From 47cbd885877a93e29f6c4a77b6790c9495469cfa Mon Sep 17 00:00:00 2001
From: Udo Waechter <udo@maketank.net>
Date: Mon, 16 Jan 2023 18:57:58 +0100
Subject: [PATCH] coredns / cluster upgrade

---
 _sys/coredns-deployment.yaml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/_sys/coredns-deployment.yaml b/_sys/coredns-deployment.yaml
index 8134e18..e095dad 100644
--- a/_sys/coredns-deployment.yaml
+++ b/_sys/coredns-deployment.yaml
@@ -109,7 +109,7 @@ spec:
       - args:
         - -conf
         - /etc/coredns/Corefile
-        image: k8s.gcr.io/coredns/coredns:v1.8.6
+        image:  registry.k8s.io/coredns/coredns:v1.9.3
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 5
@@ -132,6 +132,16 @@ spec:
         - containerPort: 9153
           name: metrics
           protocol: TCP
+        livenessProbe:
+            httpGet:
+              path: /health
+              port: 8080
+              scheme: HTTP
+            initialDelaySeconds: 60
+            timeoutSeconds: 5
+            periodSeconds: 10
+            successThreshold: 1
+            failureThreshold: 5
         readinessProbe:
           failureThreshold: 3
           httpGet:
@@ -155,6 +165,7 @@ spec:
             drop:
             - all
           readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
         terminationMessagePath: /dev/termination-log
         terminationMessagePolicy: File
         volumeMounts: