https://ashish1099.me/tags/bare-metal/ Recent content in Bare-Metal on Ashish Jaiswal Hugo -- 0.147.0 en-us Thu, 19 Mar 2026 00:00:00 +0000 https://ashish1099.me/posts/cilium-bare-metal-ufw-coredns-kube-apiserver/ Thu, 19 Mar 2026 00:00:00 +0000 https://ashish1099.me/posts/cilium-bare-metal-ufw-coredns-kube-apiserver/ <h2 id="the-symptom">The Symptom</h2> <p>After standing up a Kubernetes cluster on a bare-metal node with Cilium as the CNI, CoreDNS pods were running but completely unable to reach the kube-apiserver service IP (<code>10.96.0.1</code>). DNS resolution inside the cluster was broken, and any pod trying to talk to the API server via the service IP timed out.</p> <p>The apiserver itself was healthy — direct connections to the node&rsquo;s IP worked fine. The problem was specifically with the virtual service IP routed through Cilium&rsquo;s BPF dataplane.</p>