--- apiVersion: externaldns.k8s.io/v1alpha1 kind: DNSEndpoint metadata: name: cloudflared namespace: networking annotations: external-dns.alpha.kubernetes.io/target: "ipv4.${SECRET_DOAMIN}" spec: endpoints: - dnsName: "ipv4.${SECRET_DOAMIN}" recordType: CNAME targets: ["${SECRET_CLOUDFLARE_TUNNEL_ID}.cfargotunnel.com"]