---
apiVersion: bind.unkin.net/v1alpha1
kind: DNSRecord
metadata:
  # "internal" in the name distinguishes this from the external DNS that
  # Authentik will manage its own records from later.
  name: identity-dns-internal
  namespace: bind-internal
spec:
  zoneRef: unkin-net
  name: identity
  type: A
  ttl: 600
  values:
    # traefik-EXTERNAL (DMZ) gateway VIP; the authentik Gateway serves the
    # identity.unkin.net hostname there.
    - 198.18.199.0