[ci skip] platform: add ndots=2 dns_config to all deployment pod specs

Prevents Terraform from reverting the Kyverno inject-ndots mutation
on every apply. 23 pod specs across 19 platform module files.

stacks/platform/modules/authentik/pgbouncer.tf

@@ -105,6 +105,12 @@ resource "kubernetes_deployment" "pgbouncer" {
             secret_name = kubernetes_secret.pgbouncer_auth.metadata[0].name
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/cloudflared/main.tf

@@ -61,6 +61,12 @@ resource "kubernetes_deployment" "cloudflared" {
             container_port = 14333
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/crowdsec/main.tf

@@ -160,6 +160,12 @@ resource "kubernetes_deployment" "crowdsec-web" {
             protocol       = "TCP"
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/dbaas/main.tf

@@ -178,6 +178,12 @@ resource "kubernetes_deployment" "mysql" {
           }
 
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }
@@ -427,6 +433,12 @@ resource "kubernetes_deployment" "phpmyadmin" {
             value = "300M"
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }
@@ -779,6 +791,12 @@ resource "kubernetes_deployment" "postgres" {
         #     name = "mycnf"
         #   }
         # }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }
@@ -858,6 +876,12 @@ resource "kubernetes_deployment" "pgadmin" {
             server = var.nfs_server
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/headscale/main.tf

@@ -164,6 +164,12 @@ resource "kubernetes_deployment" "headscale" {
             value = "kekekekeke"
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/k8s-portal/main.tf

@@ -74,6 +74,12 @@ resource "kubernetes_deployment" "k8s_portal" {
             name = kubernetes_config_map.k8s_portal_config.metadata[0].name
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/mailserver/main.tf

@@ -413,6 +413,12 @@ resource "kubernetes_deployment" "mailserver" {
           name = "var-run-dovecot"
           empty_dir {}
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/mailserver/roundcubemail.tf

@@ -159,6 +159,12 @@ resource "kubernetes_deployment" "roundcubemail" {
             server = var.nfs_server
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/monitoring/idrac.tf

@@ -80,6 +80,12 @@ resource "kubernetes_deployment" "idrac-redfish" {
             name = "redfish-exporter-config"
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/monitoring/loki.tf

@@ -99,6 +99,12 @@ resource "kubernetes_daemon_set_v1" "sysctl-inotify" {
         toleration {
           operator = "Exists"
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/monitoring/pve_exporter.tf

@@ -67,6 +67,12 @@ resource "kubernetes_deployment" "pve_exporter" {
             }
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/monitoring/snmp_exporter.tf

@@ -70,6 +70,12 @@ resource "kubernetes_deployment" "snmp-exporter" {
             name = "snmp-exporter-yaml"
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/nvidia/main.tf

@@ -122,6 +122,12 @@ resource "kubernetes_deployment" "nvidia-exporter" {
             }
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }
@@ -628,6 +634,12 @@ resource "kubernetes_daemonset" "gpu_pod_exporter" {
             type = "Directory"
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/redis/main.tf

@@ -79,6 +79,12 @@ resource "kubernetes_deployment" "redis" {
             server = var.nfs_server
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/technitium/main.tf

@@ -173,6 +173,12 @@ resource "kubernetes_deployment" "technitium" {
             secret_name = var.tls_secret_name
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/uptime-kuma/main.tf

@@ -83,6 +83,12 @@ resource "kubernetes_deployment" "uptime-kuma" {
             path   = "/mnt/main/uptime-kuma"
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/vaultwarden/main.tf

@@ -113,6 +113,12 @@ resource "kubernetes_deployment" "vaultwarden" {
             server = var.nfs_server
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/wireguard/main.tf

@@ -175,6 +175,12 @@ resource "kubernetes_deployment" "wireguard" {
             name = "wg0-conf"
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }

stacks/platform/modules/xray/main.tf

@@ -128,6 +128,12 @@ resource "kubernetes_deployment" "xray" {
             name = "xray-config"
           }
         }
+        dns_config {
+          option {
+            name  = "ndots"
+            value = "2"
+          }
+        }
       }
     }
   }