Deploy binddns-externaldns (RFC2136 dynamic cluster) (#222)

Part of the bind rollout split. **Merge #219 (bind-operator) first** — stacked on it; diff reduces to the binddns-externaldns files once #219 merges.

## Why
The external-dns tier (replaces 3x Puppet external-dns servers): an authoritative cluster whose zones accept RFC2136 TSIG updates from external-dns.

## Changes
- `apps/base/binddns-externaldns`: authoritative `BindCluster` (3 replicas, LoadBalancer/PureLB), `BindTSIGKey` for RFC2136, namespace
- au-syd1 `binddns-externaldns` overlay

## Deploy impact
Creates the `binddns-externaldns` StatefulSet + LoadBalancer once merged.

Reviewed-on: #222
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>

This commit was merged in pull request #222.

This commit is contained in:

Ben Vincent

2026-07-03 23:09:36 +10:00

committed by

BenVincent

parent 6affc5d8f4

commit 7c9a697452

6 changed files with 103 additions and 0 deletions

									
										apps/base/ns-externaldns/kustomization.yaml
									
		+9
		
												View File
												
				@@ -0,0 +1,9 @@

				---

				apiVersion: kustomize.config.k8s.io/v1beta1

				kind: Kustomization

				resources:

				  - namespace.yaml

				  - tsigkey.yaml

				  - cluster.yaml

				  - zones.yaml