replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.14.3
    pullPolicy: IfNotPresent
deployment:
    dnsPolicy: ClusterFirst
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: cluster.local
      port: 53
      plugins:
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
    - zones:
        - zone: .
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
            fallthrough
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T16:43:27Z"
    mac: ENC[AES256_GCM,data:KctpidDekFIfCDh7BRi5TNNSGemKD5IWxDg11maqtdB3kE3R1n//iS1IOHPc6wF2nGIToZS1RRj6sGbec1dKiCL77ZvXOeauB2iq6COVQwfJeZMYG2cIHsJ3kIgu+U7WKsFJdRQJMcRbNo4m81wH1Q7RYkxX+bRUOfK7V1y1GX8=,iv:nwioCrAnsFbc3asba2cWv3xrQf6tmX9oZpBr/w64Mqg=,tag:zlsUBm8nQHsiGS5nz21grw==,type:str]
    pgp:
        - created_at: "2026-05-02T16:43:26Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ//Q08bJ9Ihzp4fIpklYFZF1jE99q+I1queOVqvbcbCgZiP
            vKFGEOBZNVmeGwJGUjJEliU77B0na+wqdiK9cDPgv6uhoxtdxo6t0848ePtjbBQN
            F4Dijm5kZtyxZXLUELMGMQ/jq6I2pMkb4UWsghkOpAbIRM4yfVkhm+QVz8+gC50O
            FmJGmsPAx7EtKuO+RRD9tOBEVcQjo29CpwFcC9MrSoKkQ0ry0ONK/eeZ541l8mvm
            o5ePHGpZo4pcjxjHpKk3s0Cn0i6/Rb3U7KeLczGS3VTHCn7dJ/hv0nVZHc0wByMe
            duQ4CTjxw5vkADcxARs3fNPG1weq3J2E7XzGvNFjspP0G7UK/29Gzb0tbUEYjk2M
            u7ZUeKbplTn/u7ByMNO8G0YP3eeDPTPAb967oVyil36RkgGdDIauIam1ijub0FCK
            7bzyy9EnqYkW3npyd1osceIgJc+yeTWcQzMXXby3Pg5bFxyTcd9oBAQsJqMAdD5s
            kJoVmGqeaF+wG1Ij7YT1VixVbESBZtUkkXlzFfkpgchHc0gXDig2bvzP5rJ9s445
            T0tMDc+w63Tu//TuZ3xafxxf8wz73WOPST6AurJm8KUxN+yRd2N8r3f9Xx/MSPo1
            2wY4v1apjtfGl9rmV9SXsj2/Pur3cXrh2cvqZ5Crw2dGTIjlalMQOs+kBSdy9jbS
            XgFgEA6lvjV4EOnCoOgWKv4fSbj61V5ikpkkMl86yA9Bdnu+43j1R7N27yTFmeKM
            GhLkny3/Pz/rLsHNeBrnKoYAuPF4mDe5046iGZdJXfOE7rve6+VNSMjyyyMzxMo=
            =9AsX
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2