d208896c46
Use cloud-init config to replace /etc/resolv.conf with the content for kubelet to properly configure hostnet pods. Do not use systemd-resolved yet, see https://coreos.com/os/docs/latest/configuring-dns.html "Only nss-aware applications can take advantage of the systemd-resolved cache. Notably, this means that statically linked Go programs and programs running within Docker/rkt will use /etc/resolv.conf only, and will not use the systemd-resolve cache." Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
127 lines
3.5 KiB
YAML
127 lines
3.5 KiB
YAML
---
|
|
- name: check resolvconf
|
|
shell: which resolvconf
|
|
register: resolvconf
|
|
ignore_errors: yes
|
|
changed_when: false
|
|
|
|
- name: target resolv.conf file
|
|
set_fact:
|
|
resolvconffile: >-
|
|
{%- if resolvconf.rc == 0 -%}/etc/resolvconf/resolv.conf.d/head{%- else -%}/etc/resolv.conf{%- endif -%}
|
|
when: ansible_os_family != "CoreOS"
|
|
|
|
- name: target temporary resolvconf cloud init file
|
|
set_fact:
|
|
resolvconffile: /tmp/resolveconf_cloud_init_conf
|
|
when: ansible_os_family == "CoreOS"
|
|
|
|
- name: create temporary resolveconf cloud init file
|
|
command: cp -f /etc/resolv.conf "{{ resolvconffile }}"
|
|
when: ansible_os_family == "CoreOS"
|
|
|
|
- name: generate search domains to resolvconf
|
|
set_fact:
|
|
searchentries:
|
|
"{{ ([ 'default.svc.' + dns_domain, 'svc.' + dns_domain ] + searchdomains|default([])) | join(' ') }}"
|
|
|
|
- name: pick dnsmasq cluster IP
|
|
set_fact:
|
|
dnsmasq_server: >-
|
|
{%- if skip_dnsmasq|bool -%}{{ [ skydns_server ] + upstream_dns_servers|default([]) }}{%- else -%}{{ [ dns_server ] }}{%- endif -%}
|
|
|
|
- name: generate nameservers to resolvconf
|
|
set_fact:
|
|
nameserverentries:
|
|
"{{ dnsmasq_server|default([]) + nameservers|default([]) }}"
|
|
|
|
- name: Remove search and nameserver options from resolvconf head
|
|
lineinfile:
|
|
dest: /etc/resolvconf/resolv.conf.d/head
|
|
state: absent
|
|
regexp: "^{{ item }}.*$"
|
|
backup: yes
|
|
follow: yes
|
|
with_items:
|
|
- search
|
|
- nameserver
|
|
when: resolvconf.rc == 0
|
|
notify: Dnsmasq | update resolvconf
|
|
|
|
- name: Add search domains to resolv.conf
|
|
lineinfile:
|
|
line: "search {{searchentries}}"
|
|
dest: "{{resolvconffile}}"
|
|
state: present
|
|
insertbefore: BOF
|
|
backup: yes
|
|
follow: yes
|
|
notify: Dnsmasq | update resolvconf
|
|
|
|
- name: Add nameservers to resolv.conf
|
|
blockinfile:
|
|
dest: "{{resolvconffile}}"
|
|
block: |-
|
|
{% for item in nameserverentries -%}
|
|
nameserver {{ item }}
|
|
{% endfor %}
|
|
state: present
|
|
insertafter: "^search.*$"
|
|
create: yes
|
|
backup: yes
|
|
follow: yes
|
|
marker: "# Ansible nameservers {mark}"
|
|
notify: Dnsmasq | update resolvconf
|
|
|
|
- name: Add options to resolv.conf
|
|
lineinfile:
|
|
line: options {{ item }}
|
|
dest: "{{resolvconffile}}"
|
|
state: present
|
|
regexp: "^options.*{{ item }}$"
|
|
insertafter: EOF
|
|
backup: yes
|
|
follow: yes
|
|
with_items:
|
|
- ndots:{{ ndots }}
|
|
- timeout:2
|
|
- attempts:2
|
|
notify: Dnsmasq | update resolvconf
|
|
|
|
- name: Remove search and nameserver options from resolvconf base
|
|
lineinfile:
|
|
dest: /etc/resolvconf/resolv.conf.d/base
|
|
state: absent
|
|
regexp: "^{{ item }}.*$"
|
|
backup: yes
|
|
follow: yes
|
|
with_items:
|
|
- search
|
|
- nameserver
|
|
when: resolvconf.rc == 0
|
|
notify: Dnsmasq | update resolvconf
|
|
|
|
- name: disable resolv.conf modification by dhclient
|
|
copy: src=dhclient_nodnsupdate dest=/etc/dhcp/dhclient-enter-hooks.d/znodnsupdate mode=0755
|
|
notify: Dnsmasq | restart network
|
|
when: ansible_os_family == "Debian"
|
|
|
|
- name: disable resolv.conf modification by dhclient
|
|
copy: src=dhclient_nodnsupdate dest=/etc/dhcp/dhclient.d/nodnsupdate mode=u+x
|
|
notify: Dnsmasq | restart network
|
|
when: ansible_os_family == "RedHat"
|
|
|
|
- name: get temporary resolveconf cloud init file content
|
|
command: cat {{ resolvconffile }}
|
|
register: cloud_config
|
|
when: ansible_os_family == "CoreOS"
|
|
|
|
- name: persist resolvconf cloud init file
|
|
template:
|
|
dest: "{{resolveconf_cloud_init_conf}}"
|
|
src: resolvconf.j2
|
|
owner: root
|
|
mode: 0644
|
|
notify: Dnsmasq | update resolvconf for CoreOS
|
|
when: ansible_os_family == "CoreOS"
|