replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.14.3
    pullPolicy: IfNotPresent
deployment:
    dnsPolicy: ClusterFirst
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: cluster.local
      port: 53
      plugins:
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
    - zones:
        - zone: .
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: file
          parameters: /etc/coredns/zones/lan.zone lan
          configBlock: |-
            reload 10s
            fallthrough
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
            fallthrough
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T16:45:17Z"
    mac: ENC[AES256_GCM,data:u+4i3fNGvHcMAZvFOZdY4ESndt+eRVO0QNvMwHNVCZjLqVkLx4e39OEzRjmok2WNqIyC/56c0LL/Aug7s2Auj0d6V0vBYnwmRPbjxOuwE+oJIQGAN9M8lP2cYK8kwHT5buBWSO8AAauWzjaRgcvpzZhWpAxsCXg32Z3Qyl97oaE=,iv:csbbOXIIWv8XyS93ZUZ/FdOjPuvbn6BLS7lb1M8NSrA=,tag:v2+ToKO2t9tq+6cn4RND9A==,type:str]
    pgp:
        - created_at: "2026-05-02T16:45:15Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ/+LW+h95JiCt4FJAO4o96ZdfxrNUYxN90Mrokh30PzyiPT
            HOtbsoFYp+K5rO/af1G8R00MDzR1WCfuohjWcu/+B3Cs48hZj+bO0jmkCnfR727I
            zCSecYACa+BNFAbkR0qmbUmQgrBuwBCWAquAlNfBLH0rZ4iAp3aGgnIWgWaw68fT
            B9QXkvMazZay9kY9ukwY06Z74IqOQbm6Axf+SWfzmGO5rzzIJt4W0ClG9w+4Ngfa
            NSRw1VFssJoa63wKK+gqMHJyOhyNqfQ8B1u7tkoHZdx85bNkWAD20BavHeRT6MLf
            9hXQyL6bbY8hMKM7nu9IU+R7R2WeSkosEyl3xP6sEME4SKjrzToLrI7X7XwmdL/C
            ngmiZ1mmKXPaakYFCfqcR7CwIlJGG55CP56Zk9UKlU6CjbsfU0klybIwXiy7bpAE
            DUkXKOEO4KD7MQwPFz56TjCHi642cJQ6TLw31WVoU0IZ8MgKv/Wx04jXQzbuVL3R
            ZE0Wp/xpjbO2thPer9mJX84aNEFPqLUEkQ4b0xlD3+T+0Pqz0hwUjbn/D1Psdlrc
            sOzqPsiP7Z/VZE7SXo3nAOfhvHqlN1D5uiLRIuKwjozdjBuPwJRNxOQ73I9WkRNr
            sifRhVAadwkaONacg3KXDrEUTjCN1kLBnVQSzRNBWJG9TH0bw1udneYGRb24K2rS
            XgEX8FBE05tMrCNvJ3Q3rF7L+TZ+xgqd7uPGNte8GeI3NwkaZHUA625dCLqR7Gnh
            rJ0ttEVMfkuM54dSTPLjZbMUPMlZBP0WzzDJuMxDLR8yreUA4EItPt9qigb3yw8=
            =nVJE
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2