From ce30776eebbd270588ec7059e13625a48186ee46 Mon Sep 17 00:00:00 2001
From: Valentin Haudiquet <valentin.haudiquet@canonical.com>
Date: Sat, 2 May 2026 17:28:07 +0200
Subject: [PATCH] coredns: add kubernetes plugin

---
 kubernetes/system/coredns/values.yaml | 44 +++++++++++++++------------
 1 file changed, 24 insertions(+), 20 deletions(-)

diff --git a/kubernetes/system/coredns/values.yaml b/kubernetes/system/coredns/values.yaml
index c612253..6fe364a 100644
--- a/kubernetes/system/coredns/values.yaml
+++ b/kubernetes/system/coredns/values.yaml
@@ -24,6 +24,12 @@ servers:
           configBlock: lameduck 5s
         - name: ready
         - name: debug
+        - name: kubernetes
+          parameters: cluster.local in-addr.arpa ip6.arpa
+          configBlock: |-
+            pods insecure
+            fallthrough in-addr.arpa ip6.arpa
+            ttl 30
         - name: etcd
           parameters: lan
           configBlock: |-
@@ -32,9 +38,7 @@ servers:
             fallthrough
         - name: file
           parameters: /etc/coredns/zones/lan.zone lan
-          configBlock: |-
-            reload 10s
-            fallthrough
+          configBlock: reload 10s
         - name: cache
           parameters: 30
         - name: loadbalance
@@ -48,27 +52,27 @@ extraVolumes:
       configMap:
         name: coredns-lan-zone
 sops:
-    lastmodified: "2026-05-02T15:23:06Z"
-    mac: ENC[AES256_GCM,data:Z9RW7y8WSSTZSNKHWxzh9UEr+Q2f5ju1xmwRklTtZq8ISlDubZ+/aTv14tiKrOciqxjC+oNIuAYtAi1nlIAW3k7qbyTBwEMKMoKtKHeOFRhCuLLe4GPDbzBcmyNbXYeRIX2sIGgm9kkRBZvFlb4E9eAUIRaVV1UgXsyBRvDepME=,iv:/nTs0t1CWceJHnhNXtloa2TyNi6yI6kAvjcWM371rac=,tag:yLOQiG9K58f9O5ktNwIwyQ==,type:str]
+    lastmodified: "2026-05-02T15:28:02Z"
+    mac: ENC[AES256_GCM,data:7cO7Xa0ZdWrXpvPcgb0JUD3FF0hGLkkiIzaQH/IpYEf8Hj3H6wG6vpE+Qk9g7VLz9x2YZ8O9JSqemM+mz+KaPL1MMnNpahuwHhlB+1CWh8sT7MB2eQzV3743iTbXk4ye47qdYTtQyMtud08CAUcmSF7fZBymc/cisWmnxBQah20=,iv:SPeD3z1CcgXbrDaEhdd+q0SL2acH38j+aHA7Lrw+kl4=,tag:ie8ZoPdW1d1aSSEFjJAqwQ==,type:str]
     pgp:
-        - created_at: "2026-05-02T15:23:05Z"
+        - created_at: "2026-05-02T15:28:01Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ//ZKiDOmXL2Gs4rx/r41KTzxudbSAGOrHroluRWDhhTlQ6
-            +w2N8zJkUqNuhiz4Gx4KufFe6kOAElV5q2g8QDg+B/N//1EVb/XGRN/Msrsh+nBR
-            IFXM9wTAIX/bQ7/VUdqyotkj3IY3siqwlPUPfq5et9LbMtHByIqarExFR1386XX9
-            dAWmfR2R1f0ZxMmW7N+59b3J9PR8YnslsUFjtS7C/g5bpuAIpQYWshRBE5i6o0qT
-            5/MEHGrf3idSWFw+Q/7Ai6A11lhSvVASwSmQNq9N1p8DQaGuzOnUjn/n5T5oQVwa
-            koUU83JZgUHWdIHq6gYbqyTdMId0i5E44xqr7fFAJcP79F5rK5JYGrrySBl5UI0V
-            8tDkgWXLaR/Vq0fyjFUwW8yXZOaPMdUAYnYhLHDsEa+5Fq1cVVKlFhPVg3FT/SQR
-            kEIRtfxcGrXj8S+a+sKVC3B2dG+G+QaZOxXd9Rb3vD6ZwkHyrfNmw3FxRrCRzsiQ
-            fYE3Q8v38cbhwnmVF8aPc0rNss87b/Vs8dtFGLc4ZE6B+axlCjCCrqL3Plm3fzi8
-            bWJNOSt1+4AwOPv33CDl1wEBz6RLn3E5r4cgvDuWzXGdAoWg4pwj9Nyxs3XtVn1+
-            hXTkkcEU/8MKL+CT8JeuIt8/MDjRxdCSmlRz05660yQVWs6if4CMPbuWFU9ZT/jS
-            XgFSm/kaWTOOrTKTFAisWs/GUZpOyrRuqG6W9M32tyFEpjxXvec+4hehA/lz3ylo
-            UW7z31WZtyPsoI+LXo1rfbH2Xg14GinW2vkgtBHf/E75mpt/4IbCgdfGsky/N74=
-            =0svn
+            hQIMA7uy4qQr71wiAQ/+OoRkl06iy/cQquGC5CWYYWvUR9+mRTXPbOQvApRrySjo
+            ZhmUmGG5j4+sLxkIiJrXtHCMOo8cYKI53ZQTx6ykzqeTBmDJy/tl2lQSe4xtaUXy
+            p/klPRHem0XrhEyhexp+d+qpzCTQhAfsYfTfz5ZX4zlLkW3eNoU3T2yW+N5dwsUz
+            cgBOIIQq4RL61i/z6KK4bg45lmySj4FkkVDYCJz9NoZ2ov4b0654l4gKsxF0JABg
+            eoBLVD+UqfvVS3KC9KNOQ/vXM9MrBPzGBF1Ed21xp0duNbN+N93cU7TvMmrDCA2L
+            ggIc0WJpJTMqsnaCOyM4ZdgFEyfzFTbseeenf1zqR8b4HEWmdcwLzOYdLnL3pRRd
+            G2KH3H3k5CmLKl01QD2u99pdEaCPI1yftDMBO7xrnIkfLl31fBtRZyazxnhkjPfA
+            m15l0Dx29hfpiYSE62CtmPQqKtes2bv8YmNwuCBk3hutvJ8RZe4o1QR4gno7iE3p
+            GdBQ8qUyD8KpDvbYpnf98FYXpRjK7yjFkMoK9as83OW7mWUzeDUpeeEr8sC51Ba1
+            CGCwaX5VKPnXFsLix89oiucb/3TsjM25aZMAgrFpckh4xLMpfTGCN4dX4AtutfA5
+            VyL4p8+Yd7RBqOcTGNF9G8GOsJA4ReVZPyxAJwRdgCUDXVng6/VxB8rzifIqVrnS
+            XAEWiOqs/6P5W3ABViHjauKMhIeIQcdySVgXbCeCBn+CnCOjWnvYt38vyvJG/8Sb
+            5b0k9+4I/JATNvSnrxiNgLVU9Oy9diVNRnPJDCsdCeNwGFr5fKuHiP3CRCEb
+            =74cr
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$