summaryrefslogtreecommitdiff
path: root/roles/openshift_node_dnsmasq
AgeCommit message (Collapse)Author
2017-11-27Combine openshift_node and openshift_node_dnsmasqMichael Gugino
This commit combines these two roles. This will prevent openshift_node_facts from running twice.
2017-11-22Include Deprecation - openshift-nodeRussell Teague
2017-10-31Switch from bind-interfaces to bind-dynamicScott Dodson
2017-10-30dnsmasq cache-size dns-forward-max changePhil Cameron
On very large clusters dnsmasq performance suffers due to limited cache-size and dns-forward-max values. bug: 1482847 https://bugzilla.redhat.com/show_bug.cgi?id=1482847
2017-10-25Change dnsmasq to bind-interfaces + except-interfacesMichael Gugino
Currently, we have to set the listen ip for dnsmasq via ansible during installation. This commit enables dnsmasq to bind-interfaces + exclude interfaces to ensure dnsmasq doesn't listen on lo interface.
2017-10-19Add variable to control whether NetworkManager hook is installedMichael Hanselmann
We control /etc/resolv.conf and parts of the dnsmasq configuration via Puppet in our environment. The hook ends up overwriting the managed configuration.
2017-09-29Add valid search when search does not exist on resolv.confKenjiro Nakayama
2017-09-26Support installation of NetworkManager for provisioned nodesMichael Gugino
Currently, automated AWS provisionging fails when provisioning with images that don't already have NetworkManager installed and activated. This commit adds NetworkManager to the build_ami provisioning process, if not already installed.
2017-09-15Ensure valid search on resolv.confMateus Caruccio
On cluster without internal name resolution there will be no `search XXX` on /etc/resolv.conf at all, thus this script will fail to add an entry for `cluster.local`.
2017-09-06Remove openshift-commonMichael Gugino
Most of this role's purpose was to set facts. The vast majority of these facts were simply redefining user-supplied variables. This commit also removes various artifacts leftover from previous versions, as well as variables that seem to be entirely unused.
2017-08-29Merging openshift_node with openshift bootstrap.Kenny Woodson
2017-08-21If IP4_NAMESERVERS are unset then pull the value from /etc/resolv.confScott Dodson
This will happen whenever someone has directly modified /etc/resolv.conf Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1480438
2017-08-18Ensure that openshift_node_facts has been called for dns_ipScott Dodson
2017-08-14Use openshift.node.dns_ip as listening addressScott Dodson
2017-07-26Simplify generation of /etc/origin/node/resolv.confScott Dodson
Don't attempt to copy /etc/resolv.conf whenever there's no watermark, just write out the list of nameservers that network manager tells us about like we do for origin-upstream-dns.conf Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1474707
2017-06-30Prevent the script to use default route ip as upstream nameserver.Steve Teuber
2017-06-30Use default ports for dnsmasq and node dnsScott Dodson
2017-06-30Run dns on the node and use that for dnsmasqScott Dodson
2017-06-18Push to the registry via dnsScott Dodson
Configures OPENSHIFT_DEFAULT_REGISTRY=docker-registry.default.svc Adds 'cluster.local' to dns search on nodes via dispatcher script Adds '.svc' to NO_PROXY defaults
2017-06-13Disable negative caching, set cache TTL to 1sSteve Kuznetsov
When running headless services as pods on OpenShift, no ClusterIP is assigned. In these cases, peer pods are relying on DNS to locate the service endpoints. When a pod is deleted or another trigger causes the endpoint to change, the OpenShift DNS is updated immediately. However, dnsmasq has a default TTL of 30s, so the wrong response is returned on name resolution. Removing negative caching and turning the TTL to a very short 1s should resolve the issue. Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
2016-12-12YAML LintingRussell Teague
* Added checks to make ci for yaml linting * Modified y(a)ml files to pass lint checks
2016-12-05node_dnsmasq - restart dnsmasq if it's not currently runningScott Dodson
Fixes Bug 1401425 Fixes BZ1401425
2016-12-01openshift_node_dnsmasq - Remove strict-order option from dnsmasqScott Dodson
strict-order forces dnsmasq to iterate through nameservers in order. If one of the nameservers is down this will slow things down while dnsmasq waits for a timeout. Also, this option prevents dnsmasq from querying other nameservers if the first one returns a negative result. While I think it's odd to have a nameserver that returns negative results for a query that another returns positive results for this does seem to fix the issue in testing. Fixes Bug 1399577
2016-11-29Merge pull request #2853 from alexcern/dhcpv6Scott Dodson
Set nameservers on DHCPv6 event
2016-11-28Refactored to use Ansible systemd moduleRussell Teague
* Ansible systemd module used in place of service module * Refactored command tasks which are no longer necessary * Applying rules from openshift-ansible Best Practices Guide
2016-11-23Set nameservers on DHCPv6 eventAlex Lossent
A dhcp6-change event may happen on nodes running dual stack IPv4/IPv6 and DHCP, even if Openshift itself doesn't use IPv6. /etc/resolv.conf needs be adjusted as well in this case.
2016-11-22Make the role work on F25 CloudMichael Scherer
On F24 and earlier, systemctl show always returned 0. On F25, it return 1 when a service do not exist, and thus the role fail on Fedora 25 cloud edition.
2016-11-21Merge pull request #2818 from mtnbikenc/package-refactorScott Dodson
Refactor to use Ansible package module
2016-11-18Create the file in two passes, atomicly copy it overScott Dodson
2016-11-17node_dnsmasq -- Set dnsmasq as our only nameserverScott Dodson
2016-11-17Refactor to use Ansible package moduleRussell Teague
The Ansible package module will call the correct package manager for the underlying OS.
2016-11-01Only restart dnsmasq if the DNS servers have changedTim Bielawa
2016-10-24Enable dnsmasq serviceScott Dodson
2016-07-01Merge pull request #2112 from sdodson/dnsmasq-additional-configScott Dodson
Add support for supplying a dnsmasq.conf file
2016-07-01Restart dnsmasq encase it was already runningScott Dodson
2016-07-01Add support for supplying a dnsmasq.conf fileScott Dodson
Useful for POC environments where DNS may not actually be setup yet. Make sure you don't define anything that would conflict with the default configuration. You have been warned.
2016-06-30Merge pull request #2028 from IshentRas/fix_dnsScott Dodson
Improve 99-origin-dns.sh
2016-06-22NetworkManager service never changesTim Bielawa
* Don't ever report the NetworkManager service as changed when preparing to set the 'network_manager_active' fact
2016-06-13- Prevent the script to override n number of the time the same nameserverIshentRas
- Prevent the script to echo blank values from IP4_NAMESERVERS variable
2016-05-26Use grep to decide when to add our commentScott Dodson
According to the man page for resolv.conf # needs to be in the first collumn in order to start a comment. While this didn't seem to affect glibc's resolver it did really confuse the kubelet which parses the host's resolv.conf
2016-05-23Removed the echo line and replaced it with inline comment. To keep ↵Jonas Nordell
99-origin-dns.sh from adding a new line in /etc/resolv.conf everytime the NetworkManager dispatcher script is executed.
2016-05-12Sync comments with origin prScott Dodson
2016-05-12Use IP4_NAMESERVERS rather than DHCP4_DOMAIN_NAME_SERVERSScott Dodson
Only modify resolv.conf if IP4_NAMESERVERS is defined, it's not safe to do so otherwise.
2016-05-02listen on all interfacesScott Dodson
2016-04-29Make NetworkManager failure friendlierScott Dodson
2016-04-19Add openshift_node_dnsmasqScott Dodson