mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-26 13:07:07 +00:00
Send only cluster domain queries to kube-dns
Note: all PTR request must still traverse kube-dns. We can restrict this to just the clusterCIDR in the future to reduce the amount of PTR traffic.
This commit is contained in:
parent
8621bd3e50
commit
da291a7beb
@ -49,7 +49,7 @@ spec:
|
|||||||
- name: kube-dns-config
|
- name: kube-dns-config
|
||||||
configMap:
|
configMap:
|
||||||
name: kube-dns
|
name: kube-dns
|
||||||
optional: true
|
optional: true
|
||||||
containers:
|
containers:
|
||||||
- name: kubedns
|
- name: kubedns
|
||||||
image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1
|
image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1
|
||||||
@ -116,8 +116,9 @@ spec:
|
|||||||
failureThreshold: 5
|
failureThreshold: 5
|
||||||
args:
|
args:
|
||||||
- --cache-size=1000
|
- --cache-size=1000
|
||||||
- --no-resolv
|
- --server=/__PILLAR__DNS__DOMAIN__/127.0.0.1#10053
|
||||||
- --server=127.0.0.1#10053
|
- --server=/in-addr.arpa/127.0.0.1#10053
|
||||||
|
- --server=/ip6.arpa/127.0.0.1#10053
|
||||||
- --log-facility=-
|
- --log-facility=-
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 53
|
- containerPort: 53
|
||||||
|
@ -49,7 +49,7 @@ spec:
|
|||||||
- name: kube-dns-config
|
- name: kube-dns-config
|
||||||
configMap:
|
configMap:
|
||||||
name: kube-dns
|
name: kube-dns
|
||||||
optional: true
|
optional: true
|
||||||
containers:
|
containers:
|
||||||
- name: kubedns
|
- name: kubedns
|
||||||
image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1
|
image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1
|
||||||
@ -116,8 +116,9 @@ spec:
|
|||||||
failureThreshold: 5
|
failureThreshold: 5
|
||||||
args:
|
args:
|
||||||
- --cache-size=1000
|
- --cache-size=1000
|
||||||
- --no-resolv
|
- --server=/{{ pillar['dns_domain'] }}/127.0.0.1#10053
|
||||||
- --server=127.0.0.1#10053
|
- --server=/in-addr.arpa/127.0.0.1#10053
|
||||||
|
- --server=/ip6.arpa/127.0.0.1#10053
|
||||||
- --log-facility=-
|
- --log-facility=-
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 53
|
- containerPort: 53
|
||||||
|
@ -49,7 +49,7 @@ spec:
|
|||||||
- name: kube-dns-config
|
- name: kube-dns-config
|
||||||
configMap:
|
configMap:
|
||||||
name: kube-dns
|
name: kube-dns
|
||||||
optional: true
|
optional: true
|
||||||
containers:
|
containers:
|
||||||
- name: kubedns
|
- name: kubedns
|
||||||
image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1
|
image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1
|
||||||
@ -115,8 +115,9 @@ spec:
|
|||||||
failureThreshold: 5
|
failureThreshold: 5
|
||||||
args:
|
args:
|
||||||
- --cache-size=1000
|
- --cache-size=1000
|
||||||
- --no-resolv
|
- --server=/$DNS_DOMAIN/127.0.0.1#10053
|
||||||
- --server=127.0.0.1#10053
|
- --server=/in-addr.arpa/127.0.0.1#10053
|
||||||
|
- --server=/ip6.arpa/127.0.0.1#10053
|
||||||
- --log-facility=-
|
- --log-facility=-
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 53
|
- containerPort: 53
|
||||||
|
Loading…
Reference in New Issue
Block a user