argocd-apps/apps/base/bind-internal/authoritative/unkin-net/a/auth.yaml

---
apiVersion: bind.unkin.net/v1alpha1
kind: DNSRecord
metadata:
  name: auth-dns-internal
  namespace: bind-internal
spec:
  zoneRef: unkin-net
  name: auth
  type: A
  ttl: 600
  values:
    # traefik-internal gateway VIP; the kanidm Gateway serves auth.unkin.net there.
    - 198.18.200.4