dnsmasq listens on localhost

roles/dnsmasq/tasks/main.yml

@@ -63,22 +63,21 @@
 
 - name: Add search resolv.conf
   lineinfile:
-    line: search {{ [ 'default.svc.' + dns_domain, 'svc.' + dns_domain, dns_domain ] | join(' ') }}
+    line: "search {{ [ 'default.svc.' + dns_domain, 'svc.' + dns_domain, dns_domain ] | join(' ') }}"
     dest: "{{resolvconffile}}"
     state: present
     insertbefore: BOF
     backup: yes
     follow: yes
 
-- name: Add all masters as nameserver
+- name: Add local dnsmasq to resolv.conf
   lineinfile:
-    line: nameserver {{ hostvars[item]['ansible_default_ipv4']['address'] }}
+    line: "nameserver 127.0.0.1"
     dest: "{{resolvconffile}}"
     state: present
     insertafter: "^search.*$"
     backup: yes
     follow: yes
-  with_items: groups['kube-master']
 
 - name: Add options to resolv.conf
   lineinfile:

roles/dnsmasq/templates/dnsmasq-pod.yml

@@ -29,9 +29,11 @@ spec:
         - name: dns
           containerPort: 53
           hostPort: 53
+          hostIP: 127.0.0.1
           protocol: UDP
         - name: dns-tcp
           containerPort: 53
+          hostIP: 127.0.0.1
           hostPort: 53
           protocol: TCP
       volumeMounts: