cozystack/packages/system/coredns/values.yaml at tests/vm-disk-source-coverage - vrr/cozystack - VRR Forge

vrr/cozystack

mattia-eleuteri 7320edd71d

fix coredns serviceaccount to match kubernetes bootstrap rbac

The Kubernetes bootstrap creates a ClusterRoleBinding 'system:kube-dns'
that references ServiceAccount 'kube-dns' in 'kube-system'. However,
the coredns chart was using the 'default' ServiceAccount because
serviceAccount.create was not enabled.

This caused CoreDNS pods to fail with 'Failed to watch' errors after
restarts, as they lacked RBAC permissions to watch the Kubernetes API.

Configure the chart to create the 'kube-dns' ServiceAccount, which
matches the expected binding from Kubernetes bootstrap.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Signed-off-by: mattia-eleuteri <mattia@hidora.io>

2026-02-02 15:32:50 +01:00

11 lines

217 B

YAML

Raw Permalink Blame History

 coredns:
   image:
     repository: registry.k8s.io/coredns/coredns
     tag: v1.12.4
   replicaCount: 2
   k8sAppLabelOverride: kube-dns
   service:
     name: kube-dns
   serviceAccount:
     create: true
     name: kube-dns