adding CAA record

kubernetes · Mar 31, 2021 · 396c9d4 · 396c9d4
1 parent 2781a86
commit 396c9d4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/dns/zone-configs/kubernetes.io._0_base.yaml b/dns/zone-configs/kubernetes.io._0_base.yaml
@@ -18,6 +18,10 @@
       preference: 10
     - exchange: alt4.aspmx.l.google.com.
       preference: 10
+  - type: CAA # Which CA's can issue certs for the domain
+    values:
+    - 0 issue \"pki.goog\"
+    - 0 issue \"letsencrypt.org\"
   - type: TXT
     values:
     - google-site-verification=oPORCoq9XU6CmaR7G_bV00CLmEz-wLGOL7SXpeEuTt8