Feature : Support Nomad Task API

[henrikjohansen]

Nomad's Task API provides every task managed by Nomad with a Unix Domain Socket (UDS) to access the local agent's HTTP API. Regardless of agent configuration the Task API does not require mTLS, but always requires authentication.

This would make it much easier when working with an mTLS enabled cluster 😇 and IIRC only requires a newer version of the Nomad API client.

https://developer.hashicorp.com/nomad/api-docs/task-api
hashicorp/nomad#16872

[apollo13]

@henrikjohansen My PR #4 should provide support for what you requested. I haven't tested it on a cluster yet, but maybe you can build the docker file and test it?

[blinkinglight]

you could try this build from main branch ghcr.io/ituoga/coredns-nomad:main

[henrikjohansen]

@blinkinglight Something seems off, running the above image I get unsupported protocol scheme "unix" ...

service.nomad.:1053
CoreDNS-1.11.3
linux/amd64, go1.21.13, c742ec03f-dirty
[DEBUG] plugin/nomad: Looking up record for svc: dns namespace: default
[ERROR] plugin/nomad: getClientfailed querying self endpoint: Get "unix:///v1/agent/self?namespace=platform®ion=global": unsupported protocol scheme "unix"
[INFO] 172.19.92.116:64739 - 57057 "A IN dns.default.service.nomad. udp 54 false 4096" NOERROR qr,aa,rd 43 0.00034716s

The corresponding Corefile is :

service.nomad.:1053 {
    errors
    debug
    health
    log
    nomad {
      zone service.nomad
      address unix:///secrets/api.sock
      ttl 10
    }
}