Skip to content

docs(platform): verify domain ownership before attaching custom domains - #55

Merged
swkeever merged 3 commits into
mainfrom
skeever/custom-domain-ownership
Oct 9, 2026
Merged

swkeever merged 3 commits into
mainfrom
skeever/custom-domain-ownership

Conversation

@swkeever

@swkeever swkeever commented Oct 7, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Teaches agents the custom-domain ownership flow: a frontend serves a custom domain only once the account has verified that hostname or a domain above it with a DNS TXT record.

  • volcano-platform/SKILL.md: a "Custom domains (cloud only)" section covering volcano cloud domains verify|list, relaying the exact record the CLI prints (only the user can publish DNS), and how each TLS mode reacts to an unverified hostname: a BYOC attach (domain create or tls.mode: byoc) fails with the record, while a tls.mode: managed entry deploys, holds the hostname, and lists the record in volcano cloud frontends domain get. Notes that volcano cloud domains needs a volcano login session.
  • AGENTS.md: adds volcano cloud domains to the command surface, and verify/remove to the confirm-first account changes.

Commands, flags, and output were checked against volcano-cli v0.43.2 (internal/cmd/domains, internal/api/errors.go, internal/output/frontends.go) and the managed/BYOC behavior against volcano-hosting v0.29.0 (internal/frontenddomains, docs/public/frontends/domain-verification.md).

node scripts/check-skills.mjs and node --test tests/cli-setup.test.mjs pass.

Order

The prerequisite has shipped: the commands come from volcano-cli v0.42.0 (Kong/volcano-cli#278), and the platform API from Kong/volcano-hosting#1648 is live in staging and production (v0.29.0).

🤖 Generated with Claude Code

Copilot AI balanced review requested due to automatic review settings October 7, 2026 15:04
@CLAassistant

CLAassistant commented Oct 7, 2026 •

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@swkeever

swkeever commented Oct 7, 2026

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-09T16:43:04.941040Z 394df1d Manual request
🔒 Security Review ✅ Completed 2026-10-09T16:44:17.700730Z 394df1d Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. What shall we delve into next?

Reviewed commit: 67d8c38ae5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 67d8c38ae5

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@shawnwu-kong shawnwu-kong left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the domain verification instructions against CLI #278 and Hosting #1648. No blocking findings. Retain the documented release order: merge once a CLI release includes the new domain commands.

Managed TLS entries for an unowned hostname deploy and wait for the _volcano record, which 'volcano cloud frontends domain get' lists; only BYOC attaches fail with the record. Note that 'volcano cloud domains' needs an account login.
@swkeever
swkeever marked this pull request as ready for review October 9, 2026 16:36
@swkeever

swkeever commented Oct 9, 2026

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Another round soon, please!

Reviewed commit: 394df1d320

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 394df1d320

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@swkeever
swkeever added this pull request to the merge queue Oct 9, 2026
Merged via the queue into main with commit b0774cd Oct 9, 2026
8 checks passed
@swkeever
swkeever deleted the skeever/custom-domain-ownership branch October 9, 2026 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants