replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.12.0
    pullPolicy: IfNotPresent
controller:
    replicas: 1
    dnsPolicy: ClusterFirst
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: cluster.local
      port: 53
      plugins:
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
    - zones:
        - zone: .
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
            fallthrough
        - name: file
          parameters: /etc/coredns/zones/lan.zone lan
          configBlock: reload 10s
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T16:20:50Z"
    mac: ENC[AES256_GCM,data:DDYTTaqlM4rrnpMORXt/w4M5fNxNCca+tm3av9+mrNSOUbT4eTPZiUNDF/j50tO5I7w2QPCtO8+KXIYmCfat8dU/tdKnkzAYn6Iv1lbpRr87q4lVUQa8gKcLlHELh7ymnF4pvYbGLlUNTm6Cdwy1nmiC5VQRUMd78DDMgKCNevE=,iv:DkOMwtT4kiv8hwMVGhgLhnjHs1mQLZEEJx+CxEgLJZ4=,tag:aFcYZFwdKqF/0MFtrRPBbA==,type:str]
    pgp:
        - created_at: "2026-05-02T16:20:48Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiARAAiBaEmRXabkxs/Cx8tl/TbBzHxK8abLu3PRXoYQ2cL9IO
            2r7djipAIOXEDP+ag2STKU2Rgui+5HtrWDrPUxfSiCL0Oeg+iRBOyQ6Isvuet5XY
            6YThV3xbEAhHpn7hGIfaZF3Q/45sbxtxit4LVlzoHy4XiSPejkkn/rDCABtwcMCG
            pLEz9dmE14O3380OpL5A+PwJSXu8ycDEN3NiuP3CQancOoXATCjGV6S+rSorKOlz
            DIU1YIuQ6dqaazTCpVqKnzQmRpctuw1AZGEtsdbD573gNvBiBfGtl2YTv245ssRI
            +v+msey+zsRLsCNHaw3dRwVLMdnOL3UzOMEi3xL1F+1vO1FQamsibIbW5jGAyiwe
            f9quWU1gIIvyOCaqrDg2ChJkgWaQKUG6C27Ql19jwiLFXDFw4GOkQc8sY3IgnUdX
            Ur1z05vbZnaTp5G4Of/RtRrYgoc5fdUJRVijZVvnML7c3Lk9Kuz2RRgAshUf6wE3
            cpKJWwqEhw852g1fJkZ+1yOrp9uoKwgjiMJQ23aOi5DKf2xNwCPVUV7PeoBl+6xO
            zUBSu7CaOL+wkHtGV9k9HGKyZLPs2NyYdGQBmxNFXHnw+6jhKxkLZNIIOZHQyNZ1
            dMGfcrnjpDY97R7gh+bqAwcOcaFszIpGpvs9YmOvvrniYtzcnYgJ241XeoJjvyjS
            XgE0CKicCaqrBxs9lhg5a356Mjdv/Ih6gPIbWBgMfftdpj7gnO1QRUKERSSXzyEk
            fLBs7y5oEtGUgN7O00FGnpXWuH3jKRa90W6ggNFSb7skCCW9A1GLY0tTiO8mxf4=
            =9bfc
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2