Designate

OpenKeel implementation in Go of OpenStack Designate (DNS as a Service), generated from the reverse-specification of branch stable/2026.2 by the generate-go-from-spec skill. It replaces the Python service without its clients noticing (python-designateclient and its OSC plugin, Neutron's DNS driver, Heat's OS::Designate::*, Skyline): same 78 routes, status codes, {code, type, message, request_id} error bodies and policies, writes answered 202 PENDING. What is reproduced and what differs is in docs/CONFORMANCE.md; the security checklist is in docs/SECURITY.md.

DNS publication is Kubernetes-native: zones are created through the DNS server's API (PowerDNS), recordsets become ExternalDNS DNSEndpoint custom resources, and a reconciler reports ACTIVE/ERROR by querying the authoritative servers. designate-worker, designate-producer and designate-mdns are replaced by that reconciler; designate-central runs in-process (no RPC).

• Go module: github.com/openkeel/openkeel-designate
• Binaries (one image):
  • designate-api: API on port 9001, health and metrics on 9090, -migrate for the migration Job;
  • designate-reconciler: pushes zones (PowerDNS API + DNSEndpoints), polls the servers, purges deleted zones; one active replica (Lease);
  • designate-sink: Nova and Neutron notifications to managed records (optional, RabbitMQ);
  • designate-manage: database sync, pool update --file pools.yaml, pool show-config.
• Configuration: YAML, see config/config.example.yaml
• Setting up a development environment, the database and the tests: docs/GETTING-STARTED.md
• Database schema, migrations and upgrades: docs/DATABASE.md