replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.12.0
    pullPolicy: IfNotPresent
deployment:
    dnsPolicy: ClusterFirst
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: cluster.local
      port: 53
      plugins:
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
    - zones:
        - zone: .
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
            fallthrough
        - name: file
          parameters: /etc/coredns/zones/lan.zone lan
          configBlock: |-
            reload 10s
            fallthrough
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T16:28:25Z"
    mac: ENC[AES256_GCM,data:IUNgwM/eLxFyChHoJ8aTNBI1Vsv+sELZEFUMs863v9ZE5GFF05z9WuymdPOprA4UmDyMgZiNO4RsGvFGwaslF2r1dm7JBBZjDgHvuFlCzSu9oDTh21Q35XfhXTiN6lNkj+87sQB5h/Dkz4ChhgTvTgxOU18Y1k7vy5BW2Ts6qfY=,iv:nuEzZrZjQK6hc54UvQ/KfiH7V9cTFm9YFHW4itaNKTs=,tag:EfWcAEdKjcfpWAbnbiWH8A==,type:str]
    pgp:
        - created_at: "2026-05-02T16:28:24Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ/+N80pcui6ryeMhqX4smbxM/jHIxGkMD2NNcoiVB6YZ6xO
            aNbsOcQSFZsZZAMW8Trx4y4xiv8/7Mjcfy4sgzF3a4FPRVQM4f6/ojoNFpsLC9sC
            HP1rvbhjhCRvYyEACtEV/uM1XJ6dF6kIBkBxVoV25X/RQAnfeEae9HuLl+fHdkLI
            Mt2LsFyztmDOF12jPTeIWvE/wP/PRfXtpIpCzNkwVOGBkIx/CBu/w2fnEmovgAeq
            Yd+vkXqW9CGE5KnGNwbvTiuMGA0WLvu8tvRBuzMnzUv2oM0pDMMOHR6VDYNCnrHF
            rPKafUXUgd4BEuUEJzKxV1Y5icmC1OLXEiWOBxySK5m73NtAPdIHRX4sqZpDpsWc
            kVXiu16uGZncnbSuXs/grjRxPUlFdKr31oqFRUbK+nWejUaI3mWx3/RmXgUqkmlx
            1YSCmUT57aMnaW+cmS1gSbcpm5GY7w7So0WwvPtsi6bYRPxyYyMgbwYv3DGCOe7h
            OG0GGTSNMdZRNGgu8frF0wC04aDusXN1IUtSEDd8/2wDw6F3z/GlfVlarCpxMZ6O
            PKRmfBi+22mSRS4M7lLVpj1pdCwTK7y3qwuTdd9JAmvVeSmLStwhRzbUYt/qwaec
            z9/mA7t5mVweCXnkOviyWAHkvuNb0IgnTAQR7vcEOP+XCqWPDJ/uYahSeUXeut7S
            XgE6zDzrWG9k1/x8v8g4pVt6bPhCu2l5AIdNvXQGN43o0zxq8cO/TwK4sRFaqCWw
            rN5QYchXJZkx2fkLynRqgboibNZR0qGRKyxm3zDRhppd8eYf+Hl+2wRzm1lPGbQ=
            =9Jto
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2