# k8s external-dns zones migrated from puppet-prod
# (externaldns::k8s_zones in hieradata/roles/infra/dns/externaldns.yaml).
# Primary + dynamicUpdate: the Kubernetes external-dns controller writes
# records here via RFC2136 authenticated with externaldns-key.
---
apiVersion: bind.unkin.net/v1alpha1
kind: BindZone
metadata:
  name: k8s-syd1-au-unkin-net
  namespace: bind-internal
spec:
  clusterRef: bind-externaldns
  zoneName: k8s.syd1.au.unkin.net
  type: primary
  defaultTTL: 600
  dynamicUpdate: true
  updateKeyRef: externaldns-key
  allowTransfer:
    - key externaldns-key
---
apiVersion: bind.unkin.net/v1alpha1
kind: BindZone
metadata:
  name: 200-18-198-in-addr-arpa
  namespace: bind-internal
spec:
  clusterRef: bind-externaldns
  zoneName: 200.18.198.in-addr.arpa
  type: primary
  defaultTTL: 600
  dynamicUpdate: true
  updateKeyRef: externaldns-key
  allowTransfer:
    - key externaldns-key