replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.12.0
    pullPolicy: IfNotPresent
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: cluster.local
      port: 53
      plugins:
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
    - zones:
        - zone: .
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
            fallthrough
        - name: file
          parameters: /etc/coredns/zones/lan.zone lan
          configBlock: reload 10s
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T16:12:50Z"
    mac: ENC[AES256_GCM,data:UWyNz88vXWaju7lPKcFNxWRy2abeY01YErhrAJE5tnfk/1DvH5Pk3MfEz3wsJvAIRehyZwAqJrhXRSWCKcMd3LXeX1t4JmX5hUbxvkwIlN47NF8Q7tgJPQuywiyF0ekeYRqNIKWwQQ1Jl/WtpTm0uTmcNxVBvlvlsjwwaJy7SC0=,iv:kPTEtYAZPloEzKkUAJgz1P97CDNA+Kjr3YeAyqQXo7M=,tag:S38EeZzd6ij9Y93FEtBvxA==,type:str]
    pgp:
        - created_at: "2026-05-02T16:12:49Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiARAAmT7TixucqyIemtX/ECJOotWOpHOifrMD7AxaAMz+n7kK
            7OYGF4q8RyiFigk1xAciFaOoA3WC6u1pkBRC1JI1CYY6gRG+eJVd7f7zQVNPpYtt
            DG7TeGipxIyHaM+ibyB8uIQMrb0g5267RHhWlAbEM3zc6uTHsNx6padAVtfFqTo1
            A5jypIT+FLSm8D7iJYJgfebMmYfh65WLLBQ2tsOFHLCuTnlJO76Q3NR2pn01luku
            /57yWUJzq5ExLUDwPL7E63CSASw+NT1VsYa8tfnzDzYKJvnFYCBJK0o/vWheAnKm
            YFafK9syFUVXUeSRaESu1kJEHU2Fmm/OfwpWbl0hQQLrcvUPGVXd5wOpts6g/qrx
            xK69+Gpwy7bAp7fBrwRFRsxW346JqqDaHJe+ZNRmRlYKDUITxLMK66qTEBfOJS18
            r67ueQtPPn97IAaQ9ZovDuZVAUWw4IO/2dL0HlxbHzCS3vSfsGfUkIeRMW9FySOR
            z1nvsduphQZLOr7FaAU3cHdVsviegalSrw0D1FBnieTTK2jwQeJdyHDP1NcCOdbp
            yVdU5NmdgcB3ENCkJ1ADllvzjadGUGtxLFped9lqX2MTcOJCFWsJMVP/0x0Pp3yy
            cp7fD/56ty6NWavr9ZH4C5pTl1tITjxCsh0KDHTOEP7GI1LZMM0A+URf/Yl0kVbS
            XgHygNklXJOP28Cd4HYCZkfujdu0I3VYBf3a3cTK3KlOsmbiJY9HrBK4DXjJMQ/U
            BA7hIpkhxFQEwpG5x0HZytc7fGGjxlqSynneLA1OqYiL4qurInnNsgVi1FxOqgU=
            =GWqF
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2