nixos-ha-kubernetes icon indicating copy to clipboard operation
nixos-ha-kubernetes copied to clipboard

Published 20 hours ago • verified publisher icon justinas

DNS is not highly-available

Open justinas opened this issue 3 years ago • 1 comments

Currently, we run one CoreDNS service per worker node (good), but the containers' resolv.conf points only to the host node itself as the name server (bad):

https://github.com/justinas/nixos-ha-kubernetes/blob/f9d01ef37174de4ac4e9537fa6f8508696a4f22c/modules/worker/coredns.nix#L39

If Kubelet is alive, but CoreDNS is dead on the node, containers running on that node will fail to resolve names.

justinas avatar Feb 13 '22 23:02 justinas

Looks like no easy way to fix this because services.kubernetes.kubelet.clusterDns only accepts string

hughjfchen avatar Dec 05 '22 05:12 hughjfchen