Uploaded image for project: 'OpenShift Installer'
  1. OpenShift Installer
  2. CORS-4137

Configure upstream IPv6 nameserver for non-cluster DNS queries

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • None
    • None
    • None

      User Story:

      When a non-cluster (internet) DNS query is forwarded by coreDNS to an upstream nameserver, the destination should be configured to be AWS Route53 Resolver Service at fd00:ec2::253 (AWS IPv6 name server).  If using custom DNS, the default nameserver should also be configured to be fd00:ec2::253.

      The reason is that pods will only have IPv6 and the node's /etc/resolv.conf only defines an IPv4 namesever. Thus, the query will fail due to "unreachable network" error.

      Acceptance Criteria:

      Description of criteria:

      • DNS operator specs define fd00:ec2::253 as an upstream namesever for the coreDNS. 
      • When custom DNS is enabled, unit file that updates cluster DNS should be configured to set fd00:ec2::253.

      (optional) Out of Scope:

      Detail about what is specifically not being delivered in the story

      Engineering Details:

      • Below is an example manifest that configure the DNS operator's upstream nameservers.
      apiVersion: operator.openshift.io/v1
      kind: DNS
      metadata:
        name: default
      spec:
        upstreamResolvers: 
          policy: Sequential
          upstreams:
          - type: Network
            address: fd00:ec2::253
          - type: SystemResolvConf 

      This requires/does not require a design proposal.
      This requires/does not require a feature gate.

              Unassigned Unassigned
              rh-ee-thvo Thuan Vo
              None
              None
              Yunfei Jiang Yunfei Jiang
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: