* plugin/sign: a plugin that signs zones

Sign is a plugin that signs zone data (on disk). The README.md details
what exactly happens to should be accurate related to the code.

Signs are signed with a CSK, resigning and first time signing is all
handled by *sign* plugin.

Logging with a test zone looks something like this:

~~~ txt
[INFO] plugin/sign: Signing "miek.nl." because open plugin/sign/testdata/db.miek.nl.signed: no such file or directory
[INFO] plugin/sign: Signed "miek.nl." with key tags "59725" in 11.670985ms, saved in "plugin/sign/testdata/db.miek.nl.signed". Next: 2019-07-20T15:49:06.560Z
[INFO] plugin/file: Successfully reloaded zone "miek.nl." in "plugin/sign/testdata/db.miek.nl.signed" with serial 1563636548
[INFO] plugin/sign: Signing "miek.nl." because resign was: 10m0s ago
[INFO] plugin/sign: Signed "miek.nl." with key tags "59725" in 2.055895ms, saved in "plugin/sign/testdata/db.miek.nl.signed". Next: 2019-07-20T16:09:06.560Z
[INFO] plugin/file: Successfully reloaded zone "miek.nl." in "plugin/sign/testdata/db.miek.nl.signed" with serial 1563637748
~~~
Signed-off-by: Miek Gieben <miek@miek.nl>

* Adjust readme and remove timestamps
Signed-off-by: Miek Gieben <miek@miek.nl>

* Comment on the newline
Signed-off-by: Miek Gieben <miek@miek.nl>

* Update plugin/sign/README.md
Co-Authored-By: Michael Grosser <development@stp-ip.net>

We're not making any backward incompat changes so this can just be 1.6.3
Signed-off-by: Miek Gieben <miek@miek.nl>

* plugin/etcd: clarify it's not a generic backend

Clarify the docs that this is not a generic backend.

Wrap it on 80 columns as well.
Signed-off-by: Miek Gieben <miek@miek.nl>

* Update plugin/etcd/README.md
Co-Authored-By: Chris O'Haver <cohaver@infoblox.com>

* Update plugin/etcd/README.md
Co-Authored-By: Chris O'Haver <cohaver@infoblox.com>

journald timestamps, kubernetes timestamps, syslog timestamps. It seems
silly to add our own timestamps to the logging output as these external
ones *also* do it. Only when just running coredns this might be weird.

Remove the timestamping from pkg/log.

Remove test that tested for this.

Fixes: #3211
Signed-off-by: Miek Gieben <miek@miek.nl>

This is needed as well to make it compile cleanly. Follow up to #3214.

Manually removed github.com/coreos/etcd/ from go.mod
Signed-off-by: Miek Gieben <miek@miek.nl>

This moves the entire etcd to go.etcd.io, so that it compiles cleanly
when using bazel.

Fixes: #3087
Signed-off-by: Miek Gieben <miek@miek.nl>

Say once that we've sent notifies, instead of for every upstream
primary.
Signed-off-by: Miek Gieben <miek@miek.nl>

* release: initial release notes

Core of the release notes.
Signed-off-by: Miek Gieben <miek@miek.nl>

* typo
Signed-off-by: Miek Gieben <miek@miek.nl>

* review
Signed-off-by: Miek Gieben <miek@miek.nl>

* spell check
Signed-off-by: Miek Gieben <miek@miek.nl>

* bump k8s.io/client-go and azure/go-autorest

* bump azure

* bump azure 2

https://help.github.com/en/articles/adding-a-security-policy-to-your-repository
https://help.github.com/en/articles/about-maintainer-security-advisoriesSigned-off-by: Chris Aniszczyk <caniszczyk@gmail.com>

Signed-off-by: hwdef <hwdef97@gmail.com>

* Fuzz: fix forward build
Signed-off-by: Miek Gieben <miek@miek.nl>

* Flag not released yet, wget quiet
Signed-off-by: Miek Gieben <miek@miek.nl>

Bumps [github.com/coreos/etcd](https://github.com/coreos/etcd) from 3.3.13+incompatible to 3.3.15+incompatible.
- [Release notes](https://github.com/coreos/etcd/releases)
- [Changelog](https://github.com/etcd-io/etcd/blob/master/CHANGELOG-3.4.md)
- [Commits](https://github.com/coreos/etcd/compare/v3.3.13...v3.3.15)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.23.3 to 1.23.8.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.23.3...v1.23.8)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

This reloader didn't close the openened file handle. Add a close. Can't
use `defer` because this is in a endless loop.
Signed-off-by: Miek Gieben <miek@miek.nl>

Bumps [google.golang.org/api](https://github.com/google/google-api-go-client) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/google/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md)
- [Commits](https://github.com/google/google-api-go-client/compare/v0.8.0...v0.9.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Upgrade to new version and add if-not-exists to the cmdline
Signed-off-by: Miek Gieben <miek@miek.nl>

* plugin/file: respond correctly to IXFR message

Respond with a sing SOA record to an IXFR request if the SOA serials
match.

The added test fails on the current code with:

~~~
=== RUN   TestIxfrResponse
--- FAIL: TestIxfrResponse (0.00s)
    secondary_test.go:122: Expected answer section with single RR
FAIL
exit status 1
~~~

And obviously passes with the new code. This should cut down on the
weird number of zone transfers that I was seeing. At some point IXFR
support might be cool.

Fixes: #3176
Signed-off-by: Miek Gieben <miek@miek.nl>

* reuse code
Signed-off-by: Miek Gieben <miek@miek.nl>

* Sligtht tweaks
Signed-off-by: Miek Gieben <miek@miek.nl>

This can't be used in its current form; revert the entire PR.

Revert "fuzzing: allow setup function to be called (#3175)"

This reverts commit 62451fd3.

* plugin/forward: add fuzzing

Add fuzz.go for forward
Signed-off-by: Miek Gieben <miek@miek.nl>

* Make it compile
Signed-off-by: Miek Gieben <miek@miek.nl>

* fuzz: use gofuzz build tag instead of fuzz

Since go-fuzz does not support Go modules yet, vendor dependencies.
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>

* fuzz: avoid vendoring code for go-fuzz
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>

TCPServer was only used in secondary_test.go and even there it wasn't
needed. Remove the file.
Signed-off-by: Miek Gieben <miek@miek.nl>

Went over the list at https://goreportcard.com/report/github.com/coredns/coredns
and removed/fix some code to make it slightly happier.
Signed-off-by: Miek Gieben <miek@miek.nl>

This allows to fuzzing of more interesting targets that require setup.
Signed-off-by: Miek Gieben <miek@miek.nl>

* fix external ns records

* use k8s service name for ns record

* update test, add func comment

* expand nsAddrs() test cases

* support local ipv6 ip

* use less confusing pod ip in test

Signed-off-by: Sakura <longfei.shang@daocloud.io>

Signed-off-by: Sakura <longfei.shang@daocloud.io>

Automatically submitted.

Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>

* spelling fixes

* its/it's

Signed-off-by: Sakura <longfei.shang@daocloud.io>