[feature] Update CoreDNS manifests (#9977)

roles/kubernetes-apps/ansible/templates/coredns-clusterrole.yml.j2

@@ -7,26 +7,26 @@ metadata:
     addonmanager.kubernetes.io/mode: Reconcile
   name: system:coredns
 rules:
-  - apiGroups:
+- apiGroups:
-      - ""
+  - ""
-    resources:
+  resources:
-      - endpoints
+  - endpoints
-      - services
+  - services
-      - pods
+  - pods
-      - namespaces
+  - namespaces
-    verbs:
+  verbs:
-      - list
+  - list
-      - watch
+  - watch
-  - apiGroups:
+- apiGroups:
-      - ""
+  - ""
-    resources:
+  resources:
-      - nodes
+  - nodes
-    verbs:
+  verbs:
-      - get
+  - get
-  - apiGroups:
+- apiGroups:
-      - discovery.k8s.io
+  - discovery.k8s.io
-    resources:
+  resources:
-      - endpointslices
+  - endpointslices
-    verbs:
+  verbs:
-      - list
+  - list
-      - watch
+  - watch

roles/kubernetes-apps/ansible/templates/coredns-deployment.yml.j2

@@ -22,9 +22,11 @@ spec:
       labels:
         k8s-app: kube-dns{{ coredns_ordinal_suffix }}
       annotations:
-        seccomp.security.alpha.kubernetes.io/pod: 'runtime/default'
         createdby: 'kubespray'
     spec:
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       nodeSelector:
         {{ coredns_deployment_nodeselector }}
       priorityClassName: system-cluster-critical

roles/kubernetes-apps/ansible/templates/coredns-sa.yml.j2

@@ -5,4 +5,5 @@ metadata:
   name: coredns
   namespace: kube-system
   labels:
+    kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile