DNS and registrars
Provisioning can register and update DNS records as part of the lifecycle, so a
machine that provisioning creates is reachable by name without a separate step
in a registrar's console. Registrar credentials are declared under
meta.registrants, with one entry per registrar.
Credentials always come from a command rather than being written into the Hive, so no secret is committed. Each supported registrar has its own subsection:
How records get applied
DNS is part of provisioning, so records are created and updated when you run
navi provision. Because the registrar credentials and the records are declared
in the same Hive as the machines, a single provisioning run can stand up an
instance and publish its name together.