Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add support for defining dnsPolicy and dnsConfig options for ECK operator statefulset #7999

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

Add support for defining dnsPolicy and dnsConfig options for ECK operator statefulset #7999

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
fa4752f
Add support to STS for defining DNS policy and config
haam3r Aug 12, 2024
600fb42
Fix flow control and values.yaml definitions
haam3r Aug 12, 2024
f71251c
dns policy and config should be defined together. Document dns policy…
haam3r Aug 12, 2024
61d0318
Take full yaml direct from values
haam3r Aug 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions deploy/eck-operator/templates/statefulset.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -174,6 +174,12 @@ spec:
{{- if .Values.hostNetwork }}
hostNetwork: true
dnsPolicy: ClusterFirstWithHostNet
{{- else if and (.Values.dnsPolicy) (.Values.dnsConfig) }}
dnsPolicy: {{ .Values.dnsPolicy }}
{{- end }}
{{- if and (.Values.dnsConfig) (.Values.dnsPolicy) }}
dnsConfig:
{{- .Values.dnsConfig | toYaml | nindent 8 }}
{{- end }}
{{- with .Values.nodeSelector }}
nodeSelector:
Expand Down
25 changes: 22 additions & 3 deletions deploy/eck-operator/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -146,6 +146,24 @@ webhook:
# This is required to allow for communication with the kube API when using some alternate CNIs in conjunction with webhook enabled.
# CAUTION: Proceed at your own risk. This setting has security concerns such as allowing malicious users to access workloads running on the host.
hostNetwork: false
#
# dnsPolicy defines the DNS policy for the operator pod. Available options are:
# - ClusterFirst: Any DNS query that does not match the configured cluster domain suffix, is forwarded to an upstream nameserver by the DNS server
# - ClusterFirstWithHostNet: For Pods running with hostNetwork, you should explicitly set its DNS policy to "ClusterFirstWithHostNet". Otherwise, Pods running with hostNetwork and "ClusterFirst" will fallback to the behavior of the "Default" policy.
# - Default: The Pod inherits the name resolution configuration from the node that the Pods run on
# - None: It allows a Pod to ignore DNS settings from the Kubernetes environment. All DNS settings are supposed to be provided using the dnsConfig field in the Pod Spec.
dnsPolicy: ""

# dnsConfig defines the DNS configuration for the operator pod.
# dnsConfig:
# nameservers:
# - 169.254.20.10
# searches:
# - svc.cluster.local
# options:
# - name: ndots
# value: "2"
dnsConfig: {}

softMultiTenancy:
# enabled determines whether the operator is installed with soft multi-tenancy extensions.
Expand Down Expand Up @@ -266,7 +284,8 @@ config:
disableConfigWatch: false

# exposedNodeLabels is an array of regular expressions of node labels which are allowed to be copied as annotations on Elasticsearch Pods.
exposedNodeLabels: [ "topology.kubernetes.io/.*", "failure-domain.beta.kubernetes.io/.*" ]
exposedNodeLabels:
["topology.kubernetes.io/.*", "failure-domain.beta.kubernetes.io/.*"]

# ipFamily specifies the IP family to use. Possible values: IPv4, IPv6 and "" (auto-detect)
ipFamily: ""
Expand Down Expand Up @@ -302,7 +321,6 @@ config:
# Prometheus PodMonitor configuration
# Reference: https://github.com/prometheus-operator/prometheus-operator/blob/master/Documentation/api.md#podmonitor
podMonitor:

# enabled determines whether a podMonitor should deployed to scrape the eck metrics.
# This requires the prometheus operator and the config.metrics.port not to be 0
enabled: false
Expand Down Expand Up @@ -333,7 +351,8 @@ podMonitor:
# Prometheus ServiceMonitor configuration
# Only used when config.enableSecureMetrics is true
# Reference: https://github.com/prometheus-operator/prometheus-operator/blob/master/Documentation/api.md#servicemonitor
serviceMonitor: {}
serviceMonitor:
{}

# namespace determines in which namespace the serviceMonitor will be deployed.
# If not set the serviceMonitor will be created in the namespace where the Helm release is installed into
Expand Down