move coredns pods to 10053, and redirect service (#90)

This commit is contained in:
Chris O'Haver 2018-08-27 09:41:07 -04:00 committed by GitHub
parent f6d0a56b78
commit 4ffa2dfa21
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -46,7 +46,7 @@ metadata:
namespace: kube-system namespace: kube-system
data: data:
Corefile: | Corefile: |
.:53 { .:10053 {
errors errors
health health
kubernetes CLUSTER_DOMAIN REVERSE_CIDRS { kubernetes CLUSTER_DOMAIN REVERSE_CIDRS {
@ -105,10 +105,10 @@ spec:
mountPath: /etc/coredns mountPath: /etc/coredns
readOnly: true readOnly: true
ports: ports:
- containerPort: 53 - containerPort: 10053
name: dns name: dns
protocol: UDP protocol: UDP
- containerPort: 53 - containerPort: 10053
name: dns-tcp name: dns-tcp
protocol: TCP protocol: TCP
- containerPort: 9153 - containerPort: 9153
@ -117,8 +117,6 @@ spec:
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
add:
- NET_BIND_SERVICE
drop: drop:
- all - all
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
@ -160,6 +158,8 @@ spec:
- name: dns - name: dns
port: 53 port: 53
protocol: UDP protocol: UDP
targetPort: 10053
- name: dns-tcp - name: dns-tcp
port: 53 port: 53
protocol: TCP protocol: TCP
targetPort: 10053