replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.12.0
    pullPolicy: IfNotPresent
deployment:
    dnsPolicy: ClusterFirst
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: cluster.local
      port: 53
      plugins:
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
    - zones:
        - zone: .
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: file
          parameters: /etc/coredns/zones/lan.zone lan
          configBlock: reload 10s
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
            fallthrough
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T16:29:37Z"
    mac: ENC[AES256_GCM,data:176iKVmI9pDajkWYE58u3mDK/bwukayxEWKdQmslyPnq8QuG2xNzj5/QZDKIen3v8epRRVi/9Eev4buXYqQlS5ldxTJoyQbAZO5IUJgpu5DiVl0OUpfzTNB86dXMf6ZzHjx01fdvIPsfmMAHpYevV07xm9jkNLrjHO21ZTygGzs=,iv:Hn7nekDWlB4EqRHImVsTl8f8tlmFAWRx30TLUs192Qw=,tag:VBgKBQMvDclBg41P0UZj+Q==,type:str]
    pgp:
        - created_at: "2026-05-02T16:29:36Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ//bZUdKB8UNSr3OmgrwD4tar/fckc2tkyCYFWdqxfk20LC
            ji4RKO5WcrHAvsk5t4hjARt8QEt+xpAFz+zN8V6O2rMZeIhjctkRwoHiZHKVxYSb
            3vSRC2vxRF5zyvTlRgW+TO2HaxiO6lgr7RtUgrQ9R/oi/k7F0sBKWZMKHLumOxCV
            mffS7TzpV0bEFu3J1D6Ns/OsLC0V4yKT90aheoR3Im59vJzuL4AghSOV36YOxxWN
            dIWyrJJFgZ5tPhzGQ2zDG8Zs4Q8QPFiokMPvEIGACxs4Wwy8trnqzxZn8X9dEmgx
            P7WI7ZEojYlFC8PU7RPW7jXs+gwhOOKMLLLmYGtU1CZ534Y77FdQt2w9ZDDNFbag
            /EY7f0If+5xV1GMWptuTWLAfywAXgG6k8hl6HSH+qGljh1t2cG7nxJmL128zgoX1
            XQS+NDcqBEbZeG9Ism1egJk5lNRf6zdYRxUo3TA6oa59oGMFUESadEzuWPdPQoNr
            Pd+gDfmd9WSRywHyRGAeEe/jMzmLEQaxt6zm5Kp3N/y2BQr7CYfNZoRwaQVFius3
            gGb6A8lNpe4m+habv9vxQTMiOARh3nPCoiTuQTplCY06i4BSW/rLn5ERzdBwcTMD
            hyyffKjVxDEzg5PbnYUnEYlWIQqHBHLxnH3/MYF+rR90h/7RuuV3RW9hDLtd00nS
            XgF8jre5MJnADqW31pxFndnJWwmy1UtiLpsWic9Tep0pVK0WANQso2JZriDIkibi
            yDz3ihSWyUVFhDR/cacriaU1oXmm//EIzxF7Ny9NJ1Dp4daaF0J0edlKTVjhN+E=
            =P9sL
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2