external-dns unifi

2024-11-07 05:21:30 +00:00
1 parent ec5e6d468f
commit a38a41e59f
@@ -0,0 +1,48 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: &app external-dns-cloudflared
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: external-dns
+      version: 1.15.0
+      sourceRef:
+        kind: HelmRepository
+        name: external-dns
+        namespace: flux-system
+  install:
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    crds: CreateReplace
+    remediation:
+      strategy: rollback
+      retries: 3
+  values:
+    fullnameOverride: *app
+    provider: cloudflare
+    env:
+      - name: CF_API_TOKEN
+        valueFrom:
+          secretKeyRef:
+            name: external-dns-secret-cloudflared
+            key: api-token
+    extraArgs:
+      - --ingress-class=external
+      - --cloudflare-proxied
+      - --crd-source-apiversion=externaldns.k8s.io/v1alpha1
+      - --crd-source-kind=DNSEndpoint
+    policy: sync
+    sources: ["crd", "ingress"]
+    txtPrefix: k8s.
+    txtOwnerId: default
+    domainFilters: ["${SECRET_DOMAIN}"]
+    serviceMonitor:
+      enabled: true
+    podAnnotations:
+      secret.reloader.stakater.com/reload: external-dns-secret-cloudflared
@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./secret.sops.yaml
+  - ./helmrelease.yaml
@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: external-dns-secret-cloudflared
+stringData:
+    api-token: ENC[AES256_GCM,data:ChZtqRA8VGVXyWVzuRJ50WSYBpn2H0+1Bj5Bvwf+En8798ZAKsyRRg==,iv:A6jtZ5EBkXlfLUyQyY6F9g1V8U15HmtrL/EqgoTJYaI=,tag:Yq7PGYPFRZogKwmXAtN9ow==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4VEg5Q1ZXYm03RW1PWFdL
+            eEZOUzY3a2Q4WUU4VGlUNWJMYUFGMXhuQ2pVCldZd1c0R3VvbEZaNnhhVDg2K20z
+            SHJSYndHQ3pCRmtZWkxyYm8vSkpnMXMKLS0tIFRUdFpveW1zNGpOVXJBWGtCU09x
+            YVhxZ1pnRUVhc2JRSDB4OTJSSWRBa0kKrDawXKhudgzVEohCyWMvxVdSN0x6K0VJ
+            PJwFqLSWb5aheWZ9+ZFJXqpnJIXt9uX73R51GIQe2iugnRma/BrHeg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-11-07T05:12:53Z"
+    mac: ENC[AES256_GCM,data:6x4QhGtYvqHspWFxwNGYGSbyLIpYeEST4WsY/CNZ5cOG0rn38GChqd4uSKehzrFHoj66A9DgOoK3LeUP43ttsSQ4QJNCKEt1+cRjGhGMQiv0QZEKIBlkcIIfUZtYfP7F1ty/eO+bvNH/DxD6sD6SsCoTXCF4zXke3UKehsa9ppc=,iv:5hauKyNe46bHI7yikiVpn5jew6BRrXI5lqCGx12pVwU=,tag:itZ/gjPHw9Fl/LmTPwIHJg==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.1