coredns

CoreDNS

Chainguard's redistribution of the CoreDNS Helm chart, pre-configured with hardened Chainguard Images.

Prerequisites

Authentication is required to access this chart and its images. First, authenticate with Chainguard and configure your environment:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret for the cluster:

kubectl create secret docker-registry cgr-pull-secret -n kube-system \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')"

Installation

Depending on your Kubernetes distro the kube-dns service will need to be set to an appropriate ClusterIP. For EKS, the default will be 172.20.0.10 or 10.100.0.10 depending on your cluster's service CIDR.

helm install coredns oci://cgr.dev/ORGANIZATION/charts/coredns -n kube-system \
  --set image.pullSecrets[0].name=cgr-pull-secret
  --set service.clusterIP="10.0.100.10"

About This Chart

This is a redistribution of the upstream CoreDNS Helm chart. All upstream configuration options and documentation apply.

For full documentation, see: https://coredns.io