Added native CoreDNS system for recursive DNS
This will get native DNS out of the box for users and it will use DNS
over TLS as well to ensure requests go over the network securely.
Sem-Ver: feature
Change-Id: I3046fc1bf775afc86d60695d7ebe175799b9159f
diff --git a/roles/coredns/tasks/main.yml b/roles/coredns/tasks/main.yml
new file mode 100644
index 0000000..51a94be
--- /dev/null
+++ b/roles/coredns/tasks/main.yml
@@ -0,0 +1,89 @@
+# Copyright (c) 2022 VEXXHOST, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+- name: Deploy Helm chart
+ kubernetes.core.k8s:
+ state: present
+ definition:
+ - apiVersion: source.toolkit.fluxcd.io/v1beta2
+ kind: HelmRepository
+ metadata:
+ name: coredns
+ namespace: openstack
+ spec:
+ interval: 60s
+ url: https://coredns.github.io/helm
+
+ - apiVersion: helm.toolkit.fluxcd.io/v2beta1
+ kind: HelmRelease
+ metadata:
+ name: neutron-coredns
+ namespace: openstack
+ spec:
+ interval: 60s
+ chart:
+ spec:
+ chart: coredns
+ version: 1.19.4
+ sourceRef:
+ kind: HelmRepository
+ name: coredns
+ values:
+ replicaCount: 3
+ service:
+ name: neutron-coredns
+ clusterIP: 10.96.0.20
+ isClusterService: false
+ servers:
+ - port: 53
+ zones:
+ - zone: .
+ plugins:
+ - name: errors
+ - name: ready
+ - name: health
+ configBlock: |-
+ lameduck 5s
+ - name: prometheus
+ parameters: 0.0.0.0:9153
+ - name: cache
+ - name: reload
+ - name: loadbalance
+ - name: forward
+ parameters: . 127.0.0.1:5301 127.0.0.1:5302
+ - port: 5301
+ zones:
+ - zone: .
+ plugins:
+ - name: forward
+ parameters: . tls://1.1.1.1 tls://1.0.0.1
+ configBlock: |-
+ tls_servername cloudflare-dns.com
+ health_check 5s
+ - port: 5302
+ zones:
+ - zone: .
+ plugins:
+ - name: forward
+ parameters: . tls://8.8.8.8 tls://8.8.4.4
+ configBlock: |-
+ tls_servername dns.google
+ health_check 5s
+ nodeSelector:
+ openstack-control-plane: enabled
+ customLabels:
+ application: neutron
+ component: coredns
+ deployment:
+ name: neutron-coredns