CloudStack DNS framework - Integrate PowerDNS as first plugin by sudo87 · Pull Request #12737 · apache/cloudstack

sudo87 · 2026-03-03T11:49:04Z

Description

This PR introduces initial implementation for a plugin based DNS framework in Apache CloudStack. It enables both admin and end-users to manage DNS zones and record with external authoritative dns providers.

First supported DNS provider: PowerDNS

Github issue: #9958
Cwiki: https://cwiki.apache.org/confluence/display/CLOUDSTACK/DNS+Framework+and+Plugins
Doc PR: apache/cloudstack-documentation#646

Terminology:

DNS Server: integration between CloudStack and DNS provider
DNS Zone: Domain scope
DNS Record: mapping entry with dns zones (e.g. mapping between names and ip)

API Changes

There are following APIs have been introduced to support DNS management from CloudStack and Instance auto registration:

[add/update/delete]DnsServer
[create/update/delete]DnsZone
[create/delete]DnsRecord
[associate/disassociate]DnsZoneToNetwork

UI changes

DNS Server subsection under Network
DNS Zone subsection under Network
DNS records management tab in the Dns Zone

Supported network for Auto Registration: Shared network

Types of changes

Breaking change (fix or feature that would cause existing functionality to change)
New feature (non-breaking change which adds functionality)
Bug fix (non-breaking change which fixes an issue)
Enhancement (improves an existing feature and functionality)
Cleanup (Code refactoring and cleanup, that may add test cases)
Build/CI
Test (unit or integration test code)

Feature/Enhancement Scale or Bug Severity

Feature/Enhancement Scale

Major
Minor

Bug Severity

Screenshots (if appropriate):

How Has This Been Tested?

How did you try to break this feature and the system with this change?

…teDnsServer

2. added relevant changes in dao and vo 3. worked on creatednszone, integration with mgr 4. powerdns create zone api call

1. creatednszone 2. listdnszone 3. updatednszone 4. deletednszone

1. Add dns server 2. create zone 3. add records 4. verify in powerdns 5. verify using dig

1. Registerdnsrecordforvm api 2. removednsrecordforvm api 3. cleanup; fixed license, dao logic

1. refactored client 2. added exceptions 3. enhanced updateZone 4. ownership check for deleteDnsServer

1. port for dns_server 2. remove hard coded localhost for server_id 3. resolve and store server id if not passed in the api request 4. restrict public dns_server for domain admins and admins

…n svc and handle dot version in client

…elete events 2. add dnsrecordurl in nic_details table 3. add dnsrecordurl in vm response

codecov · 2026-03-03T12:02:37Z

Codecov Report

❌ Patch coverage is 74.11538% with 673 lines in your changes missing coverage. Please review.
✅ Project coverage is 19.00%. Comparing base (6bc83a3) to head (5451815).

Files with missing lines	Patch %	Lines
.../apache/cloudstack/dns/DnsProviderManagerImpl.java	77.90%	125 Missing and 54 partials ⚠️
...g/apache/cloudstack/dns/dao/NicDnsJoinDaoImpl.java	0.00%	56 Missing ⚠️
...ava/org/apache/cloudstack/dns/DnsProviderUtil.java	60.29%	37 Missing and 17 partials ⚠️
...apache/cloudstack/dns/powerdns/PowerDnsClient.java	79.43%	23 Missing and 28 partials ⚠️
...rg/apache/cloudstack/dns/dao/DnsServerDaoImpl.java	56.86%	43 Missing and 1 partial ⚠️
...rg/apache/cloudstack/dns/vo/DnsServerDetailVO.java	0.00%	37 Missing ⚠️
...ava/org/apache/cloudstack/dns/vo/NicDnsJoinVO.java	0.00%	33 Missing ⚠️
.../src/main/java/com/cloud/vm/UserVmManagerImpl.java	48.07%	26 Missing and 1 partial ⚠️
...n/java/org/apache/cloudstack/dns/vo/DnsZoneVO.java	53.57%	24 Missing and 2 partials ⚠️
...pache/cloudstack/api/response/DnsZoneResponse.java	55.81%	18 Missing and 1 partial ⚠️
... and 35 more

Additional details and impacted files

@@             Coverage Diff              @@
##               main   #12737      +/-   ##
============================================
+ Coverage     18.75%   19.00%   +0.24%     
- Complexity    17966    18328     +362     
============================================
  Files          6160     6216      +56     
  Lines        552578   555601    +3023     
  Branches      67348    67732     +384     
============================================
+ Hits         103660   105569    +1909     
- Misses       437512   438508     +996     
- Partials      11406    11524     +118

Flag	Coverage Δ
uitests	`3.49% <ø> (-0.04%)`	⬇️
unittests	`20.22% <74.11%> (+0.27%)`	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions · 2026-03-09T16:13:30Z

This pull request has merge conflicts. Dear author, please fix the conflicts and sync your branch with the base branch.

sudo87 · 2026-05-07T11:33:40Z

@blueorangutan package

blueorangutan · 2026-05-07T11:36:05Z

@sudo87 a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

blueorangutan · 2026-05-07T12:26:13Z

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 17754

blueorangutan · 2026-05-08T20:45:15Z

[SF] Trillian test result (tid-16048)
Environment: kvm-ol8 (x2), zone: Advanced Networking with Mgmt server ol8
Total time taken: 51134 seconds
Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr12737-t16048-kvm-ol8.zip
Smoke tests completed. 151 look OK, 1 have errors, 0 did not run
Only failed and skipped tests results shown below:

Test	Result	Time (s)	Test File
test_create_pvlan_network	`Error`	0.14	test_pvlan.py

github-actions · 2026-05-22T11:42:32Z

This pull request has merge conflicts. Dear author, please fix the conflicts and sync your branch with the base branch.

sudo87 · 2026-05-25T09:32:47Z

@blueorangutan package

blueorangutan · 2026-05-25T09:34:05Z

@sudo87 a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

blueorangutan · 2026-05-25T10:24:01Z

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 18013

@finish

- port validation added - NPE fixes - removed hard coded wait in integration test - DNSRecordsTab: client side pagination, column sorting and search - UX improvement for CreateDnsRecord, DeleteDnsZone and DeleteDnsServer - All DNS forms: wire @finish and htmltype

sudo87 · 2026-06-05T06:13:43Z

@blueorangutan package

blueorangutan · 2026-06-05T06:16:05Z

@sudo87 a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

blueorangutan · 2026-06-05T07:07:08Z

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 18159

github-actions · 2026-06-08T07:08:07Z

This pull request has merge conflicts. Dear author, please fix the conflicts and sync your branch with the base branch.

vladimirpetrov · 2026-06-09T07:39:53Z

@blueorangutan test

blueorangutan · 2026-06-09T07:42:04Z

@vladimirpetrov a [SL] Trillian-Jenkins test job (ol8 mgmt + kvm-ol8) has been kicked to run smoke tests

blueorangutan · 2026-06-09T23:27:08Z

[SF] Trillian test result (tid-16269)
Environment: kvm-ol8 (x2), zone: Advanced Networking with Mgmt server ol8
Total time taken: 53887 seconds
Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr12737-t16269-kvm-ol8.zip
Smoke tests completed. 149 look OK, 3 have errors, 0 did not run
Only failed and skipped tests results shown below:

Test	Result	Time (s)	Test File
ContextSuite context=TestClusterDRS>:setup	`Error`	0.00	test_cluster_drs.py
ContextSuite context=TestCloudStackDNSFramework>:setup	`Error`	0.00	test_dns_framework_powerdns.py
test_01_redundant_vpc_site2site_vpn	`Failure`	412.00	test_vpc_vpn.py

sudo87 · 2026-06-10T03:07:06Z

@blueorangutan package

blueorangutan · 2026-06-10T03:08:04Z

@sudo87 a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

blueorangutan · 2026-06-10T04:00:46Z

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 18211

blueorangutan · 2026-06-10T10:03:52Z

[SF] Trillian test result (tid-16275)
Environment: kvm-ol8 (x2), zone: Advanced Networking with Mgmt server ol8
Total time taken: 4491 seconds
Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr12737-t16275-kvm-ol8.zip
Smoke tests completed. 10 look OK, 142 have errors, 0 did not run
Only failed and skipped tests results shown below:

Test	Result	Test File
runTest	`Error`	test_2fa.py
runTest	`Error`	test_account_access.py
runTest	`Error`	test_accounts.py
runTest	`Error`	test_affinity_groups_projects.py
runTest	`Error`	test_affinity_groups.py
runTest	`Error`	test_annotations.py
runTest	`Error`	test_async_job.py
runTest	`Error`	test_attach_multiple_volumes.py
runTest	`Error`	test_backup_recovery_dummy.py
runTest	`Error`	test_backup_recovery_nas.py
runTest	`Error`	test_backup_recovery_veeam.py
runTest	`Error`	test_certauthority_root.py
runTest	`Error`	test_cluster_drs.py
runTest	`Error`	test_console_endpoint.py
runTest	`Error`	test_create_list_domain_account_project.py
runTest	`Error`	test_create_network.py
runTest	`Error`	test_deploy_vgpu_enabled_vm.py
runTest	`Error`	test_deploy_virtio_scsi_vm.py
runTest	`Error`	test_deploy_vm_extra_config_data.py
runTest	`Error`	test_deploy_vm_iso.py
runTest	`Error`	test_deploy_vm_iso_uefi.py
runTest	`Error`	test_deploy_vm_root_resize.py
runTest	`Error`	test_deploy_vms_in_parallel.py
runTest	`Error`	test_deploy_vms_with_varied_deploymentplanners.py
runTest	`Error`	test_deploy_vm_with_userdata.py
runTest	`Error`	test_diagnostics.py
runTest	`Error`	test_direct_download.py
runTest	`Error`	test_disk_offerings.py
runTest	`Error`	test_disk_provisioning_types.py
runTest	`Error`	test_domain_disk_offerings.py
runTest	`Error`	test_domain_network_offerings.py
runTest	`Error`	test_domain_service_offerings.py
runTest	`Error`	test_domain_vpc_offerings.py
runTest	`Error`	test_enable_account_settings_for_domain.py
runTest	`Error`	test_events_resource.py
runTest	`Error`	test_extension_custom_action_lifecycle.py
runTest	`Error`	test_extension_custom.py
runTest	`Error`	test_extension_lifecycle.py
runTest	`Error`	test_gateway_on_shared_networks.py
runTest	`Error`	test_global_acls.py
runTest	`Error`	test_global_settings.py
runTest	`Error`	test_guest_os.py
runTest	`Error`	test_guest_vlan_range.py
runTest	`Error`	test_host_control_state.py
runTest	`Error`	test_hostha_simulator.py
runTest	`Error`	test_host_ping.py
runTest	`Error`	test_image_store_object_migration.py
runTest	`Error`	test_import_unmanage_volumes.py
runTest	`Error`	test_internal_lb.py
runTest	`Error`	test_ipv4_routing.py
runTest	`Error`	test_ipv6_infra.py
runTest	`Error`	test_iso.py
runTest	`Error`	test_kubernetes_clusters.py
runTest	`Error`	test_kubernetes_supported_versions.py
runTest	`Error`	test_list_accounts.py
runTest	`Error`	test_list_disk_offerings.py
runTest	`Error`	test_list_domains.py
runTest	`Error`	test_list_hosts.py
runTest	`Error`	test_list_ids_parameter.py
runTest	`Error`	test_list_service_offerings.py
runTest	`Error`	test_list_storage_pools.py
runTest	`Error`	test_list_volumes.py
runTest	`Error`	test_loadbalance.py
runTest	`Error`	test_login.py
runTest	`Error`	test_metrics_api.py
runTest	`Error`	test_migration.py
runTest	`Error`	test_ms_maintenance_and_safe_shutdown.py
runTest	`Error`	test_multipleips_per_nic.py
runTest	`Error`	test_nested_virtualization.py
runTest	`Error`	test_network_acl.py
runTest	`Error`	test_network_ipv6.py
runTest	`Error`	test_network_permissions.py
runTest	`Error`	test_network.py
runTest	`Error`	test_projects.py
runTest	`Error`	test_nic_adapter_type.py
runTest	`Error`	test_nic.py
runTest	`Error`	test_non_contigiousvlan.py
runTest	`Error`	test_nonstrict_affinity_group.py
runTest	`Error`	test_outofbandmanagement_nestedplugin.py
runTest	`Error`	test_outofbandmanagement.py
runTest	`Error`	test_over_provisioning.py
runTest	`Error`	test_password_server.py
runTest	`Error`	test_persistent_network.py
runTest	`Error`	test_portable_publicip.py
runTest	`Error`	test_portforwardingrules.py
runTest	`Error`	test_primary_storage.py
runTest	`Error`	test_primary_storage_scope.py
runTest	`Error`	test_privategw_acl_ovs_gre.py
runTest	`Error`	test_privategw_acl.py
runTest	`Error`	test_public_ip_range.py
runTest	`Error`	test_purge_expunged_vms.py
runTest	`Error`	test_pvlan.py
runTest	`Error`	test_quarantined_ips.py
runTest	`Error`	test_regions.py
runTest	`Error`	test_register_userdata.py
runTest	`Error`	test_reset_configuration_settings.py
runTest	`Error`	test_reset_vm_on_reboot.py
runTest	`Error`	test_resource_accounting.py
runTest	`Error`	test_resource_detail.py
runTest	`Error`	test_resource_names.py
runTest	`Error`	test_restore_vm.py
runTest	`Error`	test_router_dhcphosts.py
runTest	`Error`	test_router_dns.py
runTest	`Error`	test_router_dnsservice.py
runTest	`Error`	test_routers_iptables_default_policy.py
runTest	`Error`	test_routers_network_ops.py
runTest	`Error`	test_routers.py
runTest	`Error`	test_scale_vm.py
runTest	`Error`	test_secondary_storage.py
runTest	`Error`	test_service_offerings.py
runTest	`Error`	test_set_sourcenat.py
runTest	`Error`	test_sharedfs_lifecycle.py
runTest	`Error`	test_snapshots.py
runTest	`Error`	test_ssl_offloading.py
runTest	`Error`	test_ssvm.py
runTest	`Error`	test_vm_autoscaling.py
runTest	`Error`	test_storage_policy.py
runTest	`Error`	test_systemvm_userdata.py
runTest	`Error`	test_templates.py
runTest	`Error`	test_update_security_group.py
runTest	`Error`	test_usage_events.py
runTest	`Error`	test_usage.py
runTest	`Error`	test_vm_deployment_planner.py
runTest	`Error`	test_vm_life_cycle.py
runTest	`Error`	test_vm_lifecycle_unmanage_import.py
runTest	`Error`	test_vm_lifecycle_unmanage_kvm_import.py
runTest	`Error`	test_vm_lifecycle_with_snapshot_or_volume.py
runTest	`Error`	test_vm_schedule.py
runTest	`Error`	test_vm_snapshot_kvm.py
runTest	`Error`	test_vm_snapshots.py
runTest	`Error`	test_vm_strict_host_tags.py
runTest	`Error`	test_vnf_templates.py
runTest	`Error`	test_volumes.py
runTest	`Error`	test_vpc_conserve_mode.py
runTest	`Error`	test_vpc_ipv6.py
runTest	`Error`	test_vpc_redundant.py
runTest	`Error`	test_vpc_router_nics.py
runTest	`Error`	test_vpc_vpn.py
runTest	`Error`	test_webhook_delivery.py
runTest	`Error`	test_webhook_lifecycle.py
runTest	`Error`	test_host_maintenance.py
runTest	`Error`	test_hostha_kvm.py

sudo87 added 22 commits February 9, 2026 10:52

wip: dns provider framework

7b9fc0e

add db schema, vo and dao classes

b2d597c

add powerdns module in plugins

6ef7f9b

Changes done to AddDnsServer, ListDnsServer, DeleteDnsServer and Upda…

9911c28

…teDnsServer

1. Setup Dns zone schema

df21318

2. added relevant changes in dao and vo 3. worked on creatednszone, integration with mgr 4. powerdns create zone api call

following dns zone apis are integrated:

f29b8be

1. creatednszone 2. listdnszone 3. updatednszone 4. deletednszone

Tested following flow:

9b77c37

1. Add dns server 2. create zone 3. add records 4. verify in powerdns 5. verify using dig

Add associate and disassociate zone to network APIs

c5972ae

following things are done:

99f8c7d

1. Registerdnsrecordforvm api 2. removednsrecordforvm api 3. cleanup; fixed license, dao logic

add missing license, cleanup, log std

e011ce1

following changes are done:

4a9f66d

1. refactored client 2. added exceptions 3. enhanced updateZone 4. ownership check for deleteDnsServer

include:

c64cf81

1. port for dns_server 2. remove hard coded localhost for server_id 3. resolve and store server id if not passed in the api request 4. restrict public dns_server for domain admins and admins

normalize dns zone and record in svc layer, always use dotless data i…

4df11a4

…n svc and handle dot version in client

enable apis for all roles

857436e

add ACL annotation, entitytype, minor cleanup

582b687

acl related changes, fixes, mistakes

add7763

fixes related to acl, dao

1fe79bd

add views for dns_server and dns_zone

6ca9d5a

Add Listener for VM lifecycle to add dnsrecords for associated dns zone

1c1eef3

1. implement event processing for vm start/stop/destroy, nic create/d…

caf8533

…elete events 2. add dnsrecordurl in nic_details table 3. add dnsrecordurl in vm response

starting on ui work

856158c

resolve merge conflict with main

928db65

boring-cyborg Bot added the component:api label Mar 3, 2026

fix lint issue

369bb16

winterhazel added this to the 4.23.0 milestone Mar 3, 2026

fix list dnsservers api, ui screens for dns servers, generate events

0df50ce

github-actions Bot added the status:has-conflicts label Mar 9, 2026

UI related work and fixes in updateDnsServer cmd

a9afbce

resolve merge conflict

4385101

sudo87 removed the status:has-conflicts label May 7, 2026

github-actions Bot added the status:has-conflicts label May 22, 2026

merge main changes

2aae36d

github-actions Bot removed the status:has-conflicts label May 25, 2026

github-actions Bot mentioned this pull request Jun 5, 2026

[repo-status] Daily Status Report – June 5, 2026 #13360

Closed

github-actions Bot added the status:has-conflicts label Jun 8, 2026

merge main

5451815

github-actions Bot removed the status:has-conflicts label Jun 9, 2026

github-actions Bot mentioned this pull request Jun 9, 2026

[repo-status] Daily Status Report – June 9, 2026 #13386

Open

Conversation

sudo87 commented Mar 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Types of changes

Feature/Enhancement Scale or Bug Severity

Feature/Enhancement Scale

Bug Severity

Screenshots (if appropriate):

How Has This Been Tested?

How did you try to break this feature and the system with this change?

Uh oh!

codecov Bot commented Mar 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions Bot commented Mar 9, 2026

Uh oh!

sudo87 commented May 7, 2026

Uh oh!

blueorangutan commented May 7, 2026

Uh oh!

blueorangutan commented May 7, 2026

Uh oh!

blueorangutan commented May 8, 2026

Uh oh!

github-actions Bot commented May 22, 2026

Uh oh!

sudo87 commented May 25, 2026

Uh oh!

blueorangutan commented May 25, 2026

Uh oh!

blueorangutan commented May 25, 2026

Uh oh!

sudo87 commented Jun 5, 2026

Uh oh!

blueorangutan commented Jun 5, 2026

Uh oh!

blueorangutan commented Jun 5, 2026

Uh oh!

github-actions Bot commented Jun 8, 2026

Uh oh!

vladimirpetrov commented Jun 9, 2026

Uh oh!

blueorangutan commented Jun 9, 2026

Uh oh!

blueorangutan commented Jun 9, 2026

Uh oh!

sudo87 commented Jun 10, 2026

Uh oh!

blueorangutan commented Jun 10, 2026

Uh oh!

blueorangutan commented Jun 10, 2026

Uh oh!

blueorangutan commented Jun 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

sudo87 commented Mar 3, 2026 •

edited

Loading

codecov Bot commented Mar 3, 2026 •

edited

Loading