Initial commit 🚀

2024-11-02 01:16:28 +00:00
1 parent e55ae1a1f5
commit 5a14609b2d
@@ -0,0 +1,48 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: &app external-dns
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: external-dns
+      version: 1.15.0
+      sourceRef:
+        kind: HelmRepository
+        name: external-dns
+        namespace: flux-system
+  install:
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    crds: CreateReplace
+    remediation:
+      strategy: rollback
+      retries: 3
+  values:
+    fullnameOverride: *app
+    provider: cloudflare
+    env:
+      - name: CF_API_TOKEN
+        valueFrom:
+          secretKeyRef:
+            name: external-dns-secret
+            key: api-token
+    extraArgs:
+      - --ingress-class=external
+      - --cloudflare-proxied
+      - --crd-source-apiversion=externaldns.k8s.io/v1alpha1
+      - --crd-source-kind=DNSEndpoint
+    policy: sync
+    sources: ["crd", "ingress"]
+    txtPrefix: k8s.
+    txtOwnerId: default
+    domainFilters: ["${SECRET_DOMAIN}"]
+    serviceMonitor:
+      enabled: true
+    podAnnotations:
+      secret.reloader.stakater.com/reload: external-dns-secret
@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./secret.sops.yaml
+  - ./helmrelease.yaml
@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: external-dns-secret
+stringData:
+    api-token: ENC[AES256_GCM,data:VWtSgof9NPhzeDYvywbl7X3yhA10Zj9t2hW8yRLIzAmFxBzs7LBnjw==,iv:kVIjOFom7E3NLWXKQXfjnNZ0ipT2WxfV6pzg3Pz4pYA=,tag:D+t1BDmXWD3Go+opZd0vUA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWYVlvVHFXODNSb2t1TjZ5
+            eTFzeUNBVU5ZM2lVQzlYSkVQQ0xKNStiaHhZCmFLOVlMejRXNy9JNmMyZVV2Y28z
+            NisvWmNuWWNMb0JUTDJPNEFjY2FobjAKLS0tIE1YZTZ1ajBFVWtNRHpmN3BqU1FS
+            V3NGNlpxV3JiSDNLWThScmYweGo0UEEK2NWQE0YvB2Inx+ZPIv5ZmeaM0MxhAX1h
+            6KXPJFEsVdwKKjHmaF7/Je5206knroaaNNMBYDMahlx8J3LSxZpXxg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-11-02T01:13:55Z"
+    mac: ENC[AES256_GCM,data:gU37e6+B5wpSyCx8hVZrJdbSXMPUhTzYiKIo4a6vLlL3dMrgc9jdYkon9BN+RnO2HBtGT4S4e8m+LB8/1DI9+XvcswGtvlJ+vXZwmswZvXvV83dE9Agn+szBkOkFzYiBAH2Z4xMADxrRBEKOvBBpm/+GA5GH+0jeBAEzmWcS34Y=,iv:a3fzodgTeMOAIKrxTpzl1Gdo6DQVBIr+50UL6X50k88=,tag:2SLO2w+f80BkDtbQuUx4XQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.1
@@ -0,0 +1,19 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app external-dns
+  namespace: flux-system
+spec:
+  targetNamespace: network
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  path: ./kubernetes/apps/network/external-dns/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  wait: true
+  interval: 30m
+  timeout: 5m