From 49fbed8380b894ea46eb4705a4620ab8d2b8dbeb Mon Sep 17 00:00:00 2001
From: govardhan <govardhan@gmail.com>
Date: Sat, 15 Nov 2025 19:30:59 +0530
Subject: [PATCH] Fix DNS server: Remove kubernetes plugin, use TCP health
 checks

---
 dns-server.yaml | 39 ++++++++++++++-------------------------
 1 file changed, 14 insertions(+), 25 deletions(-)

diff --git a/dns-server.yaml b/dns-server.yaml
index 31fba5b..51f18eb 100644
--- a/dns-server.yaml
+++ b/dns-server.yaml
@@ -47,15 +47,14 @@ data:
         prometheus :9153
     }
 
-    # Internal Kubernetes DNS
-    cluster.local:53 {
-        errors
-        kubernetes cluster.local in-addr.arpa ip6.arpa {
-            pods insecure
-            fallthrough in-addr.arpa ip6.arpa
-        }
-        prometheus :9153
-    }
+    # Internal services (optional - for internal cluster DNS)
+    # Disabled kubernetes plugin to avoid RBAC issues
+    # cluster.local:53 {
+    #     errors
+    #     kubernetes cluster.local {
+    #         pods insecure
+    #     }
+    # }
 
     # Forward all other queries to upstream DNS
     .:53 {
@@ -241,25 +240,15 @@ spec:
               name: metrics
               protocol: TCP
           livenessProbe:
-            httpGet:
-              path: /health
-              port: 8080
-              scheme: HTTP
-            initialDelaySeconds: 60
+            tcpSocket:
+              port: 53
+            initialDelaySeconds: 15
             periodSeconds: 10
-            timeoutSeconds: 5
-            successThreshold: 1
-            failureThreshold: 5
           readinessProbe:
-            httpGet:
-              path: /ready
-              port: 8181
-              scheme: HTTP
-            initialDelaySeconds: 10
+            tcpSocket:
+              port: 53
+            initialDelaySeconds: 5
             periodSeconds: 5
-            timeoutSeconds: 5
-            successThreshold: 1
-            failureThreshold: 3
           resources:
             requests:
               memory: "256Mi"