-
Notifications
You must be signed in to change notification settings - Fork 45
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
salt,docs,tests: Allow to disable CoreDNS host forwarding #4019
salt,docs,tests: Allow to disable CoreDNS host forwarding #4019
Conversation
Hello teddyandrieux,My role is to assist you with the merge of this Status report is not available. |
Waiting for approvalThe following approvals are needed before I can proceed with the merge:
Peer approvals must include at least 1 approval from the following list: |
/approve |
Waiting for approvalThe following approvals are needed before I can proceed with the merge:
Peer approvals must include at least 1 approval from the following list: The following options are set: approve |
e0eb70d
to
4385839
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, would just like a bit more details (for posterity) about kubelet needing a resolv.conf :)
It means pod running in Kubernetes will not be able to resolve any name | ||
that are not in Kubernetes. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There still is a way to make it work with ExternalName
Service objects 😉
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If it's in a Service as ExternalName
then it's in Kubernetes 😃
annotations: | ||
# NOTE: Add annotation for config checksum, so that Pod get restarted on | ||
# ConfigMap change | ||
checksum/config: __slot__:salt:metalk8s_kubernetes.get_object_digest(kind="ConfigMap", | ||
apiVersion="v1", namespace="kube-system", name="coredns", path="data") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
💯
Ensure resolv config file exists: | ||
file.managed: | ||
- name: {{ kubelet.config.resolvConf }} | ||
- create: true | ||
- replace: false |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you explain this part? I see we're defining it to be /etc/resolv.conf
, and we're passing it to kubelet, but not sure what it does... And also is it safe to just create an empty one? Like, how would this interact with the rest of the system services?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It just creates an empty resolv.conf
because Kubelet needs a file otherwise it fails, and for my testing it works well with an empty file
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OK, let's keep the conversation open for future readers, but I trust your testing 😉
4385839
to
10c7e5f
Compare
Build failedThe build for commit did not succeed in branch improvement/handle-no-nameserver-env. The following options are set: approve |
In the queueThe changeset has received all authorizations and has been added to the The changeset will be merged in:
The following branches will NOT be impacted:
There is no action required on your side. You will be notified here once IMPORTANT Please do not attempt to modify this pull request.
If you need this pull request to be removed from the queue, please contact a The following options are set: approve |
I have successfully merged the changeset of this pull request
The following branches have NOT changed:
Please check the status of the associated issue None. Goodbye teddyandrieux. |
No description provided.