replicaCount: 1
image:
    repository: coredns/coredns
    tag: 1.12.0
    pullPolicy: IfNotPresent
resources:
    limits:
        cpu: 100m
        memory: 128Mi
    requests:
        cpu: 50m
        memory: 64Mi
serviceType: ClusterIP
service:
    annotations:
        io.cilium/lb-ipam-ips: ""
servers:
    - zones:
        - zone: .
      port: 53
      plugins:
        - name: errors
        - name: health
          configBlock: lameduck 5s
        - name: ready
        - name: debug
        - name: kubernetes
          parameters: cluster.local in-addr.arpa ip6.arpa
          configBlock: |-
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
        - name: etcd
          parameters: lan
          configBlock: |-
            path /skydns
            endpoint http://etcd.coredns.svc.cluster.local:2379
            fallthrough
        - name: file
          parameters: /etc/coredns/zones/lan.zone lan
          configBlock: reload 10s
        - name: cache
          parameters: 30
        - name: loadbalance
        - name: log
extraVolumeMounts:
    - name: zone-config
      mountPath: /etc/coredns/zones
      readOnly: true
extraVolumes:
    - name: zone-config
      configMap:
        name: coredns-lan-zone
sops:
    lastmodified: "2026-05-02T16:04:39Z"
    mac: ENC[AES256_GCM,data:jk0YAYr09QFJm2lmNEs/za0Na9U09sJvR6LZSbfcW8joxiyK4Ss2TpxwoZ+3VY1DAgCUxVmdUb4W95p9uV9Wbn/R5TFlRTBw8pXduc1F48byOT/mC9HAzL+P2eqSkCwZfOUCbXVAaNtYv8vsFLTaaNBwAtRv0slFO3Saw88/xjs=,iv:1hfIhjNnyP47c7F42EiydzwczzuXBqtNLj4iW4kCB3o=,tag:aewACEooSN/xjFdVamk+JA==,type:str]
    pgp:
        - created_at: "2026-05-02T16:04:38Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiARAAiMsTRCHiM2L5wK4dP/ckAUYrELFSpEC0n33CDhIC7ghB
            4y+I5mV0vtLOUv0tTjoomRSupr5oLQmspMoDYuej2HxqkwJ5pasibrqhT+UIO3EC
            ANsguEIMrNk02AD8KSUGNEiFzCZ5ms/IGuMmh0T8Uo9jhPh8ojDEcOIhOJvSOd/9
            qCU31ha5Gk+O6yljcSZTkr6IL2VZ3oecqbVQIMyjDmdmrQDGk7y29ZvyLqlI9eov
            oanLYoHOHZBhGWnB/p3KXTqYKQHHWMO1rt60y3dtj+v6SyJFP4l/3jr3KQFU+wQY
            cza64NjoYPoWGAkSkh+Ds+XJzlFlSksj6hQJJFPjrW7HlF9np0MGitSoccJWD+I3
            pB0WPcodOH6lL6FsrSgP6DLkQpiapu+O23A1qm1/DxBkL397wGz7e8r1QxUAf8a9
            h/yUR0mXLsHTBuDoALjSuXUW0VodLjPNg6kNbZVfcpMMTwpzZ2zgiQjWXKH7mLz2
            EST708lOfzTKDamIbZ5zs5Id77jhXurq2lj3z1hMP5Lel5zpzTM9jlUTZv6WBPps
            Lh6bBwWo2IE4bOH/8O5ExVo1OSUQbsi/j8fZLRL/VNitf2voNzYak1shSXuoe3BX
            in5qVBBUSVqN63MFMtXcSWrhtJOkEfe6fNmAqBigD/fuvzlUitJFm+scBrLeCXjS
            XAEdkCjULf+pPiCHLNDZso0w+F1sYNjMih5ozcoC6pbopG553EO+IYZufx06VMAA
            bqugsLnmitk6G2aEy9GEcSTT7rBZ7X3NfpaXWFTFvH7nugjeQTR24DIClGir
            =FT21
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2