# Builds fail to resolve bitbucket.org during git clone while running on kops Kubernetes **URL:** \ **Category:** Drone Support\ **Created:** [September 8, 2017, 9:43am UTC](https://drone.discourse.group/t/builds-fail-to-resolve-bitbucket-org-during-git-clone-while-running-on-kops-kubernetes/10527 "2017-09-08T09:43:56Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![pwillie](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/pwillie/32/4025_2.png) [@pwillie](https://drone.discourse.group/u/pwillie)\ **Post date:** [September 8, 2017, 9:43am UTC](https://drone.discourse.group/t/builds-fail-to-resolve-bitbucket-org-during-git-clone-while-running-on-kops-kubernetes/10527/1 "2017-09-08T09:43:56Z")
Am running [drone.io](http://drone.io) on a kops configured kubernetes cluster. Any build steps that require network access (including the initial git clone) fail to resolve dns names. Environment: - kubernetes cluster running v1.7.2 provisioned using kops - tried various networking options [flannel, canal…] - tried drone v6, v7 and latest v8rc with same results From build container: > cat /etc/resolv.conf > search home.lan > nameserver 127.0.0.11 > options ndots:100 Have found [http://discuss.harness.io/t/couldnt-resolve-host-on-clone/281](http://discuss.harness.io/t/couldnt-resolve-host-on-clone/281) which appears to be the same problem however I haven’t been able to find a solution. Has anyone successfully run a recent version of drone on kubernetes? How do I configure the build agent such that it can access network resources? Happy to provide any further information as required. ---
**Author:** ![zaa](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/zaa/32/4259_2.png) [@zaa](https://drone.discourse.group/u/zaa)\ **Post date:** [September 8, 2017, 12:08pm UTC](https://drone.discourse.group/t/builds-fail-to-resolve-bitbucket-org-during-git-clone-while-running-on-kops-kubernetes/10527/2 "2017-09-08T12:08:40Z")
See [Couldn’t resolve host on clone](http://discuss.harness.io/t/couldnt-resolve-host-on-clone/281/18?u=zaa) on how we resolved the issue when drone-agent was using host’s docker for builds. However, in the end, we settled on starting drone-agent and docker-in-docker containers within the same pod. The agent was configured to talk to the docker daemon via tcp transport (tcp://127.0.0.1:2375). ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [September 8, 2017, 4:32pm UTC](https://drone.discourse.group/t/builds-fail-to-resolve-bitbucket-org-during-git-clone-while-running-on-kops-kubernetes/10527/3 "2017-09-08T16:32:37Z")
I recommend that you verify your host machine can properly configure DNS for user-defined networks. You should be able to test this with the below command. You can substitute [github.com](http://github.com) with the hostname of your version control system. ```plaintext docker network create foo docker run --network=foo -t -i alpine ping -c 1 github.com ``` I am told that most people have resolved this with iptables rules. If you following the link in zaa’s previous command you will see he modified his iptables configuration to resolve. > [@On another topic](https://drone.discourse.group/t/281/18): > > We experienced the issue too while running drone in kubernetes cluster created with help of “kops” tool. The cluster was using “calico” for networking. It turned out that in such configuration docker is running with --iptables=false --ip-masq=false flags. In such mode docker can’t add masquerading rule for the user defined network into iptables, so packets from the networks are not NAT’ed. I’ve added the masquerading iptables rule manually and this resolved the issue. I also agree with @zaa that a better approach would be to run a drone agent and docker:dind container in the same pod, instead of connecting drone with the docker daemon on your host machine. This is also the approach they are taking with the drone helm chart [introduce incubator/drone by bacongobbler · Pull Request #821 · helm/charts · GitHub](https://github.com/kubernetes/charts/pull/821) ---
**Author:** ![pwillie](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/pwillie/32/4025_2.png) [@pwillie](https://drone.discourse.group/u/pwillie)\ **Post date:** [September 9, 2017, 4:15am UTC](https://drone.discourse.group/t/builds-fail-to-resolve-bitbucket-org-during-git-clone-while-running-on-kops-kubernetes/10527/4 "2017-09-09T04:15:17Z")
Thanks for the prompt replies. It definitely pointed me in the right direction. Adding a dind container to my to my helm chart for agent deployment made all the difference. Thanks again.