unkinben
8886fe71ee
Fixes recursion being refused for external clients: the resolver had no allow-recursion, so BIND defaulted to localnets. Mirrors the puppet resolver config exactly. - add openforwarder BindView: match-clients = internal ACLs, recursion yes, allow-recursion/allow-query any (match-clients gates access) - add 4 BindACLs (acl-main.unkin.net / acl-dmz / acl-common / acl-nomad-jobs) from puppet acls.conf - add 26 conditional forward zones (unkin/consul/k8s/dmz upstreams), bound to the openforwarder view; needs operator v0.1.4 to render them on every pod - global forwarders 8.8.8.8/1.1.1.1 (puppet default) - bump operator image to v0.1.4
10 lines
148 B
YAML
10 lines
148 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- cluster.yaml
|
|
- acls.yaml
|
|
- view.yaml
|
|
- forward-zones.yaml
|