From e727bd52f1962556fe40ba673abebef312e0e2f3 Mon Sep 17 00:00:00 2001 From: Matthew Mosesohn Date: Mon, 8 Aug 2016 13:59:20 +0300 Subject: [PATCH] Add option to disable ipv6 dns lookup New variable disable_ipv6_dns in kubernetes/preinstall. --- roles/kubernetes/preinstall/defaults/main.yml | 4 ++++ roles/kubernetes/preinstall/tasks/main.yml | 8 ++++++++ 2 files changed, 12 insertions(+) diff --git a/roles/kubernetes/preinstall/defaults/main.yml b/roles/kubernetes/preinstall/defaults/main.yml index 1fb537b89..f419a091c 100644 --- a/roles/kubernetes/preinstall/defaults/main.yml +++ b/roles/kubernetes/preinstall/defaults/main.yml @@ -29,6 +29,10 @@ common_required_pkgs: - rsync - bash-completion +# Set to true if your network does not support IPv6 +# This maybe necessary for pulling Docker images from +# GCE docker repository +disable_ipv6_dns: false # For the openstack integration kubelet will need credentials to access diff --git a/roles/kubernetes/preinstall/tasks/main.yml b/roles/kubernetes/preinstall/tasks/main.yml index 442fadfd7..dcc925627 100644 --- a/roles/kubernetes/preinstall/tasks/main.yml +++ b/roles/kubernetes/preinstall/tasks/main.yml @@ -97,6 +97,14 @@ with_items: "{{required_pkgs | default([]) | union(common_required_pkgs|default([]))}}" when: ansible_os_family != "CoreOS" +- name: Disable IPv6 DNS lookup + lineinfile: + dest: /etc/gai.conf + line: "precedence ::ffff:0:0/96 100" + state: present + backup: yes + when: disable_ipv6_dns and ansible_os_family != "CoreOS" + # Todo : selinux configuration - name: Set selinux policy to permissive selinux: policy=targeted state=permissive