mirror of
https://github.com/outbackdingo/homelab-v.git
synced 2026-08-25 14:53:19 +00:00
52 lines
1.3 KiB
YAML
52 lines
1.3 KiB
YAML
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: unbound
|
|
namespace: dns
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: unbound
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: unbound
|
|
spec:
|
|
securityContext:
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
containers:
|
|
- name: unbound
|
|
image: docker.io/mvance/unbound:1.20.0 # renovate: docker=docker.io/mvance/unbound
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: false
|
|
ports:
|
|
- name: unbound-dns-tcp
|
|
containerPort: 5335
|
|
protocol: TCP
|
|
- name: unbound-dns-udp
|
|
containerPort: 5335
|
|
protocol: UDP
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 128Mi
|
|
startupProbe:
|
|
exec:
|
|
command: ['drill', '@127.0.0.1', '-p', '53', 'nrk.no']
|
|
initialDelaySeconds: 10
|
|
failureThreshold: 3
|
|
timeoutSeconds: 5
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /opt/unbound/etc/unbound/unbound.conf
|
|
subPath: unbound.conf
|
|
volumes:
|
|
- name: config
|
|
configMap:
|
|
name: unbound-config
|