node-local-dns
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
image:
2
repository: cgr.dev/scratch-images/test-tmp/kubernetes-dns-node-cache-fips
3
# -- Overrides the image tag whose default is the chart appVersion.
4
tag: 1.26.8-r17@sha256:c26fcccef2545f54bc908e1a6cfac89b9b9eac2618e603847c97d586625a8cef
5
config:
6
# -- Internal k8s DNS domain
7
dnsDomain: "cluster.local"
8
# -- Main coredns service (kube-dns) ip, used on iptables-mode.
9
dnsServer: "172.20.0.10"
10
# -- Virtual IP to be used by ipvs mode, to be used as --cluster-dns, must not collide.
11
localDns: "169.254.20.25"
12
# -- Use a custom upstreamsvc for -upstreamsvc
13
customUpstreamsvc: ""
14
# -- Use a custom upstream service selector
15
upstreamServiceSelector:
16
k8s-app: kube-dns
17
# -- If false, it will bind 0.0.0.0, otherwise dnsServer and localDns will be used. https://github.com/bottlerocket-os/bottlerocket/issues/3711#issuecomment-1907087528
18
bindIp: false
19
# -- Set communication protocol. Options are `prefer_udp` or `force_tcp`
20
commProtocol: "force_tcp"
21
# -- Set boolean to log DNS requests
22
enableLogging: false
23
# -- If true, return NOERROR when attempting to resolve an IPv6 address
24
noIPv6Lookups: false
25
# -- Cache TTL in seconds for DNS records. https://coredns.io/plugins/cache/
26
cacheTTL: 30
27
# -- If enabled, coredns will prefetch popular items when they are about to be expunged from the cache. https://coredns.io/plugins/cache/
28
prefetch:
29
enabled: false
30
amount: 3
31
duration: 30s
32
percentage: 20%
33
# -- If enabled, coredns will serve stale cache entries while fetching fresh ones in the background. https://coredns.io/plugins/cache/
34
serveStale:
35
enabled: false
36
duration: "1h"
37
mode: verify
38
# -- Port used for the health endpoint
39
healthPort: 8080
40
setupInterface: true
41
setupIptables: true
42
skipTeardown: false
43
# -- Add extra server blocks to the generated configuration.
44
extraServerBlocks: ""
45
# -- Overrides the generated configuration with specified one.
46
customConfig: ""
47
port:
48
# -- Port used for DNS traffic
49
number: 53
50
# -- Port name used for TCP DNS traffic
51
tcp: dns-tcp
52
# -- Port name used for UDP DNS traffic
53
udp: dns
54
# -- Overrides the upstream servers used for default server block
55
upstreamServers: "__PILLAR__UPSTREAM__SERVERS__"
56
# -- Allows for configuration of upstream server forwarding for the default server block
57
upstreamForwardConfig: {}
58
nameOverride: ""
59
fullnameOverride: ""
60
serviceAccount:
61
# -- Specifies whether a service account should be created.
62
create: true
63
# -- Annotations to add to the service account.
64
annotations: {}
65
# -- The name of the service account to use.
66
# -- If not set and create is true, a name is generated using the fullname template.
67
name: ""
68
service:
69
# -- Annotations to add to the service.
70
annotations: {}
71
podAnnotations: {}
72
podLabels: {}
73
configMapAnnotations: {}
74
configMapLabels: {}
75
daemonsetAnnotations: {}
76
daemonsetLabels: {}
77
# -- DaemonSet update strategy configuration
78
updateStrategy:
79
type: RollingUpdate
80
rollingUpdate:
81
maxUnavailable: 10%
82
# Optional, can be set to a integer value rather than a percentage
83
# maxUnavailable: 1
84
# maxSurge: 0
85
initContainers: []
86
securityContext:
87
capabilities:
88
add:
89
- NET_ADMIN
90
# -- https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/user-guides/getting-started.md
91
serviceMonitor:
92
# -- Ensure that servicemonitor is created, this will disable prometheus annotations
93
enabled: false
94
labels: {}
95
path: /metrics
96
honorLabels: false
97
# Fallback to the prometheus default unless specified
98
# interval: 10s
99
100
# Fallback to the prometheus default unless specified
101
# scrapeTimeout: 30s
102
103
# -- Metric relabel configs to apply to samples before ingestion.
104
# [Metric Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs)
105
metricRelabelings: []
106
# - action: keep
107
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
108
# sourceLabels: [__name__]
109
110
# -- Relabel configs to apply to samples before ingestion.
111
# [Relabeling](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config)
112
relabelings: []
113
# - sourceLabels: [__meta_kubernetes_pod_node_name]
114
# separator: ;
115
# regex: ^(.*)$
116
# targetLabel: nodename
117
# replacement: $1
118
# action: replace
119
#
120
121
# -- The service monitor name prefix which align with the prometheus operator name, eg.: `kube-prometheus-stack`
122
namePrefix: ""
123
# -- The namespace of prometheus where the service monitor should be deployed
124
prometheusNamespace: kube-system
125
# -- https://github.com/grafana/helm-charts/blob/main/charts/grafana/README.md
126
dashboard:
127
enabled: false
128
# -- namespace where grafana sidecar is configured to look for dashboards. e.g. "monitoring"
129
namespace: kube-system
130
# -- label that grafana sidecar is configured to look for
131
label: grafana_dashboard
132
annotations: {}
133
resources:
134
requests:
135
cpu: 25m
136
memory: 128Mi
137
limits:
138
memory: 128Mi
139
# -- Container lifecycle hooks for the node-cache pod.
140
lifecycle: {}
141
# preStop:
142
# exec:
143
# command: ["/bin/sh", "-c", "sleep 30"]
144
145
# -- Resize policy for in-place pod vertical scaling.
146
# [Container resize policies](https://kubernetes.io/docs/tasks/configure-pod-container/resize-container-resources/)
147
resizePolicy: []
148
# - resourceName: cpu
149
# restartPolicy: NotRequired
150
# - resourceName: memory
151
# restartPolicy: RestartContainer
152
153
affinity: {}
154
imagePullSecrets: []
155
# - name: "image-pull-secret"
156
157
prometheusScraping:
158
enabled: true
159
tolerations:
160
- key: "CriticalAddonsOnly"
161
operator: "Exists"
162
- effect: "NoExecute"
163
operator: "Exists"
164
- effect: "NoSchedule"
165
operator: "Exists"
166
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.