chore: disable coredns cache for cluster domain

Ref: kubernetes/kubernetes#128359 Also bring in small changes from upstream CoreDNS config. Signed-off-by: Noel Georgi <[email protected]>
siderolabs · Oct 31, 2024 · 7aeb15f · 7aeb15f
1 parent d8b6521
commit 7aeb15f
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/internal/app/machined/pkg/controllers/k8s/templates/core-dns-template.yaml b/internal/app/machined/pkg/controllers/k8s/templates/core-dns-template.yaml
@@ -65,9 +65,17 @@ data:
         kubernetes {{ .ClusterDomain }} in-addr.arpa ip6.arpa {
             pods insecure
             fallthrough in-addr.arpa ip6.arpa
+            ttl 30
+        }
+        forward . /etc/resolv.conf {
+           max_concurrent 1000
         }
-        forward . /etc/resolv.conf
         cache 30
+        {{- if .ClusterDomain }} {
+           disable success {{ .ClusterDomain }}
+           disable denial {{ .ClusterDomain }}
+        }
+        {{- end }}
         loop
         reload
         loadbalance