feat!: Separate out internal and external nginx controllers (#880)

bootstrap/templates/kubernetes/apps/networking/cloudflared/app/configs/config.yaml.j2

@@ -2,14 +2,13 @@
 originRequest:
   http2Origin: true
 
-# https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/configuration/ingress
 ingress:
   - hostname: "${SECRET_DOMAIN}"
-    service: https://ingress-nginx-controller.networking.svc.cluster.local:443
+    service: https://nginx-external-controller.networking.svc.cluster.local:443
     originRequest:
       originServerName: "ingress.${SECRET_DOMAIN}"
   - hostname: "*.${SECRET_DOMAIN}"
-    service: https://ingress-nginx-controller.networking.svc.cluster.local:443
+    service: https://nginx-external-controller.networking.svc.cluster.local:443
     originRequest:
       originServerName: "ingress.${SECRET_DOMAIN}"
   - service: http_status:404

bootstrap/templates/kubernetes/apps/networking/cloudflared/app/dnsendpoint.yaml.j2

@@ -4,10 +4,8 @@ kind: DNSEndpoint
 metadata:
   name: cloudflared
   namespace: networking
-  annotations:
-    external-dns.alpha.kubernetes.io/target: "ingress.${SECRET_DOMAIN}"
 spec:
   endpoints:
-    - dnsName: "ingress.${SECRET_DOMAIN}"
+    - dnsName: "external.${SECRET_DOMAIN}"
       recordType: CNAME
       targets: ["${SECRET_CLOUDFLARE_TUNNEL_ID}.cfargotunnel.com"]

bootstrap/templates/kubernetes/apps/networking/cloudflared/app/helmrelease.yaml.j2

@@ -16,7 +16,6 @@ spec:
         namespace: flux-system
   maxHistory: 2
   install:
-    createNamespace: true
     remediation:
       retries: 3
   upgrade:

bootstrap/templates/kubernetes/apps/networking/cloudflared/ks.yaml.j2

@@ -12,7 +12,7 @@ spec:
   sourceRef:
     kind: GitRepository
     name: home-kubernetes
-  wait: false # no flux ks dependents
+  wait: false
   interval: 30m
   retryInterval: 1m
   timeout: 5m