Automated Manifest Update (#5173)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

### Details
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `c3e134f` (on `c3e134ffba591e2752db6fe0a1721ea0de524b87`)
- **Charts Updated**: `eraser,excalidraw,external-dns,external-secrets`

### Update Details (2026-03-27 00:30 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `f09911d` (on `f09911d84f8bf423991c1d2d52318926b66eef76`)
- **Charts Updated**: `external-dns`

Reviewed-on: #5173
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/external-dns/ClusterRole-external-dns-unifi.yaml

@@ -9,9 +9,6 @@ metadata:
     app.kubernetes.io/version: "0.20.0"
     app.kubernetes.io/managed-by: Helm
 rules:
-  - apiGroups: ["extensions", "networking.k8s.io"]
-    resources: ["ingresses"]
-    verbs: ["get", "watch", "list"]
   - apiGroups: ["externaldns.k8s.io"]
     resources: ["dnsendpoints"]
     verbs: ["get", "watch", "list"]

clusters/cl01tl/manifests/external-dns/Deployment-external-dns-unifi.yaml

@@ -47,8 +47,7 @@ spec:
           args:
             - --log-level=info
             - --log-format=text
-            - --interval=1m
-            - --source=ingress
+            - --interval=360m
             - --source=crd
             - --source=gateway-httproute
             - --source=gateway-tlsroute
@@ -57,6 +56,7 @@ spec:
             - --txt-owner-id=default
             - --txt-prefix=k8s.
             - --domain-filter=alexlebens.net
+            - --exclude-domains=alexlebens.dev
             - --provider=webhook
             - --ignore-ingress-tls-spec
           ports:
@@ -81,8 +81,12 @@ spec:
             periodSeconds: 10
             successThreshold: 1
             timeoutSeconds: 5
+          resources:
+            requests:
+              cpu: 1m
+              memory: 80Mi
         - name: webhook
-          image: ghcr.io/kashalls/external-dns-unifi-webhook:v0.8.2
+          image: ghcr.io/kashalls/external-dns-unifi-webhook:v0.8.2@sha256:7f0ddbbc83a36a2a9d762e25eef9cafcb3adf0493068a27d72ae71087eafe6f0
           imagePullPolicy: IfNotPresent
           env:
             - name: UNIFI_HOST
@@ -93,7 +97,7 @@ spec:
                   key: api-key
                   name: external-dns-unifi-secret
             - name: LOG_LEVEL
-              value: debug
+              value: info
           ports:
             - name: http-webhook
               protocol: TCP
@@ -112,7 +116,7 @@ spec:
             httpGet:
               path: /readyz
               port: http-webhook
-            initialDelaySeconds: 10
+            initialDelaySeconds: 5
             periodSeconds: 10
             successThreshold: 1
             timeoutSeconds: 5

clusters/cl01tl/manifests/external-dns/ExternalSecret-external-dns-unifi-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: api-key
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /unifi/auth/cl01tl
-        metadataPolicy: None
         property: api-key