# Production-specific values for unbound DNS resolver
# Overrides for the production environment

# Use official image for production
image:
  repository: "mvance/unbound"
  tag: "latest"
  pullPolicy: "IfNotPresent"

# Production resource settings (higher limits for reliability)
resources:
  requests:
    cpu: "200m"
    memory: "256Mi"
  limits:
    cpu: "500m"
    memory: "512Mi"

# Production-specific settings
replicaCount: 2

# Production annotations
podAnnotations:
  environment: "production"
  critical: "true"

# Anti-affinity for high availability in production
affinity:
  podAntiAffinity:
    preferredDuringSchedulingIgnoredDuringExecution:
    - weight: 100
      podAffinityTerm:
        labelSelector:
          matchExpressions:
          - key: app.kubernetes.io/name
            operator: In
            values:
            - unbound
        topologyKey: "kubernetes.io/hostname"

# Production probe settings (more conservative)
probes:
  readiness:
    initialDelaySeconds: 20
    periodSeconds: 30
    command: "sh -c 'echo \"\" | nc -w 3 127.0.0.1 53 || exit 1'"
  liveness:
    initialDelaySeconds: 60
    periodSeconds: 60
    command: "sh -c 'echo \"\" | nc -w 3 127.0.0.1 53 || exit 1'"