feat: Define private DNS access and publication APIs

.github/workflows/e2e.yml

@@ -5,8 +5,6 @@ on:
     branches:
       - main
   pull_request:
-    branches:
-      - main
 
 jobs:
   e2e:

.internal-dns-e2e/kubernetes/image.id

@@ -0,0 +1 @@
+sha256:5fc2d91b586be5a4bf3a19e695a002a67b2cda673fe992fc25ab6a402c420db8

.internal-dns-e2e/kubernetes/kind-config.yaml

@@ -0,0 +1,39 @@
+kind: Cluster
+apiVersion: kind.x-k8s.io/v1alpha4
+nodes:
+  - role: control-plane
+    # No extraPortMappings: NodePorts for Envoy Gateway/Grafana are allocated
+    # dynamically (see components/envoy-gateway-operator and
+    # components/observability), so multiple clusters can run concurrently on
+    # the same Docker host without colliding on fixed host ports. Reach
+    # services via `kubectl port-forward` or the kind Docker network.
+
+    # Add audit log configurations
+    kubeadmConfigPatches:
+    - |
+      kind: ClusterConfiguration
+      apiServer:
+          extraArgs:
+            audit-policy-file: /etc/kubernetes/policies/audit-policy.yaml
+            audit-log-path: /var/log/kubernetes/kube-apiserver-audit.log
+          extraVolumes:
+            - name: audit-policies
+              hostPath: /etc/kubernetes/policies
+              mountPath: /etc/kubernetes/policies
+              readOnly: true
+              pathType: "DirectoryOrCreate"
+            - name: "audit-logs"
+              hostPath: "/var/log/kubernetes"
+              mountPath: "/var/log/kubernetes"
+              readOnly: false
+              pathType: DirectoryOrCreate
+    # mount the local file on the control plane
+    extraMounts:
+    # The filepath is dynamically set via REPO_DIR environment variable by the Taskfile.
+    # When running in test-infra repo: ./cluster/audit-policy.yaml
+    # When running from external repo: ./.test-infra/cluster/audit-policy.yaml
+    - hostPath: /tmp/datum-internal-dns-audit/audit-policy.yaml
+      containerPath: /etc/kubernetes/policies/audit-policy.yaml
+      readOnly: true
+networking:
+  ipFamily: dual