replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.12.0
    pullPolicy: IfNotPresent
deployment:
    dnsPolicy: ClusterFirst
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: cluster.local
      port: 53
      plugins:
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
    - zones:
        - zone: .
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: file
          parameters: /etc/coredns/zones/lan.zone lan
          configBlock: reload 10s
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
            fallthrough
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T16:36:12Z"
    mac: ENC[AES256_GCM,data:S2E66otRNsnglS5imQrwHtr0dVywh1Y9pI0UKUzlwH1aC91a0FPlar1yxrqi2ttsBSMjGlWhwY4DMU6XWL6RggbuXLbGLpD6LWdxK6qfP4lBumj1tjnQVTU2x3jCEmR3QXkquKIfebBZuxuFsDoS0qRkfNvMnfWed5xSaC9BPdk=,iv:Xhq8K4sxnJANo715DIo4XuJfb8aK2K9IWiQ9nLhkkAE=,tag:I+VSNRz+8AcCkQiGyK2TWQ==,type:str]
    pgp:
        - created_at: "2026-05-02T16:36:11Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiARAAmiRxIbrqxTDiDn28Fp0v5Yh6CW+ytA0uzB+F3p+HaC9U
            m3reL+H2COPJmcS1Y2AttqCpmmWBwA63e6bW0Zi74kh/NQkYv7GepZE0fvsryk61
            tkRxAnMTVsmUHNSa9oFN3I/WF+htnfrNU7WOs7ZLdmGiemgrpl5fqK/bQTR2Hl5U
            tUAaPfk9c4WQgbybLQ/lUe08lQFvsEoS2CESv5bmtHbd7xvaGmSIaXbOTeycrN4z
            FYm7O3SRiqf2qm2+jyEM3sD0KIIWnqTCX8plX3zBnG9TBBoA8zhkjQaMDGxTyXQX
            z7/eAzT+t0P9soRCx2duPl2co+Uxe+PV3/rgNT+GNRQYyxUzQ6HO3veV9B20ThBo
            Etkrz756EzdbjpXqKtb7FQYc/XXfNOREiEtYpc2n4E3H13J3HdIqluaP60hVZYGC
            gG5YqCm1BLQna3OaNszx8m2cmYdB6AaFb8in2iC0YOuUFN9MKe1vkE2eq+SrZT3L
            OBOnI5EAhk6RB0Fcr/AegMuFYXH/gIfcC/pZdQTR1GmRXfcrwPZujlTSELeLfEEB
            xoiU1VLarqZVLstpMmeLZIXHCr7TQPnhv30JiF/u9I0DA+6KrW8gNEHjSW01dshY
            6Gh0vFvptqZxieiPQf6qgvlqq/OKB0Mim2KCqgtUCOji831yEL/i8SJpGckbbnrS
            XgHDX314auBSE/0YBadYC8h55YI7zom5Z8PrEF2PmJBcl/BtBgOLBxt/AzsSKXg/
            MowMdZMVwpNqwMeuniXkxfWFSyaPP4QIpD85wP06jMKzXMrS4WWZg8e8Q3JwOkY=
            =9ebC
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2