Add the missing parameters: answer auto to let coreDNS to generate th…

…e answer response to avoid man in the middle attack. #398

Signed-off-by: cmoulliard <[email protected]>

pkg/build/templates/coredns/cm-coredns-default.yaml.tmpl

@@ -5,9 +5,12 @@ metadata:
   namespace: kube-system
 data:
   default.conf: |
-    # subdomain names resolves to ingress IP. e.g. gitea.cnoe.localtest.me becomes ingress-nginx-controller.ingress-nginx.svc.cluster.local
+    # Goal: Rewrite rules for in-cluster access to a service: gitea, argocd, etc using the same FQDN as for external access
+
+    # subdomain names e.g. gitea.cnoe.localtest.me resolves to the IP address of the kubernetes ingress service and then will become ingress-nginx-controller.ingress-nginx.svc.cluster.local
     rewrite stop {
-        name regex (.*).{{ .Host }} ingress-nginx-controller.ingress-nginx.svc.cluster.local
+        name regex (.*).{{ .Host }} ingress-nginx-controller.ingress-nginx.svc.cluster.local answer auto
     }
-    # host name resolves to ingress IP
+
+    # host name resolves to the IP address of the kubernetes ingress service
     rewrite name exact {{ .Host }} ingress-nginx-controller.ingress-nginx.svc.cluster.local