rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Restore CAA lookup timeout in provision worker

Browse Source 
Keep the previous per-lookup dnsExchangeTimeout around CheckCAA
so rebased dnsclient calls do not drop main's deadline.

Signed-off-by: Cursor Agent <cursoragent@cursor.com>

Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>
This commit is contained in:
Cursor Agent
2026-07-24 20:20:16 +00:00
committed by Bryan Frimin
parent 64ef051d18
commit 6a1f6d9273
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
pkg/certmanager/provision_worker.go
View File

@@ -348,7 +348,10 @@ func (h *beginChallengeHandler) loadSkipDNSChecks(ctx context.Context, hostname
} }
func (h *beginChallengeHandler) checkCAARecords(ctx context.Context, hostname string) error { func (h *beginChallengeHandler) checkCAARecords(ctx context.Context, hostname string) error {
err := h.dnsClient.CheckCAA(ctx, hostname, h.caaIssuerDomain) dnsCtx, cancel := context.WithTimeout(ctx, dnsExchangeTimeout)
defer cancel()
err := h.dnsClient.CheckCAA(dnsCtx, hostname, h.caaIssuerDomain)
if err == nil { if err == nil {
return nil return nil
} }