Azure / AKS

Azure Kubernetes Service
https://azure.github.io/AKS/
1.97k stars 307 forks source link

Request for CoreDNS upgrade to 1.8.5 to support wildcard RR pairs #2668

Closed theharrisonchow closed 2 years ago

theharrisonchow commented 2 years ago

What happened: There is a bug on CoreDNS 1.8.4 and lower which restricts the use of wildcard RR pairs on coreDNS file plugin. There are no alternative if we want to serve wildcard records via coreDNS as there are no plugin customizations available.

1.8.5 Release information: https://coredns.io/2021/09/10/coredns-1.8.5-release/

Specific Wildcard RR Pair fix: https://github.com/coredns/coredns/pull/4828

What you expected to happen: Allow for wildcard RR pairs in coreDNS within AKS.

How to reproduce it (as minimally and precisely as possible):

Example here: abc.bcd.wildcard.com does not resolve, whereas, cde.wildcard.com resolves

apiVersion: v1
kind: ConfigMap
metadata:
  name: coredns-custom
  namespace: kube-system
data:
  db.wildcard.com: |
    $ORIGIN wildcard.com.
    @  3600 IN  SOA sns.dns.icann.org. noc.dns.icann.org. (
      2020080302 ;
      7200       ;
      3600       ;
      1209600    ;
      3600       ;
    )
    *.bcd                   IN  A  10.0.0.1 #  abc.bcd.wildcard.com does not resolve
    cde                     IN  A  10.0.0.2 #  this resolves
  wildcard.com.server: |
    wildcard.com:53 {
      errors
      health
      # issue in coreDNS CNAME Resolution for wildcards to be fixed in 1.8.5 coredns https://coredns.io/2021/09/10/coredns-1.8.5-release/
      # Temporary workaround is to manually serve all records :(
      file /etc/coredns/custom/db.wildcard.com wildcard.com
      # Fall back to use subnet dns server
      forward . /etc/resolv.conf
      cache 30
    }

Anything else we need to know?:

Environment:

ghost commented 2 years ago

Hi theharrisonchow, AKS bot here :wave: Thank you for posting on the AKS Repo, I'll do my best to get a kind human from the AKS team to assist you.

I might be just a bot, but I'm told my suggestions are normally quite good, as such: 1) If this case is urgent, please open a Support Request so that our 24/7 support team may help you faster. 2) Please abide by the AKS repo Guidelines and Code of Conduct. 3) If you're having an issue, could it be described on the AKS Troubleshooting guides or AKS Diagnostics? 4) Make sure your subscribed to the AKS Release Notes to keep up to date with all that's new on AKS. 5) Make sure there isn't a duplicate of this issue already reported. If there is, feel free to close this one and '+1' the existing issue. 6) If you have a question, do take a look at our AKS FAQ. We place the most common ones there!

qpetraroia commented 2 years ago

Hey @theharrisonchow,

We never had CoreDNS version 1.8.4. If you are using a cluster version >= 1.20, you are using CoreDNS version 1.8.6. May I ask how are you exactly stuck here?

Thanks, Quentin

theharrisonchow commented 2 years ago

Confirmed issue no longer exists after rebooting cluster. Strange, will close for now.