--- apiVersion: externaldns.k8s.io/v1alpha1 kind: DNSEndpoint metadata: name: cloudflared namespace: networking annotations: external-dns.alpha.kubernetes.io/target: "ipv4.${SECRET_DOMAIN}" spec: endpoints: - dnsName: "ipv4.${SECRET_DOMAIN}" recordType: CNAME targets: ["${SECRET_CLOUDFLARE_TUNNEL_ID}.cfargotunnel.com"]