---
apiVersion: bind.unkin.net/v1alpha1
kind: DNSRecord
metadata:
  name: watchstate-dns-internal
  namespace: bind-internal
spec:
  zoneRef: unkin-net
  name: watchstate
  type: A
  ttl: 600
  values:
    # traefik-EXTERNAL (DMZ) gateway VIP; the watchstate-external Gateway serves
    # the watchstate.unkin.net front door (oauth2-proxy) there.
    - 198.18.199.0