kubernetes: k3s resolv-conf from fixed nameservers 1.1.1.1 and 9.9.9.9 instead of a copy of the node

2026-10-27 15:24:48 +00:00
parent e1b5639d65
commit 66657f3917
3 changed files with 19 additions and 11 deletions
@@ -19,10 +19,16 @@ kubernetes:
  token: <shared token for nodes to join>

  network:
-    # Copies the current /etc/resolv.conf whilst only keeping "nameserver" lines
-    #  can be used to remove filter
+    # Writes /etc/resolv-k3s.conf (k3s resolv-conf, CoreDNS upstreams) from
+    #  resolv_conf_nameservers
    clean_resolv_conf: false

+    # Fixed upstreams, not copied from the node: a copied snapshot goes stale
+    #  when the node's DNS changes and can leave CoreDNS with a single upstream
+    resolv_conf_nameservers:
+      - 1.1.1.1
+      - 9.9.9.9
+
    # One of [none, flannel, calico, cilium]
    plugin: calico