The system disable-dhcp-nameservers parameter appears to have no effect in more recent VyOS rolling releases, leading to my WAN DHCP connection's servers being in /etc/resolv.conf:
vyos@cr01-vyos# set system disable-dhcp-nameservers Configuration path: [system disable-dhcp-nameservers] already exists [edit] vyos@cr01-vyos# cat /etc/resolv.conf ### Autogenerated by VyOS ### ### Do not edit, your changes will get overwritten ### nameserver 1.1.1.1 nameserver 192.168.255.1 nameserver 209.18.47.61 nameserver 209.18.47.62 nameserver fd52:d62e:8011:ffff:192:168:255:1 domain <removed> search <removed> [edit] vyos@cr01-vyos# show system name-server name-server fd52:d62e:8011:ffff:192:168:255:1 name-server 192.168.255.1 name-server 1.1.1.1 [edit]