C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fixes #6740: Allow disabling reverse DNS lookups in coredns (#6741)

Browse source 
* created variable to enable/disable reverse dns lookups in coredns

* fixed linting-error in dns-stack.md
This commit is contained in:
axelgobletbdr 2020-09-25 11:33:11 +02:00 committed by GitHub
parent 28839f6b71
commit 77149e5d89
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
docs/dns-stack.md
View file

@ -82,6 +82,10 @@ dns_etchosts: |
192.168.0.200 ingress.example.com
```
### enable_coredns_reverse_dns_lookups
Whether reverse DNS lookups are enabled in the coredns config. Defaults to `true`.
## DNS modes supported by Kubespray
You can modify how Kubespray sets up DNS for your cluster with the variables ``dns_mode`` and ``resolvconf_mode``.

1
roles/kubernetes-apps/ansible/defaults/main.yml
View file

@ -7,6 +7,7 @@ dns_min_replicas: 2
dns_nodes_per_replica: 16
dns_cores_per_replica: 256
dns_prevent_single_point_failure: "{{ 'true' if dns_min_replicas|int > 1 else 'false' }}"
enable_coredns_reverse_dns_lookups: true
coredns_ordinal_suffix: ""
# dns_extra_tolerations: [{effect: NoSchedule, operator: "Exists"}]

4
roles/kubernetes-apps/ansible/templates/coredns-config.yml.j2
View file

@ -31,12 +31,14 @@ data:
lameduck 5s
}
ready
kubernetes {{ dns_domain }} in-addr.arpa ip6.arpa {
kubernetes {{ dns_domain }} {% if enable_coredns_reverse_dns_lookups %}in-addr.arpa ip6.arpa {% endif %}{
pods insecure
{% if enable_coredns_k8s_endpoint_pod_names %}
endpoint_pod_names
{% endif %}
{% if enable_coredns_reverse_dns_lookups %}
fallthrough in-addr.arpa ip6.arpa
{% endif %}
}
prometheus :9153
{% if resolvconf_mode == 'host_resolvconf' and upstream_dns_servers is defined and upstream_dns_servers|length > 0 %}