Add dnsDomainDot to allow .cluster.local. in proxied environements

giantswarm · Nov 29, 2024 · 616d898 · 616d898
1 parent ad34d99
commit 616d898
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Add dnsDomainDot to fix an issue with applications using .cluster.local.
+
 ## [0.6.2] - 2024-10-31
 
 ### Changed

diff --git a/helm/kyverno-policies-connectivity/templates/proxy/PodController.yaml b/helm/kyverno-policies-connectivity/templates/proxy/PodController.yaml
@@ -57,6 +57,9 @@ spec:
         - name: dnsDomain
           variable:
             value: {{`"{{ clusterConfiguration.networking.dnsDomain }}"`}}
+        - name: dnsDomainDot
+          variable:
+            value: {{`"{{ clusterConfiguration.networking.dnsDomain }}."`}}
         - name: podSubnet
           variable:
             value: {{`"{{ clusterConfiguration.networking.podSubnet }}"`}}
@@ -65,7 +68,7 @@ spec:
             value: {{`"{{ clusterConfiguration.networking.serviceSubnet }}"`}}
         - name: dynamicNoProxy
           variable:
-            value: {{`"{{apiEndpoint}},{{dnsDomain}},{{podSubnet}},{{serviceSubnet}}"`}}
+            value: {{`"{{apiEndpoint}},{{dnsDomain}},{{dnsDomainDot}},{{podSubnet}},{{serviceSubnet}}"`}}
         - name: fullNoProxy
           variable:
             value: {{ printf "\"%s,%s,%s\"" $proxy.noProxy "svc,127.0.0.1,localhost" "{{dynamicNoProxy}}" }}

diff --git a/policies/connectivity/proxy/PodController.yaml b/policies/connectivity/proxy/PodController.yaml
@@ -56,6 +56,9 @@ spec:
         - name: dnsDomain
           variable:
             value: [[`"[[ clusterConfiguration.networking.dnsDomain ]]"`]]
+        - name: dnsDomainDot
+          variable:
+            value: [[`"[[ clusterConfiguration.networking.dnsDomain ]]."`]]
         - name: podSubnet
           variable:
             value: [[`"[[ clusterConfiguration.networking.podSubnet ]]"`]]
@@ -64,7 +67,7 @@ spec:
             value: [[`"[[ clusterConfiguration.networking.serviceSubnet ]]"`]]
         - name: dynamicNoProxy
           variable:
-            value: [[`"[[apiEndpoint]],[[dnsDomain]],[[podSubnet]],[[serviceSubnet]]"`]]
+            value: [[`"[[apiEndpoint]],[[dnsDomain]],[[dnsDomainDot]],[[podSubnet]],[[serviceSubnet]]"`]]
         - name: fullNoProxy
           variable:
             value: [[ printf "\"%s,%s,%s\"" $proxy.noProxy "svc,127.0.0.1,localhost" "[[dynamicNoProxy]]" ]]