Dns

Getting Let's Encrypt DNS-01 working when the authoritative internal view is different from the public view, without pulling my hair out

CoreDNS inside a kind cluster could resolve cluster names but not external ones, and the problem was in the host's resolver, not k8s

Every non-cluster DNS lookup in our pods was paying for five failed attempts first, and lowering ndots cut tail latency significantly

A local DNS override on my Pi-hole would come back for a day and then mysteriously vanish, and the culprit was a docker-compose restart policy