apiVersion: apps/v1
kind: DaemonSet
metadata:
  annotations:
    deployment.kubernetes.io/revision: '1'
    objectset.rio.cattle.io/applied: H4sIAAAAAAAA/5xV23LjNgz9lQ6e5YtydTTTh22cdjNtXE8u+7Lj2YEpyGZNESoJeePJ6N87kGzHSbPZbZ9MkwfAweEh9ARY2U8UomUPGWBVxcE6hQRW1ueQwZgqx5uSvEACJQnmKAjZE6D3LCiWfdS/PP+LjESSfrDcNyjiqG95YDUJJN8856+eQm+xXkEGq+N4cLJOk59+tz7/+UOes/9uCo8lQQaGA+U+/hA8Vmg0ZlXPqRc3UaiEJgGHc3JtU6tR7GFV7SBdXl0GT0JRs23LXnKg8eTunbJLjEvIYG7oaHR8dDEapen5yTEOj0dnOD9Nh8VRcXZOxfnJ0cnQnJ4rkX+19A7pWJFRypEcGeGg6xLFLP94r5tGIyWg0GKjkMDOWb94qHIU6lI8Pnhco3U4dwRZ2iQgm0oJ3L7A6j6VldvFHTjlXT2bA+6GvaD1FCJkn58Aw0IX0DPsC0hgQGIGWzEGKnhhHcEsAVviQhkF9GZJYYfpbX+ztH/Wv4Atblo7N2VnzQYyuC4mLNNAsfO3s2vyFOM08Lxto0Dr6kD3y0BxyS6H7DSBpUj1G4meVyh6qYMloZMlJFBxEMhGw9EwgWiW1F7gx/v7qQpkvRWLbkwON3dk2OcRsjNF1sZQjAdl0gTElsS17IGnbzlC63Vq7cWbthROj/foLTKwsGEHGTyMlc53Qnpiqpdh95dvhl2kB4ElSbAmvhE4SyAQ5vZ/6auRm2d501H6o/Km/0XeQJHrYKg1q7OlldiZueSgdknPhzcWWuDfNcXu1FS1Hg2HZTsht9AOqeYmUwcrm0v2Qo9tV+gcf50Gu7aOFnQVDbp2kEJWoIuUgMEK59ZZsR0VzHN9CJOr+y+/XE/GX+6ubj9dX16p9/PAlZ6hczBrOo3/9G5zyyy/WkfbCZFJqKlJYM2uLumGa7+1TanL6VbmgwcGB2bzhV30ukh4rrDNOdObzX3cv6kxFVg7fU6ec7o7mEdzEuy/HJ8cIQNnff3YDjEKa2vogzHKavLa7MKOwu6T8/kJVqT1LoMVa9C1n4nYMkuAK0VqWbh6tHpT6lwqCjICGUz4ziwpr5021KVRsr3Ajl4xLDEKhbdTznaC7p9gYRc3WGmzVqh8QXM3sJKdq/c7Sq0DTTinj6y596jnLS33agA037ilZtY0TfNPAAAA//+Y+WTs3AcAAA
    objectset.rio.cattle.io/id: ''
    objectset.rio.cattle.io/owner-gvk: k3s.cattle.io/v1, Kind=Addon
    objectset.rio.cattle.io/owner-name: coredns
    objectset.rio.cattle.io/owner-namespace: kube-system
  labels:
    k8s-app: kube-dns
    kubernetes.io/name: CoreDNS
    objectset.rio.cattle.io/hash: bce283298811743a0386ab510f2f67ef74240c57
  name: coredns
  namespace: kube-system
spec:
  selector:
    matchLabels:
      k8s-app: kube-dns
  template:
    metadata:
      labels:
        k8s-app: kube-dns
    spec:
      containers:
      - args:
        - -conf
        - /etc/coredns/Corefile
        image: rancher/coredns-coredns:1.6.9
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 5
          httpGet:
            path: /health
            port: 8080
            scheme: HTTP
          initialDelaySeconds: 60
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 5
        name: coredns
        ports:
        - containerPort: 53
          name: dns
          protocol: UDP
        - containerPort: 53
          name: dns-tcp
          protocol: TCP
        - containerPort: 9153
          name: metrics
          protocol: TCP
        readinessProbe:
          failureThreshold: 5
          httpGet:
            path: /ready
            port: 8181
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 5
        resources:
          limits:
            memory: 170Mi
          requests:
            cpu: 100m
            memory: 70Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - all
          readOnlyRootFilesystem: true
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /etc/coredns
          name: config-volume
          readOnly: true
      dnsPolicy: Default
      nodeSelector:
        beta.kubernetes.io/os: linux
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: coredns
      serviceAccountName: coredns
      terminationGracePeriodSeconds: 30
      tolerations:
      - key: CriticalAddonsOnly
        operator: Exists
      - effect: NoSchedule
        key: node-role.kubernetes.io/master
        operator: Exists
      volumes:
      - configMap:
          defaultMode: 420
          items:
          - key: Corefile
            path: Corefile
          - key: NodeHosts
            path: NodeHosts
          name: coredns
        name: config-volume
  updateStrategy:
    type: RollingUpdate
    rollingUpdate:
      maxUnavailable: 1
