From 4f0b486385fb680e6aa84f40b49b5608f01cd8ca Mon Sep 17 00:00:00 2001
From: Joseph Hanson <joe@veri.dev>
Date: Fri, 12 Jan 2024 09:56:15 -0600
Subject: [PATCH] Configure for cloudflare using dnsendpoint.

---
 .../external-dns/app/hsn-dev/helmrelease.yaml | 41 +++++++++++--------
 1 file changed, 23 insertions(+), 18 deletions(-)

diff --git a/kubernetes/apps/network/external-dns/app/hsn-dev/helmrelease.yaml b/kubernetes/apps/network/external-dns/app/hsn-dev/helmrelease.yaml
index ecbcfc30..423cf4c5 100644
--- a/kubernetes/apps/network/external-dns/app/hsn-dev/helmrelease.yaml
+++ b/kubernetes/apps/network/external-dns/app/hsn-dev/helmrelease.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: external-dns
-      version: 1.13.1
+      version: 1.14.1
       sourceRef:
         kind: HelmRepository
         name: kubernetes-sigs-external-dns
@@ -20,9 +20,6 @@ spec:
   values:
     fullnameOverride: *name
 
-    domainFilters:
-      - hsn.dev
-
     env:
       - name: CF_API_TOKEN
         valueFrom:
@@ -30,16 +27,33 @@ spec:
             name: externaldns-hsn-dev-secrets
             key: cloudflare_api_token
 
+    domainFilters:
+      - hsn.dev
+    policy: sync
+    provider: cloudflare
+    sources:
+      - ingress
+      - crd
+    txtPrefix: "k8s."
+
     extraArgs:
-      - --crd-source-apiversion=externaldns.k8s.io/v1alpha1
-      - --ingress-class=hsn-nginx
+      args:
+        - --cloudflare-proxied
+        - --crd-source-apiversion=externaldns.k8s.io/v1alpha1
+        - --crd-source-kind=DNSEndpoint
+        - --ingress-class=external
+        - --interval=1m
+        - --log-format=text
+        - --log-level=info
+        - --registry=txt
+        - --txt-owner-id=default
+
+    serviceMonitor:
+      enabled: true
 
     podAnnotations:
       secret.reloader.stakater.com/reload: externaldns-hsn-dev-secrets
 
-    policy: sync
-    provider: cloudflare
-
     resources:
       requests:
         cpu: 5m
@@ -47,15 +61,6 @@ spec:
       limits:
         memory: 100Mi
 
-    serviceMonitor:
-      enabled: true
-
-    sources:
-      - ingress
-      - crd
-
-    txtPrefix: "k8s."
-
   postRenderers:
     - kustomize:
         patches: