Skip to content

Commit 3c551e0

Browse files
committed
Adding ability to set the dns policy and config for the runner pod
1 parent b147fb8 commit 3c551e0

2 files changed

Lines changed: 24 additions & 0 deletions

File tree

helm/robusta/templates/runner.yaml

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,23 @@ spec:
4242
securityContext:
4343
{{- toYaml . | nindent 8 }}
4444
{{- end }}
45+
{{- if .Values.runner.dnsConfig.enabled }}
46+
dnsPolicy: {{ .Values.runner.dnsConfig.policy | quote }}
47+
{{- with .Values.runner.dnsConfig.nameservers }}
48+
nameservers:
49+
{{- toYaml . | nindent 10 }}
50+
{{- end }}
51+
{{- with .Values.runner.dnsConfig.searches }}
52+
searches:
53+
{{- toYaml . | nindent 10 }}
54+
{{- end }}
55+
{{- with .Values.runner.dnsConfig.options }}
56+
options:
57+
{{- toYaml . | nindent 10 }}
58+
{{- end }}
59+
{{ else }}
60+
dnsPolicy: ClusterFirst
61+
{{- end }}
4562
{{- if .Values.runner.hardenedFs }}
4663
initContainers:
4764
- name: setup-venv

helm/robusta/values.yaml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -756,6 +756,13 @@ runner:
756756
# Enable hardened filesystem security (read-only root filesystem with writable volume mounts)
757757
hardenedFs: false
758758
setKRRSecurityContext: false
759+
#Enabled custom DNS configuration for runner
760+
dnsConfig:
761+
enabled: false
762+
policy: None
763+
nameservers: []
764+
searches: []
765+
options: []
759766
# CRD permissions for common Kubernetes operators and tools
760767
crdPermissions:
761768
argo: true

0 commit comments

Comments
 (0)