Pin binddns-auth service to a dedicated IP

DNS (UDP/53) can't route via a shared gateway yet (no UDPRoute), so the
service needs its own LoadBalancer address instead of a pool-assigned one.

- pin purelb.io/addresses 198.18.200.6 (common pool)

apps/base/binddns-auth/cluster.yaml

@@ -5,7 +5,7 @@ apiVersion: bind.unkin.net/v1alpha1
 kind: BindCluster
 metadata:
   name: auth
-  namespace: ns-auth
+  namespace: binddns-auth
 spec:
   mode: authoritative
   replicas: 3
@@ -30,7 +30,7 @@ apiVersion: bind.unkin.net/v1alpha1
 kind: BindCatalogZone
 metadata:
   name: auth-catalog
-  namespace: ns-auth
+  namespace: binddns-auth
 spec:
   clusterRef: auth
   zoneName: catalog.internal

apps/base/binddns-auth/namespace.yaml

@@ -2,4 +2,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: ns-auth
+  name: binddns-auth

apps/base/binddns-auth/tsigkey.yaml

@@ -5,6 +5,6 @@ apiVersion: bind.unkin.net/v1alpha1
 kind: BindTSIGKey
 metadata:
   name: transfer-key
-  namespace: ns-auth
+  namespace: binddns-auth
 spec:
   algorithm: hmac-sha256

apps/overlays/au-syd1/binddns-auth/kustomization.yaml

@@ -3,4 +3,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  - ../../../base/ns-auth
+  - ../../../base/binddns-auth