Go modules · proxy.golang.org

github.com/Azure/agentbaker/e2e

DNS / OAST exfiltration: matched "dig %s +timeout=1 +tries=1\", testdomain)\n\texecResult := execScriptOnVMForScenarioValidateExitCode(ctx, s, command, 0, \"dns resolution failed\")\n\tassert.Contains(s.T, execResult.stdout, \"status: NOERROR\")\n\tassert.Contains(s.T, execResult.stdout, fmt.Sprintf(\"SERVER: %s\", server))\n}\n\n// ValidateLocalDNSHostsFile checks that /etc/localdns/hosts contains at least one IPv4 entry for each critical FQDN.\n// This validation approach avoids flakiness with CDN/frontdoor-backed FQDNs (like mcr.microsoft.com) whose A records\n// can rotate between queries. We verify presence, not exact IP matching.\n// The hosts file is populated asynchronously by the aks-localdns-hosts-setup timer/service, so we poll with a timeout.\nfunc ValidateLocalDNSHostsFile(ctx context.Context, s *Scenario, fqdns []string) {\n\ts.T.Helper()\n\n\t// Build script that polls until all FQDNs have at least one IPv4 entry in hosts file\n\tscript := fmt.Sprintf(`set -euo pipefail\nhosts_file=\"/etc/localdns/hosts\"\nfqdns=(%s)\ntimeout_secs=60\npoll_interval_secs=5\ndeadline=$("