add external-dns

k8s/applications/external-dns.yaml

@@ -0,0 +1,17 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: external-dns
+spec:
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true 
+  destination:
+    name: ''
+    namespace: external-dns
+    server: 'https://kubernetes.default.svc'
+  source:
+    path: k8s/external-dns
+    repoURL: 'git@bitbucket.org:jamkazam/video-iac.git'
+    targetRevision: HEAD
+  project: default

k8s/applications/kustomization.yaml

@@ -8,4 +8,5 @@ resources:
   - argocd.yaml
   - cert-manager.yaml
   - metrics-server.yaml
-  - applications.yaml
+  - applications.yaml
+  - external-dns.yaml

k8s/external-dns/kustomization.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: external-dns
+
+resources:
+  - https://github.com/kubernetes-sigs/external-dns/kustomize?ref=v0.8.0
+
+patchesJson6902:
+  - path: overlays/configuration.yaml
+    target:
+      group: apps
+      version: v1
+      kind: Deployment
+      name: external-dns

k8s/external-dns/overlays/configuration.yaml

@@ -0,0 +1,22 @@
+---
+- op: replace
+  path: /spec/template/spec/containers/0/args
+  value:
+    - --aws-api-retries=3
+    - --domain-filter=video.jamkazam.com
+    - --interval=1m
+    - --log-format=text
+    - --log-level=warning
+    - --no-aws-evaluate-target-health
+    - --policy=sync
+    - --provider=aws
+    - --registry=txt
+    - --source=ingress
+    - --txt-prefix=fmifrruf_ # Random string for hardener TXT entries
+- op: replace
+  path: /spec/template/spec/containers/0/env
+  value:
+    - name: AWS_ACCESS_KEY_ID
+      value: "AKIA2SXEHOQFBQRGCSST"
+    - name: AWS_SECRET_ACCESS_KEY
+      value: "lj85CIIik/83V980VKEPfqlOWtutEM3s7bSqMZNH"

k8s/haproxy/kustomization.yaml

@@ -1,7 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - argocd.yaml
-  - cert-manager.yaml

k8s/metrics/metrics.yaml

@@ -1,5 +0,0 @@
-apiService:
-  create: true
-extraArgs:
-  kubelet-preferred-address-types: InternalIP
-  kubelet-insecure-tls:

k8s/monitoring/namespace.yaml

@@ -1 +0,0 @@
-#TODO