Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cloud-api-adaptor: Set dnsPolicy to ClusterFirstWithHostNet #1775

Merged
merged 1 commit into from
Apr 10, 2024

Conversation

davidhadas
Copy link
Member

@davidhadas davidhadas commented Apr 7, 2024

change dns setting of the CAA daemonset's pod-spec

name: cloud-api-adaptor-daemonset
namespace: confidential-containers-system

Should use dnsPolicy: ClusterFirstWithHostNet

@davidhadas davidhadas force-pushed the DnsPolicy2 branch 2 times, most recently from f44286d to 22dc011 Compare April 9, 2024 18:14
Copy link
Member

@bpradipt bpradipt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@davidhadas can you please update the commit message with this reference mentioning about the correct dnsPolicy setting when hostNetwork: true https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/

change dns setting of the CAA daemonset's pod-spec

name: cloud-api-adaptor-daemonset
namespace: confidential-containers-system

The correct dnsPolicy setting when hostNetwork: true is
dnsPolicy: ClusterFirstWithHostNet

See https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/

Signed-off-by: David Hadas <david.hadas@gmail.com>
Copy link
Member

@stevenhorsman stevenhorsman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks David and Pradipta for the fix and link to the doc explaining it!

@bpradipt bpradipt merged commit a2047c5 into confidential-containers:main Apr 10, 2024
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants