---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: external-dns-k-space
spec:
  revisionHistoryLimit: 0
  selector:
    matchLabels: &selectorLabels
      app.kubernetes.io/name: external-dns
      domain: k-space.ee
  template:
    metadata:
      labels: *selectorLabels
    spec:
      serviceAccountName: external-dns
      containers:
        - name: external-dns
          image: registry.k8s.io/external-dns/external-dns:v0.14.2
          envFrom:
            - secretRef:
                name: tsig-secret
          args:
            - --events
            - --registry=txt
            - --txt-prefix=external-dns-
            - --txt-owner-id=k8s
            - --provider=rfc2136
            - --source=ingress
            - --source=service
            - --source=crd
            - --domain-filter=k-space.ee
            - --rfc2136-tsig-axfr
            - --rfc2136-host=172.20.0.2
            - --rfc2136-port=53
            - --rfc2136-zone=k-space.ee
            - --rfc2136-tsig-keyname=readwrite
            - --rfc2136-tsig-secret-alg=hmac-sha512
            - --rfc2136-tsig-secret=$(TSIG_SECRET)
            # https://github.com/kubernetes-sigs/external-dns/issues/2446