{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/8886","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/8886/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/8886/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/8886/events","html_url":"https://github.com/openshift/origin/issues/8886","id":154942018,"number":8886,"title":"DNS Problems in local Openshift origin environment","user":{"login":"gt-tech","id":10932476,"avatar_url":"https://avatars.githubusercontent.com/u/10932476?v=3","gravatar_id":"","url":"https://api.github.com/users/gt-tech","html_url":"https://github.com/gt-tech","followers_url":"https://api.github.com/users/gt-tech/followers","following_url":"https://api.github.com/users/gt-tech/following{/other_user}","gists_url":"https://api.github.com/users/gt-tech/gists{/gist_id}","starred_url":"https://api.github.com/users/gt-tech/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gt-tech/subscriptions","organizations_url":"https://api.github.com/users/gt-tech/orgs","repos_url":"https://api.github.com/users/gt-tech/repos","events_url":"https://api.github.com/users/gt-tech/events{/privacy}","received_events_url":"https://api.github.com/users/gt-tech/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-05-16T00:44:05Z","updated_at":"2016-05-16T02:47:24Z","closed_at":"2016-05-16T02:47:24Z","body":"After following instructions mentioned here - http://developers.redhat.com/blog/2015/11/19/dns-your-openshift-v3-cluster/, my source-to-image builder pods are unable to get to my intranet code repository which were working until i made the changes as mentioned in previous link, the reason I had to make those changes was because my services weren't able to discover each other otherise.\r\n\r\n##### Version\r\noc v1.2.0-rc1\r\nkubernetes v1.2.0-36-g4a3f9c5\r\n\r\n\r\n##### Steps To Reproduce\r\n1. Install Openshift Origin using default ansible playbook\r\n2. Make changes http://developers.redhat.com/blog/2015/11/19/dns-your-openshift-v3-cluster/\r\n\r\nEnsure that kubernetes.default.svc.cluster.local is resolvable by using \"dig\" command using -p 8053 or without any explicit port (implying hittin default port 53 where dnsmasq is running) which means local DNS server at 53 is smart enough to resolve kubernetes services as well as general internet names.\r\n\r\nBut when the PODs are created, there port 53 is mapped to 8053 port on host which means any DNS query from within POD will hit SkyDNS? (openshift DNS) which isn't capable to resolve anything outside what's in etcd.\r\n\r\n##### Current Result\r\nName resolution outside etcd failing from inside POD\r\n\r\n##### Expected Result\r\nIdeally there should be a way for POD to resolve both internal openshift created objects/services as well ability to resolve names from external DNS server running on master/host.\r\n\r\n##### Additional Information\r\nIs there something missing in instructions or ansible configurations to make this happen?"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/219337902","html_url":"https://github.com/openshift/origin/issues/8886#issuecomment-219337902","issue_url":"https://api.github.com/repos/openshift/origin/issues/8886","id":219337902,"user":{"login":"gt-tech","id":10932476,"avatar_url":"https://avatars.githubusercontent.com/u/10932476?v=3","gravatar_id":"","url":"https://api.github.com/users/gt-tech","html_url":"https://github.com/gt-tech","followers_url":"https://api.github.com/users/gt-tech/followers","following_url":"https://api.github.com/users/gt-tech/following{/other_user}","gists_url":"https://api.github.com/users/gt-tech/gists{/gist_id}","starred_url":"https://api.github.com/users/gt-tech/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gt-tech/subscriptions","organizations_url":"https://api.github.com/users/gt-tech/orgs","repos_url":"https://api.github.com/users/gt-tech/repos","events_url":"https://api.github.com/users/gt-tech/events{/privacy}","received_events_url":"https://api.github.com/users/gt-tech/received_events","type":"User","site_admin":false},"created_at":"2016-05-16T02:47:24Z","updated_at":"2016-05-16T02:47:24Z","body":"turned out to be an iptables problem, after updating firewall rules in iptables issue was resolved!"}}