Skip to content

Latest commit

 

History

History
28 lines (22 loc) · 1.73 KB

README.md

File metadata and controls

28 lines (22 loc) · 1.73 KB
Raw

kubernetes-dnsConfig-mutating-webhook

Docker Build Vulnerability Scanning

This is a Kubernetes mutating webhook to manipulate dnsConfig and dnsPolicy dynamically.

If dnsPolicy is not specified or is set as ClusterFirst, the pod creation request is intercepted and mutated as the following:

  dnsConfig:
    nameservers:
    - 169.254.25.10
    options:
    - name: timeout
      value: "1"
    - name: ndots
      value: "2"
    - name: attempts
      value: "1"
    searches:
    - svc.dev-team
  dnsPolicy: None

Ndots, attempts and timeout values can be given as environment variables of the backend container. Since this architecture is designed for a cluster that uses nodelocalDNS, nodelocalDNS_IP should be set as an environment variable too. Backend reads clusterDomain which is assumed to be the same as the cluster name from the cluster-info configmap or alternatively it can read clusterDomain from kubelet-config.

Namespaces which is wanted to be excluded can be given in the configmap

logs