DNS REQUEST: add CAA record

[jimangel]

It was requested to create CAA DNS records for k/website as a security best practices and, well, it's good to know what CAs can issue "official" certificates for public facing Kubernetes things.

More info in this PR: #1849. The PR covers kubernetes.io, not k8s.io, which we should also lock down in a similar manor.

/priority important-soon
/milestone v1.22
/cc @dims @ameukam @spiffxp @thockin

[spiffxp]

/milestone v1.23

[sftim]

/sig security
perhaps?

[spiffxp]

Bumping for recency because I'd like to see the PR merged in the next week

[spiffxp]

I have heard no response to the kubernetes.io PR merging, I think we're good to go for a similar PR for k8s.io @jimangel

[ameukam]

/milestone v1.24

[jimangel]

@spiffxp sorry I missed this, yep, I'll get a PR in for k8s.io soon (probably after 1.23 settles down).

/assign

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue or PR as fresh with /remove-lifecycle stale
• Mark this issue or PR as rotten with /lifecycle rotten
• Close this issue or PR with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[ameukam]

/remove-lifecycle stale

[ameukam]

@jimangel I think we can close this. It's been exactly 30 days since we added the CAA record for k8s.io. WDYT ?

[jimangel]

LGTM! Thanks!
/close

[k8s-ci-robot]

@jimangel: Closing this issue.

In response to this:

LGTM! Thanks!
/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.