Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Domain Deletion fails for domains with and without DNSSEC #3392

Closed
Matt-Spence opened this issue Jan 23, 2025 · 1 comment · Fixed by #3485
Closed

Domain Deletion fails for domains with and without DNSSEC #3392

Matt-Spence opened this issue Jan 23, 2025 · 1 comment · Fixed by #3485
Assignees
Labels
bug Something that isn't working as intended carryover Carryover from a previous sprint dev issue is for the dev team

Comments

@Matt-Spence
Copy link
Contributor

Matt-Spence commented Jan 23, 2025

Current Behavior

Deleting a domain from the registry through the admin portal will fail if a domain has dnssec enabled with the error message Error deleting this Domain: This subdomain is being used as a hostname on another domain:. This originally appeared to be caused by the existence of DS records that point to the domain, preventing the domain from being deleted. However, some domains still got blocked from deletion even though they never had DNSSEC. To add to this bug, a few domains that never had dnssec were successfully deleted and we are unsure why it works for some and not others

Expected Behavior

Deleting a domain should work with or without it having dnssec or any other data. Deleting a domain from the registry through the admin portal deletes DS Data first, allowing for domains with DNSSec enabled to be successfully deleted. If deleting a DS record fails, then the error message displayed should accurately reflect that it is DS data, not a host, that is preventing the domain from being deleted. All other items connected to this domain should be deleted as well.

Note: there may also be something wrong with the way contacts are deleted.

Steps to Reproduce

  1. In a test environment, enable DNSSec on a domain
  2. Attempt to delete that domain from the registry in the admin portal

Additional Context

Relevant slack thread

Issue Links

No response

@Matt-Spence Matt-Spence added the bug Something that isn't working as intended label Jan 23, 2025
@Matt-Spence Matt-Spence added the dev issue is for the dev team label Jan 23, 2025
@allly-b allly-b moved this from 👶 New to ⚙ Dev Parking Lot in .gov Product Board Jan 23, 2025
@allly-b allly-b moved this from ⚙ Dev Parking Lot to 🎯 Ready in .gov Product Board Jan 23, 2025
@allly-b allly-b added this to the End of PoP handoff milestone Jan 29, 2025
@katypies
Copy link
Contributor

@h-m-f-t did note that a domain that couldn't be deleted last week by one of the analysts was able to be deleted today (and it didn't ever have DS data).

@allly-b allly-b changed the title Domain Deletion Doesn't Handle DNSSecData Domain Deletion fails for domains with and without DNSSEC Jan 30, 2025
@Matt-Spence Matt-Spence moved this from 🎯 Ready to 🏗 In progress in .gov Product Board Feb 3, 2025
@Matt-Spence Matt-Spence moved this from 🏗 In progress to 👀 In review in .gov Product Board Feb 11, 2025
@MzBowieFan77 MzBowieFan77 added the carryover Carryover from a previous sprint label Feb 19, 2025
Matt-Spence added a commit that referenced this issue Feb 20, 2025
@github-project-automation github-project-automation bot moved this from 👀 In review to ✅ Done in .gov Product Board Feb 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something that isn't working as intended carryover Carryover from a previous sprint dev issue is for the dev team
Projects
Status: ✅ Done
Development

Successfully merging a pull request may close this issue.

4 participants