external-dns-unifi:
  image:
    repository: registry.k8s.io/external-dns/external-dns
    tag: v0.21.0@sha256:f53faaf71cb270d1ca9dce6ea0c94bfebf1a18696263487f0fbc74b9bf2bd7ff
  fullnameOverride: external-dns-unifi
  resources:
    requests:
      cpu: 1m
      memory: 80Mi
  serviceMonitor:
    enabled: true
  interval: 360m
  sources:
    - crd
    - gateway-httproute
    - gateway-tlsroute
  policy: sync
  txtOwnerId: default
  txtPrefix: k8s.
  domainFilters: ["alexlebens.net"]
  excludeDomains: ["alexlebens.dev"]
  provider:
    name: webhook
    webhook:
      image:
        repository: ghcr.io/kashalls/external-dns-unifi-webhook
        tag: v0.8.2@sha256:7f0ddbbc83a36a2a9d762e25eef9cafcb3adf0493068a27d72ae71087eafe6f0
      env:
        - name: UNIFI_HOST
          value: https://192.168.1.1
        - name: UNIFI_API_KEY
          valueFrom:
            secretKeyRef:
              name: external-dns-unifi-secret
              key: api-key
        - name: LOG_LEVEL
          value: info
      livenessProbe:
        httpGet:
          path: /healthz
          port: http-webhook
      readinessProbe:
        httpGet:
          path: /readyz
          port: http-webhook
  extraArgs:
    - --ignore-ingress-tls-spec