home-infra/clusters/_base/addons/external-dns/helm-release.yaml at 277c4368d9341008a0b8fa3cf52038a2bbae941c · kid/home-infra · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: external-dns
  namespace: flux-system
spec:
  releaseName: external-dns
  targetNamespace: external-dns
  interval: 30m
  chart:
    spec:
      chart: external-dns
      version: 1.16.0
      sourceRef:
        kind: HelmRepository
        name: external-dns
  values:
    fullnameOverride: external-dns-mikrotik

    logLevel: debug
    logFormat: text
    interval: 5m
    sources:
      - crd
      - service
      - gateway-httproute
      - gateway-tlsroute
      - gateway-tcproute
      - gateway-udproute
      - gateway-grpcroute
    registry: txt
    txtOwnerId: default
    txtPrefix: k8s.
    domainFilters: ["${APPS_DOMAIN}"]
    excludeDomains: []
    policy: sync
    triggerLoopOnEvent: true

    provider:
      name: webhook
      webhook:
        image:
          repository: ghcr.io/mirceanton/external-dns-provider-mikrotik
          tag: v1.4.3@sha256:d4574b84f5ce6577ae150c972202ca1488d0e934b421524472e571f0a421adfb
          pullPolicy: IfNotPresent
        env:
          - name: LOG_FORMAT
            value: text
          - name: LOG_LEVEL
            value: info
          - name: MIKROTIK_BASEURL
            valueFrom:
              secretKeyRef:
                name: mikrotik-credentials
                key: MIKROTIK_BASEURL
          - name: MIKROTIK_USERNAME
            valueFrom:
              secretKeyRef:
                name: mikrotik-credentials
                key: MIKROTIK_USERNAME
          - name: MIKROTIK_PASSWORD
            valueFrom:
              secretKeyRef:
                name: mikrotik-credentials
                key: MIKROTIK_PASSWORD
          - name: MIKROTIK_SKIP_TLS_VERIFY
            valueFrom:
              secretKeyRef:
                name: mikrotik-credentials
                key: MIKROTIK_SKIP_TLS_VERIFY

        livenessProbe:
          httpGet:
            path: /healthz
            port: http-webhook
          initialDelaySeconds: 10
          timeoutSeconds: 5
        readinessProbe:
          httpGet:
            path: /readyz
            port: http-webhook
          initialDelaySeconds: 10
          timeoutSeconds: 5

    extraArgs:
      - --ignore-ingress-tls-spec
      - --managed-record-types=A
      - --managed-record-types=AAAA
      - --managed-record-types=CNAME
      - --managed-record-types=TXT
      - --managed-record-types=MX
      - --managed-record-types=SRV
      - --managed-record-types=NS