From 454fba347c5ce46a0f990bfba748aefa6a5ec356 Mon Sep 17 00:00:00 2001
From: nold <nold@gnu.one>
Date: Mon, 5 Aug 2024 15:26:58 +0200
Subject: [PATCH] feat(core): external-dns-adguard

---
 projects/core/project.yml                     |  11 ++
 .../core/values/external-dns-adguard.yaml     | 104 ++++++++++++++++++
 2 files changed, 115 insertions(+)
 create mode 100644 projects/core/values/external-dns-adguard.yaml

diff --git a/projects/core/project.yml b/projects/core/project.yml
index f37c54e0..eb4c5c60 100644
--- a/projects/core/project.yml
+++ b/projects/core/project.yml
@@ -60,6 +60,17 @@ apps:
     keys:
     - CF_API_TOKEN
 
+- name: external-dns-adguard
+  repoURL: https://kubernetes-sigs.github.io/external-dns
+  chart: external-dns
+  targetRevision: 1.14.5
+  secrets:
+  - name: adguard-config
+    keys:
+    - ADGUARD_URL
+    - ADGUARD_USER
+    - ADGUARD_PASSWORD
+
 - name: cert-manager
   namespace: cert-manager
   repoURL: https://charts.jetstack.io
diff --git a/projects/core/values/external-dns-adguard.yaml b/projects/core/values/external-dns-adguard.yaml
new file mode 100644
index 00000000..b3834405
--- /dev/null
+++ b/projects/core/values/external-dns-adguard.yaml
@@ -0,0 +1,104 @@
+# Default values for external-dns.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+image:
+  repository: registry.k8s.io/external-dns/external-dns
+  tag: "v0.14.2"
+  pullPolicy: IfNotPresent
+
+shareProcessNamespace: false
+
+podSecurityContext:
+  fsGroup: 65534
+
+securityContext:
+  runAsNonRoot: true
+  runAsUser: 65534
+  readOnlyRootFilesystem: true
+  capabilities:
+    drop: ["ALL"]
+
+# Defaults to `ClusterFirst`.
+# Valid values are: `ClusterFirstWithHostNet`, `ClusterFirst`, `Default` or `None`.
+dnsPolicy:
+
+serviceMonitor:
+  enabled: false
+  additionalLabels: {}
+  interval: 1m
+  scrapeTimeout: 10s
+
+resources:
+  limits:
+    memory: 50Mi
+    cpu: 200m
+  requests:
+    memory: 50Mi
+    cpu: 10m
+
+logLevel: info
+logFormat: text
+
+interval: 1m
+triggerLoopOnEvent: false
+
+sources:
+  - ingress
+#  - service
+
+policy: upsert-only
+
+registry: txt
+txtOwnerId: ""
+txtPrefix: ""
+txtSuffix: ""
+
+domainFilters:
+  - dc
+
+#extraArgs:
+
+deploymentStrategy:
+  type: Recreate
+
+provider:
+    name: webhook
+    webhook:
+      image: 
+        repository: ghcr.io/muhlba91/external-dns-provider-adguard
+        tag: latest
+      livenessProbe:
+        httpGet:
+          path: /healthz
+          port: 8888
+        initialDelaySeconds: 10
+        timeoutSeconds: 5
+      readinessProbe:
+        httpGet:
+          path: /healthz
+          port: 8888
+        initialDelaySeconds: 10
+        timeoutSeconds: 5
+      env:
+        - name: LOG_LEVEL
+          value: debug
+        - name: ADGUARD_URL
+          valueFrom:
+            secretKeyRef:
+              name: adguard-config
+              key: ADGUARD_URL
+        - name: ADGUARD_USER
+          valueFrom:
+            secretKeyRef:
+              name: adguard-config
+              key: ADGUARD_USER
+        - name: ADGUARD_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: adguard-config
+              key: ADGUARD_PASSWORD
+        - name: SERVER_HOST
+          value: "0.0.0.0" 
+        - name: DRY_RUN
+          value: "false"