deploy nginx ingress to internal cluster

cluster/external-dns/overlays/external/cloudflare.yaml

@@ -17,7 +17,7 @@ spec:
       serviceAccountName: external-dns
       containers:
         - name: cloudflare
-          image: registry.k8s.io/external-dns/external-dns:v0.15.0
+          image: registry.k8s.io/external-dns/external-dns:v0.18.0
           args:
 #            - --source=service # ingress is also possible
             - --source=ingress
@@ -27,7 +27,6 @@ spec:
 #            - --cloudflare-proxied # (optional) enable the proxy feature of Cloudflare (DDOS protection, CDN...)
             - --cloudflare-dns-records-per-page=5000 # (optional) configure how many DNS records to fetch per request
             - --policy=sync # or upsert-only
-
           env:
             - name: CF_API_TOKEN
               valueFrom:

cluster/external-dns/overlays/external/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+commonAnnotations:
+  argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+
+resources:
+- ../../base

cluster/external-dns/overlays/internal/configmap.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  creationTimestamp: null
+  name: krb5.conf

cluster/external-dns/overlays/internal/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+commonAnnotations:
+  argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+
+resources:
+- ../../base

cluster/external-dns/overlays/internal/rfc2136.yaml

@@ -0,0 +1,40 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: external-dns
+spec:
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: external-dns
+  template:
+    metadata:
+      labels:
+        app: external-dns
+    spec:
+      serviceAccountName: external-dns
+      containers:
+      - name: rfc2136
+        image: registry.k8s.io/external-dns/external-dns:v0.18.0
+        args:
+        - --registry=txt
+        - --txt-prefix=external-dns-
+        - --txt-owner-id=k8s
+        - --provider=rfc2136
+        - --rfc2136-host=infra01.int.mk-labs.cloud
+        - --rfc2136-port=53
+        - --rfc2136-zone=int.mk-labs.cloud
+        - --rfc2136-tsig-secret=96Ah/a2g0/nLeFGK+d/0tzQcccf9hCEIy34PoXX2Qg8=
+        - --rfc2136-tsig-secret-alg=hmac-sha256
+        - --rfc2136-tsig-keyname=externaldns-key
+        - --rfc2136-tsig-axfr
+        - --source=ingress
+        - --domain-filter=int.mk-labs.cloud
+        env:
+          - name: FREEIPA_API_TOKEN
+            valueFrom:
+              secretKeyRef:
+                name: rfc2136-api-token
+                key: api-token