gitea-bot
9163bdf6ca
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. ### Details - **Trigger**: `pull_request` by `@alexlebens` - **Commit**: `c3e134f` (on `c3e134ffba591e2752db6fe0a1721ea0de524b87`) - **Charts Updated**: `eraser,excalidraw,external-dns,external-secrets` ### Update Details (2026-03-27 00:30 UTC) - **Trigger**: `pull_request` by `@alexlebens` - **Commit**: `f09911d` (on `f09911d84f8bf423991c1d2d52318926b66eef76`) - **Charts Updated**: `external-dns` Reviewed-on: #5173 Co-authored-by: gitea-bot <gitea-bot@alexlebens.net> Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
123 lines
3.6 KiB
YAML
123 lines
3.6 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: external-dns-unifi
|
|
namespace: external-dns
|
|
labels:
|
|
helm.sh/chart: external-dns-unifi-1.20.0
|
|
app.kubernetes.io/name: external-dns-unifi
|
|
app.kubernetes.io/instance: external-dns
|
|
app.kubernetes.io/version: "0.20.0"
|
|
app.kubernetes.io/managed-by: Helm
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: external-dns-unifi
|
|
app.kubernetes.io/instance: external-dns
|
|
strategy:
|
|
type: Recreate
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: external-dns-unifi
|
|
app.kubernetes.io/instance: external-dns
|
|
spec:
|
|
automountServiceAccountToken: true
|
|
serviceAccountName: external-dns-unifi
|
|
securityContext:
|
|
fsGroup: 65534
|
|
runAsNonRoot: true
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
containers:
|
|
- name: external-dns
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
privileged: false
|
|
readOnlyRootFilesystem: true
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
image: registry.k8s.io/external-dns/external-dns:v0.20.0
|
|
imagePullPolicy: IfNotPresent
|
|
args:
|
|
- --log-level=info
|
|
- --log-format=text
|
|
- --interval=360m
|
|
- --source=crd
|
|
- --source=gateway-httproute
|
|
- --source=gateway-tlsroute
|
|
- --policy=sync
|
|
- --registry=txt
|
|
- --txt-owner-id=default
|
|
- --txt-prefix=k8s.
|
|
- --domain-filter=alexlebens.net
|
|
- --exclude-domains=alexlebens.dev
|
|
- --provider=webhook
|
|
- --ignore-ingress-tls-spec
|
|
ports:
|
|
- name: http
|
|
protocol: TCP
|
|
containerPort: 7979
|
|
livenessProbe:
|
|
failureThreshold: 2
|
|
httpGet:
|
|
path: /healthz
|
|
port: http
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 5
|
|
readinessProbe:
|
|
failureThreshold: 6
|
|
httpGet:
|
|
path: /healthz
|
|
port: http
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 5
|
|
resources:
|
|
requests:
|
|
cpu: 1m
|
|
memory: 80Mi
|
|
- name: webhook
|
|
image: ghcr.io/kashalls/external-dns-unifi-webhook:v0.8.2@sha256:7f0ddbbc83a36a2a9d762e25eef9cafcb3adf0493068a27d72ae71087eafe6f0
|
|
imagePullPolicy: IfNotPresent
|
|
env:
|
|
- name: UNIFI_HOST
|
|
value: https://192.168.1.1
|
|
- name: UNIFI_API_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: api-key
|
|
name: external-dns-unifi-secret
|
|
- name: LOG_LEVEL
|
|
value: info
|
|
ports:
|
|
- name: http-webhook
|
|
protocol: TCP
|
|
containerPort: 8080
|
|
livenessProbe:
|
|
failureThreshold: 2
|
|
httpGet:
|
|
path: /healthz
|
|
port: http-webhook
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 5
|
|
readinessProbe:
|
|
failureThreshold: 6
|
|
httpGet:
|
|
path: /readyz
|
|
port: http-webhook
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 5
|