Support different service and container ports #175
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Why is this pull request needed and what does it do?
This PR allows exposing coreDNS on a service port different from the ports exposed by the container.
We want to expose coreDNS publicly. To increase security we would like to open a container port above 1024 to not add the
NET_BIND_SERVICE
capability, while still exposing the service on port 53.The change adds an optional
servers.servicePort
key that can be used to set a service port. If this value is not set, the value of theservers.port
is used both as service and container port (old behavior). Thus, the change is fully backwards compatible.Checklist:
Changes are automatically published when merged to
main
. They are not published on branches.Note on DCO
If the DCO action in the integration test fails, one or more of your commits are not signed off. Please click on the Details link next to the DCO action for instructions on how to resolve this.