[feature] Update CoreDNS manifests (#9977)

roles/kubernetes-apps/ansible/templates/coredns-clusterrole.yml.j2

@@ -7,7 +7,7 @@ metadata:
     addonmanager.kubernetes.io/mode: Reconcile
   name: system:coredns
 rules:
-  - apiGroups:
+- apiGroups:
   - ""
   resources:
   - endpoints
@@ -17,13 +17,13 @@ rules:
   verbs:
   - list
   - watch
-  - apiGroups:
+- apiGroups:
   - ""
   resources:
   - nodes
   verbs:
   - get
-  - apiGroups:
+- apiGroups:
   - discovery.k8s.io
   resources:
   - endpointslices

roles/kubernetes-apps/ansible/templates/coredns-deployment.yml.j2

@@ -22,9 +22,11 @@ spec:
       labels:
         k8s-app: kube-dns{{ coredns_ordinal_suffix }}
       annotations:
-        seccomp.security.alpha.kubernetes.io/pod: 'runtime/default'
         createdby: 'kubespray'
     spec:
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       nodeSelector:
         {{ coredns_deployment_nodeselector }}
       priorityClassName: system-cluster-critical

roles/kubernetes-apps/ansible/templates/coredns-sa.yml.j2

@@ -5,4 +5,5 @@ metadata:
   name: coredns
   namespace: kube-system
   labels:
+    kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile