dnscontrol icon indicating copy to clipboard operation
dnscontrol copied to clipboard

Preview does not detect mismatch in zone id

Open misilot opened this issue 5 months ago • 1 comments

Describe the bug Preview does not detect a mismatch in Zone ID with R53_ALIAS records.

To Reproduce Steps to reproduce the behavior:

  1. Create a zone file for a domain.
  2. Create R53_ALIAS record(s) with that Zone's ID.
  3. push to create records
  4. Create a zone file for the same domain in another AWS account
  5. Add the DNS provider for the new zone to your D() records
  6. Run dnscontrol preview (seems happy)
  7. Push to production
  8. See error

Expected behavior Detect that the Zone ID does match the zone it is trying to push records to, and throw error during preview.

Does DNSControl have a rollback feature? As it did update the nameserver records (before I realized I needed to specify ,0 in the DNS provider causing an short outage of DNS for us.

DNS Provider

  • Route53

Additional context

FAILURE! operation error Route 53: ChangeResourceRecordSets, https response error StatusCode: 400, RequestID: 3c0a8ea1-f4f4-4b57-8d04-86c96245202e, InvalidChangeBatch: [RRSet with DNS name archivematica.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., RRSet with DNS name spaceassessment.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., RRSet with DNS name test-arclight.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., RRSet with DNS name test-grima.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., RRSet with DNS name almaftp.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., RRSet with DNS name almainventory.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., RRSet with DNS name analytics.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., RRSet with DNS name arc.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., RRSet with DNS name atom.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., RRSet with DNS name aws-mon.example.org., type CNAME contains an alias target that contains a hosted zone Z3DL0V8AMVIACN that is an invalid alias target., ... 37 more exception(s).]

misilot avatar Jul 01 '25 19:07 misilot

Friendly ping @tresni, the maintainer of the Route53 provider.

cafferata avatar Aug 09 '25 21:08 cafferata