replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.12.0
    pullPolicy: IfNotPresent
deployment:
    dnsPolicy: ClusterFirst
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: cluster.local
      port: 53
      plugins:
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
    - zones:
        - zone: .
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: file
          parameters: /etc/coredns/zones/lan.zone lan
          configBlock: |-
            reload 10s
            fallthrough
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T16:32:04Z"
    mac: ENC[AES256_GCM,data:ikCPQl82EyhaFPKy0Tzts2hZLxjYj92VqnEw+Ubm63BDZn/8aVnYE1wcXy3rc8hY+piHImeqeEQQKkCyQOkfkIU6MGiopOaNGyOhZBfC0R98xKhzG+/GTOdYCQvRInqnlMhE2kc94VWwNLgCS+kUibIueLZHnaCfiflLvwXAGmE=,iv:EP4r+R2m1r/d9PMDwB549/QfgriAiedA60p6Lhcdymk=,tag:3pQDEfcnhPLJI1/eVka2nQ==,type:str]
    pgp:
        - created_at: "2026-05-02T16:32:03Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiARAAuTHK511l3xQThp59MBXKU253U8ngxXUyOAaDqPZDlyPu
            x86OqfiPmLVfyJviUp8U9n7jer/7btGbLVoUm2LtKXH3FgwmxC8lqTWl19bjCkl5
            VdCsY0Bn9h9vB363dROk6v5vd/kZ3PKbrP8lqO/v9s55DfqswMudKu0Sce4zhL7n
            Fe7LdUjLeS1IIC3UHTo+VUSy+IWd2hkKb+7rQkggTfFCCSWazYF7Pvzrd17MHH2g
            v4HDVy04jzHeqMv2ofgooZGyadKgMR9YQu1ajC4EhH/c2ulhTLKXW5wj8Y5e3OPW
            25lIxn71kYRQW7TcozODkvPnB4gAPqCeeW5VLizHrYOmTtIV2uTeNPVhzBAk9GUp
            IEXjkiUXR88MQjCFgIHxtepNaJ2JW/DMLBOaM1jyXcTeqA6yr3bXlS8+G7PG3nxF
            o2RSidgdjZPFtjTiIX77DXCPmo1w/RsK8NH2ROGSmMqEKTWm9TwFopzR8fbwzLwF
            3YxPVNrkkWlujVmNRbKPc5aTrZm8+mW9pnlTkegegFPVPNnIM1/fG1lnOZkbXUBG
            mADELmB9ovN0nMGAOBqLeJqlJ0mlGoZE8YOL/53NSf7wI7I2r2+cyIlmODn3m127
            dbVQEbzgRKNKUU3jAnsrGLfli7L9uazWWhigKFwOagkkMdRSrPf6xJWDGnEW20nS
            XgFPeT4yCTf17H4I4rTlZXKXwpgPjvwtL7m8n9oEb9XKNqwDXDBJG9sYez9aOMHZ
            YMqBdG0oK33IY88c2YGBj5pJIQGYvbqTzX/Wp61A64W/plN94ViEb3175NrnO04=
            =Q9u1
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2