feat(helm): update chart coredns to 1.37.0

[renovate]

This PR contains the following updates:

Package	Update	Change	OpenSSF
coredns (source)	minor	1.36.1 -> 1.37.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

coredns/helm (coredns)

v1.37.0

Compare Source

CoreDNS is a DNS server that chains plugins and provides Kubernetes DNS Services

v1.36.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/kube-system/coredns/app Kustomization: flux-system/coredns HelmRelease: kube-system/coredns

+++ kubernetes/apps/kube-system/coredns/app Kustomization: flux-system/coredns HelmRelease: kube-system/coredns

@@ -13,13 +13,13 @@

     spec:
       chart: coredns
       sourceRef:
         kind: HelmRepository
         name: coredns
         namespace: flux-system
-      version: 1.36.1
+      version: 1.37.0
   install:
     remediation:
       retries: 3
   interval: 30m
   maxHistory: 2
   uninstall:

[github-actions]

--- HelmRelease: kube-system/coredns Deployment: kube-system/coredns

+++ HelmRelease: kube-system/coredns Deployment: kube-system/coredns

@@ -60,13 +60,13 @@

         operator: Exists
       - effect: NoSchedule
         key: node-role.kubernetes.io/master
         operator: Exists
       containers:
       - name: coredns
-        image: coredns/coredns:1.11.3
+        image: coredns/coredns:1.11.4
         imagePullPolicy: IfNotPresent
         args:
         - -conf
         - /etc/coredns/Corefile
         volumeMounts:
         - name: config-volume
@@ -106,15 +106,19 @@

           initialDelaySeconds: 30
           periodSeconds: 10
           timeoutSeconds: 5
           successThreshold: 1
           failureThreshold: 5
         securityContext:
+          allowPrivilegeEscalation: false
           capabilities:
             add:
             - NET_BIND_SERVICE
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
       volumes:
       - name: config-volume
         configMap:
           name: coredns
           items:
           - key: Corefile