summaryrefslogtreecommitdiff
path: root/src/converge.rs
diff options
context:
space:
mode:
authorOwen Jacobson <owen@grimoire.ca>2023-10-31 22:34:22 -0400
committerOwen Jacobson <owen@grimoire.ca>2023-10-31 22:40:50 -0400
commitcfb0e6d85381ed805ec02969b255322a138c790b (patch)
treea4e475d6968597ead475730e2bd8bfcd6ead4eae /src/converge.rs
parent288205e302d9f6afa06b8602184e983d2080a5b6 (diff)
Only manage the actual DNS entry named by the `dns-name` argument.
The original version of this program (written for another project) laid claim to the entire subtree under the target DNS name, as part of a broader feature of adding both per-instance hostnames and a per-ASG hostname with multiple records. This program doesn't do that; however, I forgot to remove this behaviour when porting the code. This was caught in production, of course, though without any damage. An attempt to manage `grimoire.ca` failed because the AWS identity it ran under didn't have permission to do anything other than modify A and AAAA records.
Diffstat (limited to 'src/converge.rs')
-rw-r--r--src/converge.rs2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/converge.rs b/src/converge.rs
index 073e9e6..a858347 100644
--- a/src/converge.rs
+++ b/src/converge.rs
@@ -47,7 +47,7 @@ where
&live_instance_ids,
aws_context
),
- zone_suffix_recordsets(dns_name, zone_id, aws_context),
+ zone_suffix_recordsets(aws_context, zone_id, dns_name),
)?;
let remove_records = actual_records.difference(&intended_records);