cluster

commit 2d0530e4084d8d98110c26890aaf941722565101
parent 2b16365ca14f8e7bacff91239b3ca2e87a0660f7
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sun,  3 Aug 2025 19:26:41 +0200

Install externaldns

Diffstat:
A
apps/talos_cluster/externaldns/kustomization.yaml
 | 
6
++++++
A
apps/talos_cluster/externaldns/release.yaml
 | 
45
+++++++++++++++++++++++++++++++++++++++++++++
A
apps/talos_cluster/externaldns/repository.yaml
 | 
8
++++++++
M
apps/talos_cluster/kustomization.yaml
 | 
1
+

4 files changed, 60 insertions(+), 0 deletions(-)
diff --git a/apps/talos_cluster/externaldns/kustomization.yaml b/apps/talos_cluster/externaldns/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+    - repository.yaml
+    - release.yaml
diff --git a/apps/talos_cluster/externaldns/release.yaml b/apps/talos_cluster/externaldns/release.yaml
@@ -0,0 +1,45 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+    name: external-dns
+    namespace: kube-system
+spec:
+    releaseName: external-dns
+    chart:
+        spec:
+            chart: external-dns
+            sourceRef:
+                kind: HelmRepository
+                name: external-dns
+    interval: 50m
+    values:
+        logLevel: debug
+        extraArgs:
+            - --cloudflare-dns-records-per-page=5000
+            - --exclude-target-net=10.0.0.0/8
+        provider:
+            name: cloudflare
+        env:
+            - name: CF_API_TOKEN
+              valueFrom:
+                secretKeyRef:
+                    name: cloudflare-api-token-secret
+                    key: api-token
+        sources:
+            - gateway-httproute
+            - gateway-grpcroute
+            - gateway-tcproute
+            - gateway-tlsroute
+            - gateway-udproute
+            #- service
+        rbac:
+            additionalPermissions:
+                - apiGroups: [""]
+                  resources: ["namespaces"]
+                  verbs: ["get", "watch", "list"]
+                - apiGroups: ["gateway.networking.k8s.io"]
+                  resources: ["gateways", "httproutes", "grpcroutes", "tlsroutes", "tcproutes", "udproutes"]
+                  verbs: ["get", "watch", "list"]
+                - apiGroups: [""]
+                  resources: ["services"]
+                  verbs: ["get", "watch", "list"]
diff --git a/apps/talos_cluster/externaldns/repository.yaml b/apps/talos_cluster/externaldns/repository.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+    name: external-dns
+    namespace: kube-system
+spec:
+    interval: 50m
+    url: https://kubernetes-sigs.github.io/external-dns/
diff --git a/apps/talos_cluster/kustomization.yaml b/apps/talos_cluster/kustomization.yaml
@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
     - ./envoy-gateway
     - ./monitoring-stack
+    - ./externaldns
     - ./authentik