catalog/stable/external-dns/3.3.0/ix_values.yaml

144 lines
4.4 KiB
YAML

image:
repository: registry.k8s.io/external-dns/external-dns
pullPolicy: IfNotPresent
tag: v0.14.0@sha256:474077b3dfccb3021db0a6638274967d0f64ce60dd9730a6f464bee2f78b046f
externaldns:
logLevel: "info"
logFormat: "text"
interval: "1m"
provider: "inmemory"
sources:
- "service"
- "ingress"
domainFilters: []
zoneidFilters: []
cloudflareProxied: ""
registry: "txt"
policy: ""
piholeServer: ""
piholePassword: ""
triggerLoopOnEvent: "false"
txtOwnerId: ""
txtPrefix: ""
txtSuffix: ""
service:
main:
ports:
main:
protocol: http
targetPort: 7979
port: 7979
workload:
main:
podSpec:
containers:
main:
probes:
liveness:
path: "/healthz"
readiness:
path: "/healthz"
startup:
path: "/healthz"
env:
CF_API_TOKEN: ""
CF_API_KEY: ""
CF_API_EMAIL: ""
DO_TOKEN: ""
DNSIMPLE_OAUTH: ""
LINODE_TOKEN: ""
OVH_APPLICATION_KEY: ""
OVH_APPLICATION_SECRET: ""
OVH_CONSUMER_KEY: ""
SCW_ACCESS_KEY: ""
SCW_SECRET_KEY: ""
# -- Whether Role Based Access Control objects like roles and rolebindings should be created
rbac:
main:
enabled: true
primary: true
clusterWide: true
rules:
- apiGroups: [""]
resources: ["nodes"]
verbs: ["list", "watch"]
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "watch", "list"]
- apiGroups: [""]
resources: ["services", "endpoints"]
verbs: ["get", "watch", "list"]
- apiGroups: ["extensions", "networking.k8s.io"]
resources: ["ingresses"]
verbs: ["get", "watch", "list"]
- apiGroups: ["networking.istio.io"]
resources: ["gateways"]
verbs: ["get", "watch", "list"]
- apiGroups: ["networking.istio.io"]
resources: ["virtualservices"]
verbs: ["get", "watch", "list"]
- apiGroups: ["getambassador.io"]
resources: ["hosts", "ingresses"]
verbs: ["get", "watch", "list"]
- apiGroups: ["projectcontour.io"]
resources: ["httpproxies"]
verbs: ["get", "watch", "list"]
- apiGroups: ["externaldns.k8s.io"]
resources: ["dnsendpoints"]
verbs: ["get", "watch", "list"]
- apiGroups: ["externaldns.k8s.io"]
resources: ["dnsendpoints/status"]
verbs: ["*"]
- apiGroups: ["gateway.networking.k8s.io"]
resources: ["gateways"]
verbs: ["get", "watch", "list"]
- apiGroups: ["gateway.networking.k8s.io"]
resources: ["httproutes"]
verbs: ["get", "watch", "list"]
- apiGroups: [""]
resources: ["namespaces"]
verbs: ["get", "watch", "list"]
- apiGroups: ["gateway.networking.k8s.io"]
resources: ["grpcroutes"]
verbs: ["get", "watch", "list"]
- apiGroups: ["gateway.networking.k8s.io"]
resources: ["tlsroutes"]
verbs: ["get", "watch", "list"]
- apiGroups: ["gateway.networking.k8s.io"]
resources: ["tcproutes"]
verbs: ["get", "watch", "list"]
- apiGroups: ["gateway.networking.k8s.io"]
resources: ["udproutes"]
verbs: ["get", "watch", "list"]
- apiGroups: ["gloo.solo.io", "gateway.solo.io"]
resources: ["proxies", "virtualservices"]
verbs: ["get", "watch", "list"]
- apiGroups: ["configuration.konghq.com"]
resources: ["tcpingresses"]
verbs: ["get", "watch", "list"]
- apiGroups: ["traefik.containo.us", "traefik.io"]
resources: ["ingressroutes", "ingressroutetcps", "ingressrouteudps"]
verbs: ["get", "watch", "list"]
- apiGroups: ["route.openshift.io"]
resources: ["routes"]
verbs: ["get", "watch", "list"]
- apiGroups: ["zalando.org"]
resources: ["routegroups"]
verbs: ["get", "watch", "list"]
- apiGroups: ["zalando.org"]
resources: ["routegroups/status"]
verbs: ["patch", "update"]
- apiGroups: ["cis.f5.com"]
resources: ["virtualservers"]
verbs: ["get", "watch", "list"]
# -- The service account the pods will use to interact with the Kubernetes API
serviceAccount:
main:
enabled: true
primary: true
podOptions:
automountServiceAccountToken: true
portal:
open:
enabled: false