feat(provisioning): added hetzner external dns support

provisioning/clusters/testcloud.yaml

@@ -48,7 +48,13 @@ ingress-multi:
 #
 cert-manager:
   installed: true
+
 cert-manager-webhook-hetzner:
   installed: true
-  token: OVERRIDE_IN_SECURE_FILE # Token for access hetzner DNS
-  email: acme@fritschen.net
+  token: OVERRIDE_IN_SECURE_FILE # Token for access hetzner DNS (can also set in global-config.hetzner.dnsToken)
+  email: acme@fritschen.net
+
+external-dns-hetzner:
+  installed: true
+  token: OVERRIDE_IN_SECURE_FILE # Token for access hetzner DNS (can also set in global-config.hetzner.dnsToken)
+  txtOwnerId: htcl

provisioning/helmfiles/services/helmfile.yaml

@@ -28,3 +28,9 @@ releases:
     needs:
       - cert-manager/cert-manager
     disableValidation: true
+
+  - name: external-dns-hetzner
+    <<: *system
+    namespace: external-dns
+    chart: bitnami/external-dns
+    version: 6.0.2

provisioning/helmfiles/services/values/external-dns-hetzner.yaml.gotmpl

@@ -0,0 +1,30 @@
+# Values: https://github.com/bitnami/charts/tree/master/bitnami/external-dns
+---
+{{- $config := .Values | get "external-dns-hetzner" }}
+{{- $prometheusMonitoring := .Values | get "global-config.prometheus.enabled" false }}
+{{- $hetznerDnsToken := .Values | get "global-config.hetzner.dnsToken" $config.token }}
+
+provider: hetzner
+policy: sync
+hetzner:
+  token: {{ $hetznerDnsToken }}
+txtOwnerId: {{ $config.txtOwnerId }}
+txtPrefix: {{ $config | get "txtPrefix" "edt" }}
+{{- if $config | get "domainFilters" false }}
+domainFilters:
+  {{- range $domain := $config.domainFilters }}
+  - {{ $domain }}
+  {{- end }}
+{{- end }}
+sources:
+  - service
+  - ingress
+logLevel: {{ $config | get "logLevel" "debug" }}
+interval: {{ $config | get "interval" "60s" }}
+
+{{- if $prometheusMonitoring }}
+metrics:
+  enabled: true
+  serviceMonitor:
+    enabled: true
+{{- end }}