A fresh node pull of pihole:latest silently upgraded v5->v6 (Core v6.2.2). v6's default listeningMode=LOCAL drops DNS from non-attached subnets, which killed all cross-node svclb DNS the moment the pod rescheduled off its old node. v6 also ignores the WEBPASSWORD env. - image pinned by digest (Core v6.2.2) - FTLCONF_dns_listeningMode=ALL - admin password via FTLCONF_webserver_api_password <- pihole-admin secret - tcpSocket:53 readiness probe so rollout status waits for FTL Applied to the cluster via kubectl replace; DNS verified answering on all four node IPs, admin API auth verified. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| deployment-pihole.yaml | ||
| deployment-unbound.yaml | ||
| kustomization.yaml | ||
| namespace.yaml | ||
| secret.example.yaml | ||
| service.yaml | ||
| storage.yaml | ||