From 75a8a17da4fc95c086dfb447d29c02e7dbd05561 Mon Sep 17 00:00:00 2001 From: Miek Gieben Date: Sat, 6 Jan 2018 15:56:54 +0000 Subject: plugin/kubernetes: fix pod insecure mode (#1354) Fixes #1331 --- plugin/kubernetes/kubernetes.go | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'plugin/kubernetes/kubernetes.go') diff --git a/plugin/kubernetes/kubernetes.go b/plugin/kubernetes/kubernetes.go index 4e79738e7..785a16ae3 100644 --- a/plugin/kubernetes/kubernetes.go +++ b/plugin/kubernetes/kubernetes.go @@ -321,6 +321,12 @@ func (k *Kubernetes) findPods(r recordRequest, zone string) (pods []msg.Service, if !wildcard(namespace) && !k.namespace(namespace) { // no wildcard, but namespace does not exist return nil, errNoItems } + + // If ip does not parse as an IP address, we return an error, otherwise we assume a CNAME and will try to resolve it in backend_lookup.go + if net.ParseIP(ip) == nil { + return nil, errNoItems + } + return []msg.Service{{Key: strings.Join([]string{zonePath, Pod, namespace, podname}, "/"), Host: ip, TTL: k.ttl}}, err } -- cgit v1.2.3