node-local-dns

NodeLocal DNSCache

Chainguard's redistribution of the NodeLocal DNSCache Helm chart, pre-configured with hardened Chainguard Images.

Prerequisites

Authentication is required. First, authenticate with Chainguard:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret in the target namespace:

kubectl create secret docker-registry cgr-pull-secret \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')" \
  --namespace kube-system

Installation

The config.dnsServer value must match the ClusterIP of your cluster's kube-dns service. Adjust it to match your environment (for EKS it is typically 172.20.0.10 or 10.100.0.10 depending on your cluster's service CIDR).

helm install node-local-dns oci://cgr.dev/ORGANIZATION/charts/node-local-dns \
  --namespace kube-system \
  --set imagePullSecrets[0].name=cgr-pull-secret \
  --set config.dnsServer="172.20.0.10"

About This Chart

This is a redistribution of the upstream NodeLocal DNSCache Helm chart maintained by Delivery Hero. All upstream configuration options apply.

For full documentation, see: https://github.com/deliveryhero/helm-charts/tree/master/stable/node-local-dns