fix pihole liveness probe

2026-06-28 19:08:04 +02:00
parent 22ef2a38b2
commit 9eb8d344fa
2 changed files with 12 additions and 4 deletions
--- a/pihole/unbound/unbound.conf
+++ b/pihole/unbound/unbound.conf
@@ -1,6 +1,10 @@
 server:
-    # Listen only on loopback so only the co-located pihole can query it
-    interface: 127.0.0.1
+    # Listen on all interfaces so the kubelet's liveness/readiness probes
+    # (which connect to the pod IP, not 127.0.0.1) can reach unbound.
+    # No Service exposes port 5335, so it stays cluster-internal; pihole
+    # still forwards to 127.0.0.1#5335 which works because 0.0.0.0 covers
+    # loopback.
+    interface: 0.0.0.0
    port: 5335

    # IPv4 only for simplicity