coredns / cluster upgrade

_sys/coredns-deployment.yaml

@@ -109,7 +109,7 @@ spec:
       - args:
         - -conf
         - /etc/coredns/Corefile
-        image: k8s.gcr.io/coredns/coredns:v1.8.6
+        image:  registry.k8s.io/coredns/coredns:v1.9.3
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 5
@@ -132,6 +132,16 @@ spec:
         - containerPort: 9153
           name: metrics
           protocol: TCP
+        livenessProbe:
+            httpGet:
+              path: /health
+              port: 8080
+              scheme: HTTP
+            initialDelaySeconds: 60
+            timeoutSeconds: 5
+            periodSeconds: 10
+            successThreshold: 1
+            failureThreshold: 5
         readinessProbe:
           failureThreshold: 3
           httpGet:
@@ -155,6 +165,7 @@ spec:
             drop:
             - all
           readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
         terminationMessagePath: /dev/termination-log
         terminationMessagePolicy: File
         volumeMounts: