--- apiVersion: externaldns.k8s.io/v1alpha1 kind: DNSEndpoint metadata: name: cloudflared spec: endpoints: - dnsName: "external.${SECRET_DOMAIN}" recordType: CNAME targets: ["${SECRET_CLOUDFLARE_TUNNEL_ID}.cfargotunnel.com"]