argocd-apps/apps/base/bind-internal/authoritative/kustomization.yaml at 4163bf80b36242a7c3b47195743d3d29df3ab829 - argocd-apps - Gitea

unkin/argocd-apps

Files

T

unkinben 4163bf80b3

ci/woodpecker/pr/kubeconform Pipeline is pending

Details

ci/woodpecker/pr/pre-commit Pipeline is pending

Details

Add identity.unkin.net internal DNS record

identity.unkin.net was configured as the Authentik OIDC issuer but has no DNS
record anywhere, so in-cluster OIDC discovery (e.g. argocd-server) fails to
resolve it. Add an authoritative A record via the bind-operator so the
internal bind system serves it.

- New DNSRecord identity-dns-internal -> 198.18.200.4 (traefik-internal VIP,
  where the authentik Gateway serves the identity.unkin.net hostname).
- Placed in the bind-internal namespace alongside the unkin-net BindZone: the
  operator resolves zoneRef/clusterRef/updateKeyRef within the record's own
  namespace, so it cannot live in the app namespace.
- "internal" in the name distinguishes it from the external DNS Authentik will
  manage its own records from later.

2026-07-15 07:45:59 +10:00

11 lines

160 B

YAML

Raw Blame History

 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - cluster.yaml
   - tsigkey.yaml
   - zones.yaml
   - records.yaml
   - acls.yaml