2016-08-18 15:14:52 +00:00
|
|
|
---
|
|
|
|
|
# Existing search/nameserver resolvconf entries will be purged and
|
|
|
|
|
# ensured by this additional data:
|
|
|
|
|
|
|
|
|
|
# Max of 4 names is allowed and no more than 256 - 17 chars total
|
|
|
|
|
# (a 2 is reserved for the 'default.svc.' and'svc.')
|
|
|
|
|
#searchdomains:
|
|
|
|
|
# - foo.bar.lc
|
|
|
|
|
|
|
|
|
|
# Max of 2 is allowed here (a 1 is reserved for the dns_server)
|
|
|
|
|
#nameservers:
|
|
|
|
|
# - 127.0.0.1
|
2016-10-14 21:46:44 +00:00
|
|
|
|
2017-01-19 09:07:37 +00:00
|
|
|
dns_forward_max: 150
|
|
|
|
|
cache_size: 1000
|
|
|
|
|
|
2016-10-14 21:46:44 +00:00
|
|
|
# Versions
|
|
|
|
|
dnsmasq_version: 2.72
|
|
|
|
|
|
|
|
|
|
# Images
|
|
|
|
|
dnsmasq_image_repo: "andyshinn/dnsmasq"
|
2016-10-26 14:56:15 +00:00
|
|
|
dnsmasq_image_tag: "{{ dnsmasq_version }}"
|
|
|
|
|
|
2016-11-25 10:33:39 +00:00
|
|
|
# Limits for dnsmasq/kubedns apps
|
|
|
|
|
dns_cpu_limit: 100m
|
|
|
|
|
dns_memory_limit: 170Mi
|
|
|
|
|
dns_cpu_requests: 70m
|
|
|
|
|
dns_memory_requests: 70Mi
|
2016-12-28 13:58:37 +00:00
|
|
|
|
|
|
|
|
# Linux capabilities to be dropped for dnsmasq k8s app ran container engines
|
|
|
|
|
dnsmasq_drop_cap:
|
|
|
|
|
- chown
|
|
|
|
|
- dac_override
|
|
|
|
|
- fowner
|
|
|
|
|
- fsetid
|
|
|
|
|
- kill
|
|
|
|
|
- setpcap
|
|
|
|
|
- sys_chroot
|
|
|
|
|
- mknod
|
|
|
|
|
- audit_write
|
|
|
|
|
- setfcap
|
