-
Notifications
You must be signed in to change notification settings - Fork 14
/
externaldns.yaml
67 lines (67 loc) · 1.53 KB
/
externaldns.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: external-dns
spec:
strategy:
type: Recreate
template:
metadata:
labels:
app: external-dns
spec:
containers:
- name: external-dns
image: registry.opensource.zalan.do/teapot/external-dns:v0.4.8
args:
- --source=service # ingress is also possible
- --source=ingress # ingress is also possible
- --provider=cloudflare
- --cloudflare-proxied # (optional) enable the proxy feature of Cloudflare (DDOS protection, CDN...)
- --log-level=debug
env:
- name: CF_API_KEY
value: "ENTER_CF_API_KEY"
- name: CF_API_EMAIL
value: "ENTER_CF_EMAIL"
serviceAccountName: external-dns
---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
app: external-dns
name: external-dns
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole # you might need this https://coreos.com/operators/prometheus/docs/latest/troubleshooting.html
metadata:
labels:
app: external-dns
name: external-dns
rules:
- apiGroups:
- ""
- extensions
resources:
- ingresses
- services
verbs:
- get
- list
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app: external-dns
name: external-dns
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: external-dns
subjects:
- kind: ServiceAccount
name: external-dns
namespace: default