|
42 | 42 | cpu: 1m
|
43 | 43 | memory: 50Mi
|
44 | 44 | containers:
|
45 |
| -{{ if eq .Cluster.ConfigItems.dns_cache "unbound" }} |
46 | 45 | - name: unbound
|
47 | 46 | {{- if eq .Cluster.Provider "zalando-eks" }}
|
48 | 47 | image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/unbound:1.22.0-master-10
|
@@ -119,95 +118,6 @@ spec:
|
119 | 118 | - mountPath: /run/unbound
|
120 | 119 | name: unbound-socket
|
121 | 120 | readOnly: false
|
122 |
| -{{ end }} |
123 |
| -{{ if eq .Cluster.ConfigItems.dns_cache "dnsmasq" }} |
124 |
| - - name: dnsmasq |
125 |
| - {{- if eq .Cluster.Provider "zalando-eks" }} |
126 |
| - image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/k8s-dns-dnsmasq-nanny:1.17.4-master-15 |
127 |
| - {{- else }} |
128 |
| - image: container-registry.zalando.net/teapot/k8s-dns-dnsmasq-nanny:1.17.4-master-15 |
129 |
| - {{- end }} |
130 |
| - securityContext: |
131 |
| - privileged: true |
132 |
| - livenessProbe: |
133 |
| - httpGet: |
134 |
| - path: /healthcheck/dnsmasq |
135 |
| - port: 9054 |
136 |
| - scheme: HTTP |
137 |
| - initialDelaySeconds: 60 |
138 |
| - timeoutSeconds: 5 |
139 |
| - successThreshold: 1 |
140 |
| - failureThreshold: 5 |
141 |
| - args: |
142 |
| - - -v=2 |
143 |
| - - -logtostderr |
144 |
| - - -configDir=/etc/k8s/dns/dnsmasq-nanny |
145 |
| - - -restartDnsmasq=true |
146 |
| - - -- |
147 |
| - - --no-resolv |
148 |
| - - --keep-in-foreground |
149 |
| - - --log-facility=- |
150 |
| - - --cache-size=50000 |
151 |
| - - --dns-forward-max=500 |
152 |
| - - --neg-ttl=60 |
153 |
| - # send requests to the last server first, only fallback to the previous ones if it's unreachable |
154 |
| - - --strict-order |
155 |
| - - --server=10.5.0.11#53 # TODO: fix this for ipv6 |
156 |
| - - --server={{ if eq .Cluster.ConfigItems.eks_ip_family "ipv4" }}127.0.0.1{{else}}::1{{end}}#9254 |
157 |
| - ports: |
158 |
| - - containerPort: 53 |
159 |
| - name: dns |
160 |
| - protocol: UDP |
161 |
| - - containerPort: 53 |
162 |
| - name: dns-tcp |
163 |
| - protocol: TCP |
164 |
| - resources: |
165 |
| - requests: |
166 |
| - ephemeral-storage: 256Mi |
167 |
| - limits: |
168 |
| - cpu: {{.Cluster.ConfigItems.dns_dnsmasq_cpu}} |
169 |
| - memory: {{.Cluster.ConfigItems.dns_dnsmasq_mem}} |
170 |
| - lifecycle: |
171 |
| - preStop: |
172 |
| - sleep: |
173 |
| - seconds: 35 |
174 |
| - - name: sidecar |
175 |
| - {{- if eq .Cluster.Provider "zalando-eks" }} |
176 |
| - image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/k8s-dns-sidecar:1.17.4-master-15 |
177 |
| - {{- else }} |
178 |
| - image: container-registry.zalando.net/teapot/k8s-dns-sidecar:1.17.4-master-15 |
179 |
| - {{- end }} |
180 |
| - securityContext: |
181 |
| - privileged: true |
182 |
| - livenessProbe: |
183 |
| - httpGet: |
184 |
| - path: /metrics |
185 |
| - port: 9054 |
186 |
| - scheme: HTTP |
187 |
| - initialDelaySeconds: 60 |
188 |
| - timeoutSeconds: 5 |
189 |
| - successThreshold: 1 |
190 |
| - failureThreshold: 5 |
191 |
| - args: |
192 |
| - - --v=2 |
193 |
| - - --logtostderr |
194 |
| - - --probe=dnsmasq,127.0.0.1:9254,ec2.amazonaws.com,5,A |
195 |
| - - --prometheus-port=9054 |
196 |
| - ports: |
197 |
| - - containerPort: 9054 |
198 |
| - name: metrics |
199 |
| - protocol: TCP |
200 |
| - resources: |
201 |
| - requests: |
202 |
| - ephemeral-storage: 256Mi |
203 |
| - limits: |
204 |
| - cpu: {{.Cluster.ConfigItems.dns_dnsmasq_sidecar_cpu}} |
205 |
| - memory: {{.Cluster.ConfigItems.dns_dnsmasq_sidecar_mem}} |
206 |
| - lifecycle: |
207 |
| - preStop: |
208 |
| - sleep: |
209 |
| - seconds: 35 |
210 |
| -{{ end }} |
211 | 121 | - name: coredns
|
212 | 122 | {{- if eq .Cluster.Provider "zalando-eks" }}
|
213 | 123 | image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/coredns:1.12.1-master-26
|
@@ -299,7 +209,5 @@ spec:
|
299 | 209 | path: Corefile
|
300 | 210 | - key: unbound.conf
|
301 | 211 | path: unbound.conf
|
302 |
| -{{- if eq .Cluster.ConfigItems.dns_cache "unbound" }} |
303 | 212 | - name: unbound-socket
|
304 | 213 | emptyDir: {}
|
305 |
| -{{- end }} |
0 commit comments