CoreDNS pods are healthy but one namespace still fails resolution

A hardened namespace loses name resolution after a node-local DNS optimization or add-on change, while the rest of the cluster remains healthy.