{"action":"closed","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/13869","repository_url":"https://api.github.com/repos/rancher/rancher","labels_url":"https://api.github.com/repos/rancher/rancher/issues/13869/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/13869/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/13869/events","html_url":"https://github.com/rancher/rancher/issues/13869","id":329753159,"node_id":"MDU6SXNzdWUzMjk3NTMxNTk=","number":13869,"title":"[rancher-dns] dns server & dns update stack create wrong entries ( all updates get dns server IP instead of container IP )","user":{"login":"twobombs","id":12692227,"node_id":"MDQ6VXNlcjEyNjkyMjI3","avatar_url":"https://avatars1.githubusercontent.com/u/12692227?v=4","gravatar_id":"","url":"https://api.github.com/users/twobombs","html_url":"https://github.com/twobombs","followers_url":"https://api.github.com/users/twobombs/followers","following_url":"https://api.github.com/users/twobombs/following{/other_user}","gists_url":"https://api.github.com/users/twobombs/gists{/gist_id}","starred_url":"https://api.github.com/users/twobombs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/twobombs/subscriptions","organizations_url":"https://api.github.com/users/twobombs/orgs","repos_url":"https://api.github.com/users/twobombs/repos","events_url":"https://api.github.com/users/twobombs/events{/privacy}","received_events_url":"https://api.github.com/users/twobombs/received_events","type":"User","site_admin":false},"labels":[{"id":601597122,"node_id":"MDU6TGFiZWw2MDE1OTcxMjI=","url":"https://api.github.com/repos/rancher/rancher/labels/status/more-info","name":"status/more-info","color":"bfdadc","default":false},{"id":618069126,"node_id":"MDU6TGFiZWw2MTgwNjkxMjY=","url":"https://api.github.com/repos/rancher/rancher/labels/version/1.6","name":"version/1.6","color":"e99695","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-06-06T07:55:44Z","updated_at":"2018-10-12T06:07:44Z","closed_at":"2018-10-12T06:07:43Z","author_association":"NONE","body":"To create a good upgrade path to Rancher 2.1 we decided to upgrade to Rancher 1.6.17, previously we plugged into the Rancher network agent for DNS discovery directly, but because the new stack has that agent buried in the Docker network this is no longer feasible. Therefore we thought it would be good to deploy the DNS Server & DNS update combo to expose the DNS service to the internal network.\r\n\r\nWe hit a snag: the dns update stack create wrong entries ( all updates get dns server IP instead of container IP )\r\n\r\nHere is the info on the stack:\r\n\r\n**Rancher versions:**\r\nrancher/server or rancher/rancher: 1.6.17\r\nrancher/agent or rancher/rancher-agent: v1.2.10\r\n\r\n**Infrastructure Stack versions:**\r\nhealthcheck: v0.3.6\r\nipsec: : v0.13.11\r\nnetwork-services: metadata:v0.10.2 \r\nscheduler: v0.8.3\r\n\r\n**Docker version: (`docker version`,`docker info` preferred)**   -   17.12.1-ce\r\n\r\n**Operating system and kernel: (`cat /etc/os-release`, `uname -r` preferred)**\r\nVERSION=\"18.04 LTS (Bionic Beaver)\"   - 4.15.0-22-generic\r\n\r\n**Type/provider of hosts: (VirtualBox/Bare-metal/AWS/GCE/DO)**\r\nQEMU 2.5.0+dfsg-5ubuntu10.26\r\n\r\n**Setup details: (single node rancher vs. HA rancher, internal DB vs. external DB)**\r\nSingle Node internal DB\r\n\r\n**Environment Template: (Cattle/Kubernetes/Swarm/Mesos)**\r\nCattle\r\n\r\n**Steps to Reproduce:**\r\nSelect Bind9 DNS server, compatible with the \"DNS Update (RFC2136)\" in catalog, v 1.0.0-rancher1\r\nRoot domain: rancher.internal\r\nBind9 TSIG keyname: rancher.internal\r\nBind9 TSIG Key (base64): cmFuY2hlci5pbnRlcm5hbA==\r\nBin9pros & bind9 forwarders stay on default ( 53 & 8.8.8.8;8.8.4.4 )\r\n\r\nSelect Rancher External DNS service powered by any RFC2136 compatible DNS server in catalog - v0.7.2 & v0.6.2\r\nDNS server IP: external IP of host where DNS server is deployed or container IP \r\nTSIG Key Name and TSIG key same as on the DNS server\r\nZone name: rancher.internal\r\nTTL & DNS Name template entries kept at default\r\n\r\n**Results:**\r\n\r\nDNS updates that are pushed from the DNS update component to the DNS server container are false, records are seen and updated, yet contain the IP of the DNS server entered in the field of the DNS Server in the DNS Update component.\r\n\r\nLogs: dnsupdate-rfc2136-rfc2136dns-1:\r\n\r\n06/06/2018 09:44:12time=\"2018-06-06T07:44:12Z\" level=info msg=\"Starting Rancher External DNS service v0.7.2\"\r\n06/06/2018 09:44:12time=\"2018-06-06T07:44:12Z\" level=info msg=\"Configured RFC2136 with zone 'rancher.internal.' and nameserver '192.168.1.102:53'\"\r\n06/06/2018 09:44:12time=\"2018-06-06T07:44:12Z\" level=info msg=\"Healthcheck handler is listening on :1000\"\r\n06/06/2018 09:44:12time=\"2018-06-06T07:44:12Z\" level=info msg=\"Adding dns record: {ipsec ipsec {ipsec.ipsec.development.rancher.internal. [192.168.1.102] A 60}}\"\r\n06/06/2018 09:44:12time=\"2018-06-06T07:44:12Z\" level=info msg=\"Adding dns record: {sugarcrm deploy-nvidia-docker-dev {sugarcrm.deploy-nvidia-docker-dev.development.rancher.internal. [192.168.1.102] A 60}}\"\r\n06/06/2018 09:44:12time=\"2018-06-06T07:44:12Z\" level=info msg=\"Adding dns record: {bind9 bind9 {bind9.bind9.development.rancher.internal. [192.168.1.102] A 60}}\"\r\n06/06/2018 09:44:12time=\"2018-06-06T07:44:12Z\" level=info msg=\"Adding dns record: {  {external-dns-17379725-7297-4a45-8e91-ba0f5d838b3c.rancher.internal. [bind9.bind9.development.rancher.internal. ipsec.ipsec.development.rancher.internal. sugarcrm.deploy-nvidia-docker-dev.development.rancher.internal.] TXT 60}}\"\r\n\r\n\r\nLogs: bind9-bind9-1\r\n06/06/2018 09:43:0906-Jun-2018 07:43:09.174 managed-keys-zone: loaded serial 0\r\n06/06/2018 09:43:0906-Jun-2018 07:43:09.174 zone 0.in-addr.arpa/IN: loaded serial 1\r\n06/06/2018 09:43:0906-Jun-2018 07:43:09.176 zone 127.in-addr.arpa/IN: loaded serial 1\r\n06/06/2018 09:43:0906-Jun-2018 07:43:09.177 zone 255.in-addr.arpa/IN: loaded serial 1\r\n06/06/2018 09:43:0906-Jun-2018 07:43:09.179 zone localhost/IN: loaded serial 2\r\n06/06/2018 09:43:0906-Jun-2018 07:43:09.180 /etc/bind/zones/db.rancher.internal:1: no TTL specified; using SOA MINTTL instead\r\n06/06/2018 09:43:0906-Jun-2018 07:43:09.180 zone rancher.internal/IN: loaded serial 20041125\r\n06/06/2018 09:43:0906-Jun-2018 07:43:09.180 all zones loaded\r\n06/06/2018 09:43:0906-Jun-2018 07:43:09.181 running\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.431 client 10.50.72.208#40912/key rancher.internal (rancher.internal): transfer of 'rancher.internal/IN': AXFR started: TSIG rancher.internal\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.432 client 10.50.72.208#40912/key rancher.internal (rancher.internal): transfer of 'rancher.internal/IN': AXFR ended\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.436 client 10.50.72.208#40914/key rancher.internal (rancher.internal): transfer of 'rancher.internal/IN': AXFR started: TSIG rancher.internal\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.436 client 10.50.72.208#40914/key rancher.internal (rancher.internal): transfer of 'rancher.internal/IN': AXFR ended\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.437 client 10.50.72.208#35060/key rancher.internal: signer \"rancher.internal\" approved\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.437 client 10.50.72.208#35060/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'ipsec.ipsec.development.rancher.internal' A\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.439 client 10.50.72.208#35060/key rancher.internal: signer \"rancher.internal\" approved\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.439 client 10.50.72.208#35060/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'ipsec.ipsec.development.rancher.internal' A\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.440 client 10.50.72.208#48454/key rancher.internal: signer \"rancher.internal\" approved\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.440 client 10.50.72.208#48454/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'sugarcrm.deploy-nvidia-docker-dev.development.rancher.internal' A\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.441 client 10.50.72.208#48454/key rancher.internal: signer \"rancher.internal\" approved\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.441 client 10.50.72.208#48454/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'sugarcrm.deploy-nvidia-docker-dev.development.rancher.internal' A\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.441 client 10.50.72.208#49481/key rancher.internal: signer \"rancher.internal\" approved\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.441 client 10.50.72.208#49481/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'bind9.bind9.development.rancher.internal' A\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.442 client 10.50.72.208#49481/key rancher.internal: signer \"rancher.internal\" approved\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.442 client 10.50.72.208#49481/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'bind9.bind9.development.rancher.internal' A\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.443 client 10.50.72.208#49751/key rancher.internal: signer \"rancher.internal\" approved\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.443 client 10.50.72.208#49751/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'external-dns-17379725-7297-4a45-8e91-ba0f5d838b3c.rancher.internal' TXT\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.443 client 10.50.72.208#49751/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'external-dns-17379725-7297-4a45-8e91-ba0f5d838b3c.rancher.internal' TXT\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.443 client 10.50.72.208#49751/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'external-dns-17379725-7297-4a45-8e91-ba0f5d838b3c.rancher.internal' TXT\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.444 client 10.50.72.208#49751/key rancher.internal: signer \"rancher.internal\" approved\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.444 client 10.50.72.208#49751/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'external-dns-17379725-7297-4a45-8e91-ba0f5d838b3c.rancher.internal' TXT\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.444 client 10.50.72.208#49751/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'external-dns-17379725-7297-4a45-8e91-ba0f5d838b3c.rancher.internal' TXT\r\n06/06/2018 09:44:1206-Jun-2018 07:44:12.444 client 10.50.72.208#49751/key rancher.internal: updating zone 'rancher.internal/IN': adding an RR at 'external-dns-17379725-7297-4a45-8e91-ba0f5d838b3c.rancher.internal' TXT\r\n06/06/2018 09:45:1206-Jun-2018 07:45:12.891 client 10.50.72.208#41254/key rancher.internal (rancher.internal): transfer of 'rancher.internal/IN': AXFR started: TSIG rancher.internal\r\n06/06/2018 09:45:1206-Jun-2018 07:45:12.891 client 10.50.72.208#41254/key rancher.internal (rancher.internal): transfer of 'rancher.internal/IN': AXFR ended\r\n\r\n<img width=\"1403\" alt=\"screen shot 2018-06-06 at 09 42 58\" src=\"https://user-images.githubusercontent.com/12692227/41024129-aad122a4-696e-11e8-9a1f-b66026ecd142.png\">\r\n<img width=\"1050\" alt=\"screen shot 2018-06-06 at 09 48 57\" src=\"https://user-images.githubusercontent.com/12692227/41024199-dce76230-696e-11e8-9b6a-85627ffc53e2.png\">\r\n"}}
{"actor":{"display_login":"loganhz"}}