I'm having a problem getting FQDNs working, and I figured I'd post here to see if anyone could help.
The logs I'm seeing from hubble observe
seem to fly directly in the face of the policy that's written.
The Kubernetes manifest is attached as dns-return-test.yml. The cluster is K3s (latest) running fairly stock. See below for details.
Things that seemed odd to me:
- I had to explicitly allow return traffic from kube-dns to my pods, if that was not in the manifest, DNS would not work and
hubble observe
would show a weird ERROR. The specific area of the manifest is noted. - Disabling DNS inspection (noted in manifest) would cause DNS to work fine without the aforementioned rule. FQDNs wouldn't work, but DNS would.