Configure CoreDNS and kubelet for dual stack DNS#7686
Conversation
hmm, in this case I don't think there's much of a difference. In our case we know when things are dual-stack. This is what kube docs say, so if I read that correctly both Prefer.. and Require... behave exact same in our case. |
|
yeah that's how I interpreted the docs as well. I went with "prefer" only for the remote chance of the service somehow being misaligned with the cluster dualstack configuration and then being blocked because it is RequireDualStack but doesn't have/receive an IPv6. not sure if that is ever a realistic scenario. |
2c6e287 to
3836ae5
Compare
| APIServer *k0snet.HostPort | ||
| ServiceCIDRIPv4 string | ||
| ClusterDNSIP string | ||
| ClusterDNSIPs []net.IP |
There was a problem hiding this comment.
@twz123 Removing DNSAddress() revealed that this field is unused, which is kinda concerning.
|
This pull request has merge conflicts that need to be resolved. |
|
I'll rebase in the evening. Any input regarding the unused calico fields? |
e4011b0 to
31587b3
Compare
31587b3 to
c9e9488
Compare
|
Is there still a chance this could land for 1.36 or 1.36.1? |
Previously the kube-dns service only received the primary IP address and the service was single stack. It is now configured with 2 address and address families and PreferDualStack (maybe that should be require?). To utilize the IP addresses, kubelet's config now also includes both IP addresses when running in dual stack mode. Signed-off-by: Phillip Schichtel <phillip@schich.tel>
Most of the remaining usages were tests. The new test cases also verify the dual stack case. Signed-off-by: Phillip Schichtel <phillip@schich.tel>
c9e9488 to
59c46c7
Compare
|
Fixed the failing test and rebased. |
I guess we can backport this. |
Description
Previously the kube-dns service only received the primary IP address and the service was single stack. It is now configured with 2 address and address families and PreferDualStack (maybe that should be require?). To utilize the IP addresses, kubelet's config now also includes both IP addresses when running in dual stack mode.
Doesn't fix, but is related to: #7186
Type of change
How Has This Been Tested?
Checklist