Skip to content

Commit d4c8a7f

Browse files
markus-hentschfkr
authored andcommitted
Demote some guidelines from MUST to SHOULD
... as a result of the recent Lean Operator Coffee discussion Signed-off-by: Markus Hentsch <[email protected]>
1 parent 61de58d commit d4c8a7f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Standards/scs-01xx-v1-dns.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -123,7 +123,7 @@ The *DNS server setting* refers to the following:
123123

124124
#### DNS Extensions
125125

126-
In the Networking API, the "dns-integration" extension MUST be enabled to offer internal DNS resolution.
126+
In the Networking API, the "dns-integration" extension SHOULD be enabled to offer internal DNS resolution.
127127

128128
For Neutron, this can implemented by enabling one of the following extension drivers:
129129

@@ -153,7 +153,7 @@ All guidelines above still apply.
153153

154154
When providing a service like Designate, it MUST be ensured that threats like [DNS Zone Squatting](https://docs.openstack.org/designate/2024.1/admin/production-guidelines.html#dns-zone-squatting) and [DNS Cache Poisoning](https://docs.openstack.org/designate/2024.1/admin/production-guidelines.html#dns-cache-poisoning) are considered and mitigated where possible.
155155

156-
In the Networking API, the "dns-domain-ports" extension MUST be enabled to offer the full range of DNS record settings for both ports and networks.
156+
In the Networking API, the "dns-domain-ports" extension SHOULD be enabled to offer the full range of DNS record settings for both ports and networks.
157157
This is implemented by the `dns_domain_ports` Neutron extension driver for the ML2 plugin.
158158
See the Internal DNS section above for an example on how to enable an extension driver.
159159

0 commit comments

Comments
 (0)