Send only cluster domain queries to kube-dns

Note: all PTR request must still traverse kube-dns. We can restrict
this to just the clusterCIDR in the future to reduce the amount of
PTR traffic.
This commit is contained in:
Bowei Du 2017-02-08 00:19:18 -08:00
parent 8621bd3e50
commit da291a7beb
3 changed files with 12 additions and 9 deletions

View File

@ -49,7 +49,7 @@ spec:
- name: kube-dns-config - name: kube-dns-config
configMap: configMap:
name: kube-dns name: kube-dns
optional: true optional: true
containers: containers:
- name: kubedns - name: kubedns
image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1 image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1
@ -116,8 +116,9 @@ spec:
failureThreshold: 5 failureThreshold: 5
args: args:
- --cache-size=1000 - --cache-size=1000
- --no-resolv - --server=/__PILLAR__DNS__DOMAIN__/127.0.0.1#10053
- --server=127.0.0.1#10053 - --server=/in-addr.arpa/127.0.0.1#10053
- --server=/ip6.arpa/127.0.0.1#10053
- --log-facility=- - --log-facility=-
ports: ports:
- containerPort: 53 - containerPort: 53

View File

@ -49,7 +49,7 @@ spec:
- name: kube-dns-config - name: kube-dns-config
configMap: configMap:
name: kube-dns name: kube-dns
optional: true optional: true
containers: containers:
- name: kubedns - name: kubedns
image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1 image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1
@ -116,8 +116,9 @@ spec:
failureThreshold: 5 failureThreshold: 5
args: args:
- --cache-size=1000 - --cache-size=1000
- --no-resolv - --server=/{{ pillar['dns_domain'] }}/127.0.0.1#10053
- --server=127.0.0.1#10053 - --server=/in-addr.arpa/127.0.0.1#10053
- --server=/ip6.arpa/127.0.0.1#10053
- --log-facility=- - --log-facility=-
ports: ports:
- containerPort: 53 - containerPort: 53

View File

@ -49,7 +49,7 @@ spec:
- name: kube-dns-config - name: kube-dns-config
configMap: configMap:
name: kube-dns name: kube-dns
optional: true optional: true
containers: containers:
- name: kubedns - name: kubedns
image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1 image: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.12.1
@ -115,8 +115,9 @@ spec:
failureThreshold: 5 failureThreshold: 5
args: args:
- --cache-size=1000 - --cache-size=1000
- --no-resolv - --server=/$DNS_DOMAIN/127.0.0.1#10053
- --server=127.0.0.1#10053 - --server=/in-addr.arpa/127.0.0.1#10053
- --server=/ip6.arpa/127.0.0.1#10053
- --log-facility=- - --log-facility=-
ports: ports:
- containerPort: 53 - containerPort: 53