diff --git a/README.md b/README.md
index 0232f56..5e859f9 100644
--- a/README.md
+++ b/README.md
@@ -6,6 +6,11 @@ We are modernizing our data management at the Public Health Agency of Canada (PH
 
 ## Domains
 
+> [!IMPORTANT]
+> Due an upstream issue, none of the subdomains on `phac-aspc.gc.ca` will resolve correctly in the PHAC office network. If you have users accessing your service from an on-prem environment, we recommend that you consider using one of the unilingual domains.
+>
+> This admonition will be removed once the issue is fixed.
+
 The current domains we have control over are below:
 
 ### Alpha: ​​
diff --git a/dns-records/atip-dlp-alpha-phac-gc-ca.yaml b/dns-records/atip-dlp-alpha-phac-gc-ca.yaml
index 3d8ea83..9c2c0b3 100644
--- a/dns-records/atip-dlp-alpha-phac-gc-ca.yaml
+++ b/dns-records/atip-dlp-alpha-phac-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/atip-dlp/"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "atip-dlp"
diff --git a/dns-records/backstage-alpha-phac-aspc-gc-ca.yaml b/dns-records/backstage-alpha-phac-aspc-gc-ca.yaml
index 62e98db..c106d93 100644
--- a/dns-records/backstage-alpha-phac-aspc-gc-ca.yaml
+++ b/dns-records/backstage-alpha-phac-aspc-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/sci-portal"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "sci-portal"
diff --git a/dns-records/catalogue-alpha-phac-aspc-gc-ca.yaml b/dns-records/catalogue-alpha-phac-aspc-gc-ca.yaml
index 237cd14..fa23440 100644
--- a/dns-records/catalogue-alpha-phac-aspc-gc-ca.yaml
+++ b/dns-records/catalogue-alpha-phac-aspc-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/data-catalog/"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "phemu-platdev-datacatalogue"
diff --git a/dns-records/data-readiness-repository-data-phac-gc-ca.yaml b/dns-records/data-readiness-repository-data-phac-gc-ca.yaml
index afa5993..f981ede 100644
--- a/dns-records/data-readiness-repository-data-phac-gc-ca.yaml
+++ b/dns-records/data-readiness-repository-data-phac-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/data-readiness-repository/"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "data-readiness-repository"
diff --git a/dns-records/dhis2-beta-phac-aspc-gc-ca.yaml b/dns-records/dhis2-beta-phac-aspc-gc-ca.yaml
index af55c8f..13c737e 100644
--- a/dns-records/dhis2-beta-phac-aspc-gc-ca.yaml
+++ b/dns-records/dhis2-beta-phac-aspc-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/dhis-2/"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "dhis2"
diff --git a/dns-records/entreessecurisees-alpha-phac-aspc-gc-ca.yaml b/dns-records/entreessecurisees-alpha-phac-aspc-gc-ca.yaml
index f7c1468..678713f 100644
--- a/dns-records/entreessecurisees-alpha-phac-aspc-gc-ca.yaml
+++ b/dns-records/entreessecurisees-alpha-phac-aspc-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/safe-inputs"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "safe-inputs"
diff --git a/dns-records/geocoder-alpha-phac-gc-ca.yaml b/dns-records/geocoder-alpha-phac-gc-ca.yaml
index d1735eb..c360ff9 100644
--- a/dns-records/geocoder-alpha-phac-gc-ca.yaml
+++ b/dns-records/geocoder-alpha-phac-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/pelias-canada/"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "pelias-geocoder"
diff --git a/dns-records/hopic-data-donnes-phac-aspc-gc-ca.yaml b/dns-records/hopic-data-donnes-phac-aspc-gc-ca.yaml
index 00006e5..ce120cd 100644
--- a/dns-records/hopic-data-donnes-phac-aspc-gc-ca.yaml
+++ b/dns-records/hopic-data-donnes-phac-aspc-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/cpho-phase2/"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "hopic"
diff --git a/dns-records/hopic-data-phac-gc-ca.yaml b/dns-records/hopic-data-phac-gc-ca.yaml
index e4580ba..22a34e9 100644
--- a/dns-records/hopic-data-phac-gc-ca.yaml
+++ b/dns-records/hopic-data-phac-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/cpho-phase2/"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "hopic"
diff --git a/dns-records/infra-auth-alpha-phac-gc-ca.yaml b/dns-records/infra-auth-alpha-phac-gc-ca.yaml
index 83ff7d4..5fc6081 100644
--- a/dns-records/infra-auth-alpha-phac-gc-ca.yaml
+++ b/dns-records/infra-auth-alpha-phac-gc-ca.yaml
@@ -3,8 +3,6 @@ kind: DNSRecordSet
 metadata:
   name: infra-auth-alpha-phac-gc-ca
   namespace: dns
-  annotations:
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "infrastructure-sso"
diff --git a/dns-records/jitaccess-alpha-phac-aspc-gc-ca.yaml b/dns-records/jitaccess-alpha-phac-aspc-gc-ca.yaml
index b526705..5f6ed62 100644
--- a/dns-records/jitaccess-alpha-phac-aspc-gc-ca.yaml
+++ b/dns-records/jitaccess-alpha-phac-aspc-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/JIT-IaC"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "jit-access"
diff --git a/dns-records/ky-alpha-phac-gc-ca.yaml b/dns-records/ky-alpha-phac-gc-ca.yaml
index 20dbeda..3ed481b 100644
--- a/dns-records/ky-alpha-phac-gc-ca.yaml
+++ b/dns-records/ky-alpha-phac-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/tcaky/getting-rusty"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "test-ky"
diff --git a/dns-records/ky2.yaml b/dns-records/ky2.yaml
index 636c70d..dffce3d 100644
--- a/dns-records/ky2.yaml
+++ b/dns-records/ky2.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/tcaky/getting-rusty"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "test-ky2"
diff --git a/dns-records/leandhis2-alpha-phac-gc-ca.yaml b/dns-records/leandhis2-alpha-phac-gc-ca.yaml
index 9b4711e..3d89eb7 100644
--- a/dns-records/leandhis2-alpha-phac-gc-ca.yaml
+++ b/dns-records/leandhis2-alpha-phac-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/simardeep1792/lean-infra"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "dhis2-lean-infra"
diff --git a/dns-records/llm-alpha-phac-gc-ca.yaml b/dns-records/llm-alpha-phac-gc-ca.yaml
index 536a88d..4ca07a4 100644
--- a/dns-records/llm-alpha-phac-gc-ca.yaml
+++ b/dns-records/llm-alpha-phac-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/llm-playground"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "data-science-llm"
diff --git a/dns-records/safeinputs-alpha-phac-aspc-gc-ca.yaml b/dns-records/safeinputs-alpha-phac-aspc-gc-ca.yaml
index e6c0ca3..4157d82 100644
--- a/dns-records/safeinputs-alpha-phac-aspc-gc-ca.yaml
+++ b/dns-records/safeinputs-alpha-phac-aspc-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/safe-inputs"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "safe-inputs"
diff --git a/dns-records/shiny-alpha-phac-aspc-gc-ca.yaml b/dns-records/shiny-alpha-phac-aspc-gc-ca.yaml
index bda4e94..c8a6a76 100644
--- a/dns-records/shiny-alpha-phac-aspc-gc-ca.yaml
+++ b/dns-records/shiny-alpha-phac-aspc-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/django-shiny"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "django-shiny"
diff --git a/dns-records/signals-signaux-alpha-phac-aspc-gc-ca.yaml b/dns-records/signals-signaux-alpha-phac-aspc-gc-ca.yaml
index 86dd61d..815845e 100644
--- a/dns-records/signals-signaux-alpha-phac-aspc-gc-ca.yaml
+++ b/dns-records/signals-signaux-alpha-phac-aspc-gc-ca.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: dns
   annotations:
     sourceCodeRepository: "https://github.com/PHACDataHub/foresight/"
-    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     controlled-by: "phac-dns"
     project-name: "signal-detection-platform"
diff --git a/root-sync.yaml b/root-sync.yaml
deleted file mode 100644
index f3c7376..0000000
--- a/root-sync.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-# Root sync for dns-records
-apiVersion: configsync.gke.io/v1beta1
-kind: RootSync
-metadata:
-  name: root-sync
-  namespace: config-management-system
-spec:
-  git:
-    auth: none
-    branch: main
-    dir: dns-records
-    repo: https://github.com/PHACDataHub/phac-dns.git
-  sourceFormat: unstructured
-  sourceType: git
----
-# Root sync for zones
-apiVersion: configsync.gke.io/v1beta1
-kind: RootSync
-metadata:
-  name: root-sync-zones
-  namespace: config-management-system
-spec:
-  git:
-    auth: none
-    branch: main
-    dir: zones
-    repo: https://github.com/PHACDataHub/phac-dns.git
-  sourceFormat: unstructured
-  sourceType: git