replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.12.0
    pullPolicy: IfNotPresent
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: lan
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
            fallthrough
        - name: file
          parameters: /etc/coredns/zones/lan.zone lan
          configBlock: reload 10s
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T15:28:02Z"
    mac: ENC[AES256_GCM,data:7cO7Xa0ZdWrXpvPcgb0JUD3FF0hGLkkiIzaQH/IpYEf8Hj3H6wG6vpE+Qk9g7VLz9x2YZ8O9JSqemM+mz+KaPL1MMnNpahuwHhlB+1CWh8sT7MB2eQzV3743iTbXk4ye47qdYTtQyMtud08CAUcmSF7fZBymc/cisWmnxBQah20=,iv:SPeD3z1CcgXbrDaEhdd+q0SL2acH38j+aHA7Lrw+kl4=,tag:ie8ZoPdW1d1aSSEFjJAqwQ==,type:str]
    pgp:
        - created_at: "2026-05-02T15:28:01Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ/+OoRkl06iy/cQquGC5CWYYWvUR9+mRTXPbOQvApRrySjo
            ZhmUmGG5j4+sLxkIiJrXtHCMOo8cYKI53ZQTx6ykzqeTBmDJy/tl2lQSe4xtaUXy
            p/klPRHem0XrhEyhexp+d+qpzCTQhAfsYfTfz5ZX4zlLkW3eNoU3T2yW+N5dwsUz
            cgBOIIQq4RL61i/z6KK4bg45lmySj4FkkVDYCJz9NoZ2ov4b0654l4gKsxF0JABg
            eoBLVD+UqfvVS3KC9KNOQ/vXM9MrBPzGBF1Ed21xp0duNbN+N93cU7TvMmrDCA2L
            ggIc0WJpJTMqsnaCOyM4ZdgFEyfzFTbseeenf1zqR8b4HEWmdcwLzOYdLnL3pRRd
            G2KH3H3k5CmLKl01QD2u99pdEaCPI1yftDMBO7xrnIkfLl31fBtRZyazxnhkjPfA
            m15l0Dx29hfpiYSE62CtmPQqKtes2bv8YmNwuCBk3hutvJ8RZe4o1QR4gno7iE3p
            GdBQ8qUyD8KpDvbYpnf98FYXpRjK7yjFkMoK9as83OW7mWUzeDUpeeEr8sC51Ba1
            CGCwaX5VKPnXFsLix89oiucb/3TsjM25aZMAgrFpckh4xLMpfTGCN4dX4AtutfA5
            VyL4p8+Yd7RBqOcTGNF9G8GOsJA4ReVZPyxAJwRdgCUDXVng6/VxB8rzifIqVrnS
            XAEWiOqs/6P5W3ABViHjauKMhIeIQcdySVgXbCeCBn+CnCOjWnvYt38vyvJG/8Sb
            5b0k9+4I/JATNvSnrxiNgLVU9Oy9diVNRnPJDCsdCeNwGFr5fKuHiP3CRCEb
            =74cr
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2