homelab-k3s/apps/pihole
jasonwitty fe72f1e85a
Some checks failed
Validate and Deploy to K3s / validate (push) Failing after 1m41s
Validate and Deploy to K3s / deploy (push) Has been skipped
Fix pihole for v6: pin digest, listeningMode=ALL, v6 password env, readiness probe
A fresh node pull of pihole:latest silently upgraded v5->v6 (Core v6.2.2).
v6's default listeningMode=LOCAL drops DNS from non-attached subnets, which
killed all cross-node svclb DNS the moment the pod rescheduled off its old
node. v6 also ignores the WEBPASSWORD env.

- image pinned by digest (Core v6.2.2)
- FTLCONF_dns_listeningMode=ALL
- admin password via FTLCONF_webserver_api_password <- pihole-admin secret
- tcpSocket:53 readiness probe so rollout status waits for FTL

Applied to the cluster via kubectl replace; DNS verified answering on all
four node IPs, admin API auth verified.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-26 02:56:50 -07:00
..
deployment-pihole.yaml Fix pihole for v6: pin digest, listeningMode=ALL, v6 password env, readiness probe 2026-07-26 02:56:50 -07:00
deployment-unbound.yaml Import manifests reverse-engineered from live cluster 2026-07-26 02:13:56 -07:00
kustomization.yaml Import manifests reverse-engineered from live cluster 2026-07-26 02:13:56 -07:00
namespace.yaml Import manifests reverse-engineered from live cluster 2026-07-26 02:13:56 -07:00
secret.example.yaml Import manifests reverse-engineered from live cluster 2026-07-26 02:13:56 -07:00
service.yaml Import manifests reverse-engineered from live cluster 2026-07-26 02:13:56 -07:00
storage.yaml Import manifests reverse-engineered from live cluster 2026-07-26 02:13:56 -07:00