fix: allow transfer for external-dns

external-dns required axfr support to remove old records. add the
capability for the externaldns tsig key.

modules/externaldns/manifests/master.pp

@@ -28,8 +28,8 @@ class externaldns::master inherits externaldns {
       dynamic         => true,
       allow_updates   => ['key externaldns-key'],
       allow_transfers => empty($slave_ips) ? {
-        true  => [],
-        false => ['dns-slaves'],
+        true  => ['key externaldns-key'],
+        false => ['key externaldns-key','dns-slaves'],
       },
       ns_notify       => !empty($slave_ips),
       also_notify     => $slave_ips,
@@ -42,4 +42,4 @@ class externaldns::master inherits externaldns {
     recursion => false,
     zones     => $externaldns::k8s_zones,
   }
-}
+}