---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: external-dns
spec:
  replicas: 1
  selector:
    matchLabels:
      app: external-dns
  template:
    metadata:
      labels:
        app: external-dns
    spec:
      serviceAccountName: external-dns
      containers:
      - name: external-dns
        image: bitnami/external-dns:latest
        args:
          - --source=service
          - --source=ingress
          - --provider=rfc2136
          - --rfc2136-host=bind-master.dns.svc.cluster.local
          - --rfc2136-port=53
          - --rfc2136-zone=hxme.net
          - --rfc2136-tsig-secret=$(RFC2136_TSIG_SECRET)
          - --rfc2136-tsig-secret-alg=hmac-sha256
          - --rfc2136-tsig-keyname=externaldns-key
          - --policy=sync
          - --registry=txt
          - --txt-owner-id=my-cluster
        env:
            - name: RFC2136_TSIG_SECRET
              valueFrom:
                secretKeyRef:
                  name: dns-secrets
                  key: externaldns-secret