Fix
After v1.8.0, ./scripts/resume.sh could leave the cluster with broken cluster DNS on some resumes — most visibly argocd-repo-server stuck in CrashLoopBackOff because it couldn't helm pull from argoproj.github.io (lookup failed via CoreDNS → dnsmasq → upstream).
Three issues after a Colima daemon reload:
- dnsmasq comes back listening on
:53but unresponsive. CoreDNS forwards to it for*.localand the forward chain stalls, cascading into every pod that needs external DNS (repo-server helm charts, cert-manager webhooks, etc.). - CoreDNS holds a stale upstream cache even after dnsmasq recovers.
- Ghost pods from the pre-stop state land stuck Terminating or CrashLoopBackOff on the broken DNS.
resume.sh now:
docker restart dnsmasqkubectl -n kube-system rollout restart deploy coredns+ wait- Force-remove Terminating ghosts (
--force --grace-period=0) - Delete CrashLoopBackOff pods so they reschedule against the now-healthy DNS
Observed end-to-end today: these three fixes take argocd-repo-server from 5 restarts + CrashLoopBackOff to 1/1 Running in ~40 seconds.
Full changelog
See CHANGELOG.md.