more owner names with values appropriate for the RecordType. The RecordEntry schema is shared with DNSRecordSet for easy translation.

DomainRef_Appears in:_

DNSZoneStatus

Field	Description	Default	Validation
`name` string
`status` DomainRefStatus

DomainRefStatus_Appears in:_

DomainRef

Field	Description	Default	Validation
`nameservers` Nameserver array

HTTPSRecordSpec_Appears in:_

RecordEntry

Field	Description	Default	Validation
`priority` integer			Maximum: 65535 Minimum: 0
`target` string
`params` object (keys:string, values:string)

MXRecordSpec_Appears in:_

RecordEntry

Field	Description	Default	Validation
`preference` integer			Maximum: 65535 Minimum: 0
`exchange` string			MinLength: 1

NSRecordSpec_Appears in:_

RecordEntry

Field	Description	Default	Validation
`content` string	Require a hostname (FQDN or relative), allow optional trailing dot, no underscores. Labels: 1-63 chars, alphanum with interior hyphens, total length <=253.		MaxLength: 253 MinLength: 1 Pattern: `^([A-Za-z0-9](?:[A-Za-z0-9-]\{0,61\}[A-Za-z0-9])?)(?:\.([A-Za-z0-9](?:[A-Za-z0-9-]\{0,61\}[A-Za-z0-9])?))*\.?$`

NameServerPolicyNameServerPolicy specifies the policy for nameserver assignment.Appears in:

DNSZoneClassSpec

Field	Description	Default	Validation
`mode` NameServerPolicyMode	Mode defines which policy to use.		Enum: [Static]
`static` StaticNS	Static contains a static list of authoritative nameservers when Mode == “Static”.

NameServerPolicyMode

Underlying type: string__Validation:

Enum: [Static]

Appears in:

NameServerPolicy

PTRRecordSpec_Appears in:_

RecordEntry

Field	Description	Default	Validation
`content` string

RRType

Underlying type: string__Validation:

Enum: [A AAAA ALIAS CNAME TXT MX SRV CAA NS SOA PTR TLSA HTTPS SVCB]

Appears in:

DNSRecordSetSpec
DiscoveredRecordSet

| Field | Description | | A | | | AAAA | | | ALIAS | | | CNAME | | | TXT | | | MX | | | SRV | | | CAA | | | NS | | | SOA | | | PTR | | | TLSA | | | HTTPS | | | SVCB | |

RecordEntryRecordEntry represents one owner name and its values.Appears in:

DNSRecordSetSpec
DiscoveredRecordSet

Field	Description	Validation
`name` string	Name is the owner name (relative to the zone or FQDN).	MinLength: 1 Pattern: `^(@\|[A-Za-z0-9*._-]+)$` Required: {}
`ttl` integer	TTL optionally overrides TTL for this owner/RRset.
`a` ARecordSpec	Exactly one of the following type-specific fields should be set matching RecordType.
`aaaa` AAAARecordSpec
`cname` CNAMERecordSpec
`alias` ALIASRecordSpec
`ns` NSRecordSpec
`txt` TXTRecordSpec
`soa` SOARecordSpec
`caa` CAARecordSpec
`mx` MXRecordSpec
`srv` SRVRecordSpec
`tlsa` TLSARecordSpec
`https` HTTPSRecordSpec
`svcb` HTTPSRecordSpec
`ptr` PTRRecordSpec

RecordSetStatus_Appears in:_

DNSRecordSetStatus

Field	Description	Default	Validation
`name` string	Name is the owner name this status pertains to.
`conditions` Condition array	Conditions captures per-name readiness information such as RecordProgrammed.

SOARecordSpec_Appears in:_

RecordEntry

Field	Description	Default	Validation
`mname` string			MinLength: 1
`rname` string			MinLength: 1
`serial` integer
`refresh` integer
`retry` integer
`expire` integer
`ttl` integer

SRVRecordSpec_Appears in:_

RecordEntry

Field	Description	Default	Validation
`priority` integer			Maximum: 65535 Minimum: 0
`weight` integer			Maximum: 65535 Minimum: 0
`port` integer			Maximum: 65535 Minimum: 0
`target` string			MinLength: 1

StaticNSStaticNS lists static authoritative nameserver hostnames.Appears in:

NameServerPolicy

Field	Description	Default	Validation
`servers` string array

TLSARecordSpec_Appears in:_

RecordEntry

Field	Description	Default	Validation
`usage` integer
`selector` integer
`matchingType` integer
`certData` string

TXTRecordSpec

Appears in:

RecordEntry

Field	Description	Default	Validation
`content` string

ZoneDefaultsZoneDefaults holds optional default settings for zones.Appears in:

DNSZoneClassSpec

Field	Description	Default	Validation
`defaultTTL` integer	DefaultTTL is the default TTL applied to records when not otherwise specified.

Last modified on March 30, 2026

⌘I

​dns.networking.miloapis.com/v1alpha1

​Resource Types

​ALIASRecordSpecALIASRecordSpec is like CNAME but intended for providers that implement an ALIAS/ANAME-style record.

​ARecordSpec_Appears in:_

​CAARecordSpec_Appears in:_

​CNAMERecordSpec_Appears in:_

​DNSRecordSetDNSRecordSet is the Schema for the dnsrecordsets API_Appears in:_

​DNSRecordSetListDNSRecordSetList contains a list of DNSRecordSet

​DNSRecordSetSpecDNSRecordSetSpec defines the desired state of DNSRecordSet_Appears in:_

​DNSRecordSetStatusDNSRecordSetStatus defines the observed state of DNSRecordSet.Appears in:

​DNSZoneDNSZone is the Schema for the dnszones API_Appears in:_

​DNSZoneClassDNSZoneClass is the Schema for the dnszoneclasses API_Appears in:_

​DNSZoneClassListDNSZoneClassList contains a list of DNSZoneClass

​DNSZoneClassSpecDNSZoneClassSpec defines the desired state of DNSZoneClass_Appears in:_

​DNSZoneClassStatusDNSZoneClassStatus defines the observed state of DNSZoneClass.Appears in:

​DNSZoneDiscoveryDNSZoneDiscovery is the Schema for the DNSZone discovery API.Appears in:

​DNSZoneDiscoveryListDNSZoneDiscoveryList contains a list of DNSZoneDiscovery

​DNSZoneDiscoverySpecDNSZoneDiscoverySpec defines the desired discovery target.Appears in:

​DNSZoneDiscoveryStatusDNSZoneDiscoveryStatus defines the observed snapshot of a DNS zone.Appears in:

​DNSZoneListDNSZoneList contains a list of DNSZone

​DNSZoneSpecDNSZoneSpec defines the desired state of DNSZone_Appears in:_

​DNSZoneStatusDNSZoneStatus defines the observed state of DNSZone.Appears in:

​DiscoveredRecordSetDiscoveredRecordSet groups discovered records by type.Appears in:

​DomainRef_Appears in:_

​DomainRefStatus_Appears in:_

​HTTPSRecordSpec_Appears in:_

​MXRecordSpec_Appears in:_

​NSRecordSpec_Appears in:_

​NameServerPolicyNameServerPolicy specifies the policy for nameserver assignment.Appears in:

​NameServerPolicyMode

​PTRRecordSpec_Appears in:_

​RRType

​RecordEntryRecordEntry represents one owner name and its values.Appears in:

​RecordSetStatus_Appears in:_

​SOARecordSpec_Appears in:_

​SRVRecordSpec_Appears in:_

​StaticNSStaticNS lists static authoritative nameserver hostnames.Appears in:

​TLSARecordSpec_Appears in:_

​TXTRecordSpec

​ZoneDefaultsZoneDefaults holds optional default settings for zones.Appears in:

dns.networking.miloapis.com/v1alpha1

Resource Types

ALIASRecordSpecALIASRecordSpec is like CNAME but intended for providers that implement an ALIAS/ANAME-style record.

ARecordSpec_Appears in:_

CAARecordSpec_Appears in:_

CNAMERecordSpec_Appears in:_

DNSRecordSetDNSRecordSet is the Schema for the dnsrecordsets API_Appears in:_

DNSRecordSetListDNSRecordSetList contains a list of DNSRecordSet

DNSRecordSetSpecDNSRecordSetSpec defines the desired state of DNSRecordSet_Appears in:_

DNSRecordSetStatusDNSRecordSetStatus defines the observed state of DNSRecordSet.Appears in:

DNSZoneDNSZone is the Schema for the dnszones API_Appears in:_

DNSZoneClassDNSZoneClass is the Schema for the dnszoneclasses API_Appears in:_

DNSZoneClassListDNSZoneClassList contains a list of DNSZoneClass

DNSZoneClassSpecDNSZoneClassSpec defines the desired state of DNSZoneClass_Appears in:_

DNSZoneClassStatusDNSZoneClassStatus defines the observed state of DNSZoneClass.Appears in:

DNSZoneDiscoveryDNSZoneDiscovery is the Schema for the DNSZone discovery API.Appears in:

DNSZoneDiscoveryListDNSZoneDiscoveryList contains a list of DNSZoneDiscovery

DNSZoneDiscoverySpecDNSZoneDiscoverySpec defines the desired discovery target.Appears in:

DNSZoneDiscoveryStatusDNSZoneDiscoveryStatus defines the observed snapshot of a DNS zone.Appears in:

DNSZoneListDNSZoneList contains a list of DNSZone

DNSZoneSpecDNSZoneSpec defines the desired state of DNSZone_Appears in:_

DNSZoneStatusDNSZoneStatus defines the observed state of DNSZone.Appears in:

DiscoveredRecordSetDiscoveredRecordSet groups discovered records by type.Appears in:

DomainRef_Appears in:_

DomainRefStatus_Appears in:_

HTTPSRecordSpec_Appears in:_

MXRecordSpec_Appears in:_

NSRecordSpec_Appears in:_

NameServerPolicyNameServerPolicy specifies the policy for nameserver assignment.Appears in:

NameServerPolicyMode

PTRRecordSpec_Appears in:_

RRType

RecordEntryRecordEntry represents one owner name and its values.Appears in:

RecordSetStatus_Appears in:_

SOARecordSpec_Appears in:_

SRVRecordSpec_Appears in:_

StaticNSStaticNS lists static authoritative nameserver hostnames.Appears in:

TLSARecordSpec_Appears in:_

TXTRecordSpec

ZoneDefaultsZoneDefaults holds optional default settings for zones.Appears in: