ISO: Add 50-dnssec.conf to fix DNSSEC issue

[spowelljr]

Fixes #18705

Implements #18705 (comment)

Some machines configurations no longer have DNSSEC=no set as the system default after the Buildroot update.

This results in errors when trying to pull imagse from insecure locations.

Adding 50-dnssec.conf that has DNSSEC=no to override system default.

[spowelljr]

ok-to-build-iso

[nirs]

Looks good, but there is no info on why this configuration is there, and the commit message is has no info. One can go and find the PR and then find the issue, but it will much easier if the actual file had a link the the issue, or at least the commit message was linked to the issue.

[nirs]

Another issue - this setting is good for local user modifications - using 99-.conf so other configuration will not accidentally override this config. But changes delivered by minikube should use a lower number (e.g. 50-.conf) so someone can override the minikube setting locally (e.g using ~/.minikube/files/).

[minikube-bot]

Hi @spowelljr, we have updated your PR with the reference to newly built ISO. Pull the changes locally if you want to test with them or update your PR further.

[nirs]

ISO for testing:
https://storage.googleapis.com/minikube-builds/iso/18830/minikube-v1.33.0-1715106791-18830-amd64.iso

[nirs]

Tested staring new cluster with the iso:

$ minikube start --driver kvm2 --iso-url https://storage.googleapis.com/minikube-builds/iso/18830/minikube-v1.33.0-1715106791-18830-amd64.iso
😄  minikube v1.33.0 on Fedora 39
    ▪ MINIKUBE_HOME=/data/tmp
✨  Using the kvm2 driver based on user configuration
💿  Downloading VM boot image ...
    > minikube-v1.33.0-1715106791...:  314.17 MiB / 314.17 MiB  100.00% 19.39 M
👍  Starting "minikube" primary control-plane node in "minikube" cluster
🔥  Creating kvm2 VM (CPUs=2, Memory=6000MB, Disk=20000MB) ...
🐳  Preparing Kubernetes v1.30.0 on Docker 26.0.2 ...
    ▪ Generating certificates and keys ...
    ▪ Booting up control plane ...
    ▪ Configuring RBAC rules ...
🔗  Configuring bridge CNI (Container Networking Interface) ...
🔎  Verifying Kubernetes components...
    ▪ Using image gcr.io/k8s-minikube/storage-provisioner:v5
🌟  Enabled addons: default-storageclass, storage-provisioner
🏄  Done! kubectl is now configured to use "minikube" cluster and "default" namespace by default

$ minikube ssh 'cat /etc/systemd/resolved.conf.d/99-dnssec.conf'
[Resolve]
DNSSEC=no

[llegolas]

can confirm. This fixes #18705

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: medyagh, spowelljr

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [medyagh,spowelljr]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment