values.yaml

image:
  repository: registry.k8s.io/dns/k8s-dns-node-cache
  # -- Overrides the image tag whose default is the chart appVersion.
  tag: ""

config:
  # -- Internal k8s DNS domain
  dnsDomain: "cluster.local"

  # -- Main coredns service (kube-dns) ip, used on iptables-mode.
  dnsServer: "172.20.0.10"

  # -- Virtual IP to be used by ipvs mode, to be used as --cluster-dns, must not collide.
  localDns: "169.254.20.25"

  # -- Use a custom upstreamsvc for -upstreamsvc
  customUpstreamsvc: ""

  # -- Use a custom upstream service selector
  upstreamServiceSelector:
    k8s-app: kube-dns

  # -- If false, it will bind 0.0.0.0, otherwise dnsServer and localDns will be used. https://github.com/bottlerocket-os/bottlerocket/issues/3711#issuecomment-1907087528
  bindIp: false

  # -- Set communication protocol. Options are `prefer_udp` or `force_tcp`
  commProtocol: "force_tcp"

  # -- Set boolean to log DNS requests
  enableLogging: false

  # -- If true, return NOERROR when attempting to resolve an IPv6 address
  noIPv6Lookups: false

  # -- Cache TTL in seconds for DNS records. https://coredns.io/plugins/cache/
  cacheTTL: 30

  # -- If enabled, coredns will prefetch popular items when they are about to be expunged from the cache. https://coredns.io/plugins/cache/
  prefetch:
    enabled: false
    amount: 3
    duration: 30s
    percentage: 20%

  # -- If enabled, coredns will serve stale cache entries while fetching fresh ones in the background. https://coredns.io/plugins/cache/
  serveStale:
    enabled: false
    duration: "1h"
    mode: verify

  # -- Port used for the health endpoint
  healthPort: 8080

  setupInterface: true

  setupIptables: true

  skipTeardown: false

  # -- Add extra server blocks to the generated configuration.
  extraServerBlocks: ""

  # -- Overrides the generated configuration with specified one.
  customConfig: ""

  port:
    # -- Port used for DNS traffic
    number: 53
    # -- Port name used for TCP DNS traffic
    tcp: dns-tcp
    # -- Port name used for UDP DNS traffic
    udp: dns

  # -- Overrides the upstream servers used for default server block
  upstreamServers: "__PILLAR__UPSTREAM__SERVERS__"

  # -- Allows for configuration of upstream server forwarding for the default server block
  upstreamForwardConfig: {}

nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # -- Specifies whether a service account should be created.
  create: true
  # -- Annotations to add to the service account.
  annotations: {}
  # -- The name of the service account to use.
  # -- If not set and create is true, a name is generated using the fullname template.
  name: ""

service:
  # -- Annotations to add to the service.
  annotations: {}

podAnnotations: {}

podLabels: {}

configMapAnnotations: {}

configMapLabels: {}

daemonsetAnnotations: {}

daemonsetLabels: {}

# -- DaemonSet update strategy configuration
updateStrategy:
  type: RollingUpdate
  rollingUpdate:
    maxUnavailable: 10%
    # Optional, can be set to a integer value rather than a percentage
    # maxUnavailable: 1
    # maxSurge: 0

initContainers: []

securityContext:
  capabilities:
    add:
      - NET_ADMIN

# -- https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/user-guides/getting-started.md
serviceMonitor:
  # -- Ensure that servicemonitor is created, this will disable prometheus annotations
  enabled: false
  labels: {}
  path: /metrics
  honorLabels: false
  # Fallback to the prometheus default unless specified
  # interval: 10s

  # Fallback to the prometheus default unless specified
  # scrapeTimeout: 30s

  # -- Metric relabel configs to apply to samples before ingestion.
  # [Metric Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs)
  metricRelabelings: []
  # - action: keep
  #   regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
  #   sourceLabels: [__name__]

  # -- Relabel configs to apply to samples before ingestion.
  # [Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config)
  relabelings: []
  # - sourceLabels: [__meta_kubernetes_pod_node_name]
  #   separator: ;
  #   regex: ^(.*)$
  #   targetLabel: nodename
  #   replacement: $1
  #   action: replace
  #

  # -- The service monitor name prefix which align with the prometheus operator name, eg.: `kube-prometheus-stack`
  namePrefix: ""
  # -- The namespace of prometheus where the service monitor should be deployed
  prometheusNamespace: kube-system

# -- https://github.com/grafana/helm-charts/blob/main/charts/grafana/README.md
dashboard:
  enabled: false
  # -- namespace where grafana sidecar is configured to look for dashboards. e.g. "monitoring"
  namespace: kube-system
  # -- label that grafana sidecar is configured to look for
  label: grafana_dashboard
  annotations: {}

resources:
  requests:
    cpu: 25m
    memory: 128Mi
  limits:
    memory: 128Mi

# -- Container lifecycle hooks for the node-cache pod.
lifecycle: {}
  # preStop:
  #   exec:
  #     command: ["/bin/sh", "-c", "sleep 30"]

# -- Resize policy for in-place pod vertical scaling.
# [Container resize policies](https://kubernetes.io/docs/tasks/configure-pod-container/resize-container-resources/)
resizePolicy: []
  # - resourceName: cpu
  #   restartPolicy: NotRequired
  # - resourceName: memory
  #   restartPolicy: RestartContainer

affinity: {}

imagePullSecrets: []
# - name: "image-pull-secret"

prometheusScraping:
  enabled: true

tolerations:
  - key: "CriticalAddonsOnly"
    operator: "Exists"
  - effect: "NoExecute"
    operator: "Exists"
  - effect: "NoSchedule"
    operator: "Exists"