Atlas-12675: Replacing google dns with internal csp

charts/dapr/charts/dapr_sidecar_injector/templates/dapr_sidecar_injector_deployment.yaml

@@ -77,6 +77,8 @@ spec:
 {{- end }}
         - "--metrics-port"
         - "{{ .Values.global.prometheus.port }}"
+        - "--public-server"
+        - "{{ .Values.host.cpNoa.domain | required "set host.cpNoa.domain" | quote }}"
         env:
         - name: TLS_CERT_FILE
           value: /dapr/cert/tls.crt

charts/dapr/charts/dapr_sidecar_injector/values.yaml

@@ -12,3 +12,6 @@ webhookFailurePolicy: Ignore
 sidecarImagePullPolicy: Always
 runAsNonRoot: true
 resources: {}
+host:
+  cpNoa:
+    domain: ""

utils/host.go

@@ -1,6 +1,7 @@
 package utils
 
 import (
+	"fmt"
 	"net"
 	"os"
 
@@ -18,9 +19,14 @@ func GetHostAddress() (string, error) {
 		return val, nil
 	}
 
+	publicLookupAddr, ok := os.LookupEnv("public-server")
+	if !ok {
+		publicLookupAddr = "cp.noa.infoblox.com"
+	}
+
 	// Use udp so no handshake is made.
 	// Any IP can be used, since connection is not established, but we used a known DNS IP.
-	conn, err := net.Dial("udp", "8.8.8.8:80")
+	conn, err := net.Dial("udp", fmt.Sprintf("%s:80", publicLookupAddr))
 	if err != nil {
 		// Could not find one via a  UDP connection, so we fallback to the "old" way: try first non-loopback IPv4:
 		addrs, err := net.InterfaceAddrs()

utils/host_test.go

@@ -23,4 +23,12 @@ func TestGetHostAdress(t *testing.T) {
 		assert.Nil(t, err)
 		assert.NotEmpty(t, address)
 	})
+
+	t.Run("public-server present,", func(t *testing.T) {
+		os.Setenv("public-server", "cp.noa.infoblox.com")
+		defer os.Clearenv()
+		address, err := GetHostAddress()
+		assert.Nil(t, err)
+		assert.Equal(t, hostIP, address)
+	})
 }