dns.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: external-dns
  
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: external-dns
rules:
- apiGroups: [""]
  resources: ["services","endpoints","pods"]
  verbs: ["get","watch","list"]
- apiGroups: ["extensions","networking.k8s.io"]
  resources: ["ingresses"] 
  verbs: ["get","watch","list"]
- apiGroups: [""]
  resources: ["nodes"]
  verbs: ["list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: external-dns-viewer
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: external-dns
subjects:
- kind: ServiceAccount
  name: external-dns
  namespace: default
# ---
# apiVersion: apps/v1
# kind: Deployment
# metadata:
#   name: external-dns
# spec:
#   strategy:
#     type: Recreate
#   selector:
#     matchLabels:
#       app: external-dns
#   template:
#     metadata:
#       labels:
#         app: external-dns
#     spec:
#       serviceAccountName: external-dns
#       containers:
#       - name: external-dns
#         image: k8s.gcr.io/external-dns/external-dns:v0.7.6
#         args:
#         - --source=service # ingress is also possible
#         - --domain-filter=slzr.cloud # (optional) limit to only example.com domains; change to match the zone created above.
#         #- --zone-id-filter=023e105f4ecef8ad9ca31a8372d0c353 # (optional) limit to a specific zone.
#         - --provider=cloudflare
#         #- --cloudflare-proxied # (optional) enable the proxy feature of Cloudflare (DDOS protection, CDN...)
#         env:
#         - name: CF_API_TOKEN
#           value: ""
#         - name: CF_API_EMAIL
#           value: "lauro.salazar@ouytlook.com"