#externaldns — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #externaldns, aggregated by home.social.
-
fyi external-dns v0.22.0 changes the annotation (and will fuck up all yo shit automatically if you are already specifying
--policy) -
fyi external-dns v0.22.0 changes the annotation (and will fuck up all yo shit automatically if you are already specifying
--policy) -
fyi external-dns v0.22.0 changes the annotation (and will fuck up all yo shit automatically if you are already specifying
--policy) -
fyi external-dns v0.22.0 changes the annotation (and will fuck up all yo shit automatically if you are already specifying
--policy) -
Sync Kubernetes Ingress & Service endpoints directly with AWS Route53 hosted zones. Configure ExternalDNS on EKS with IAM Roles for Service Accounts (IRSA) for secure IAM authentication.
https://www.valtersit.com/vault/aws-route53-externaldns-deployment-with-iam-roles-for-servic-81533a/
-
Sync Kubernetes Ingress & Service endpoints directly with AWS Route53 hosted zones. Configure ExternalDNS on EKS with IAM Roles for Service Accounts (IRSA) for secure IAM authentication.
https://www.valtersit.com/vault/aws-route53-externaldns-deployment-with-iam-roles-for-servic-81533a/
-
Numerous technical and security improvements on the infrastructure that supports https://mstdn.dk
- DNS simplified extensively by migrating public facing secondary nameservers to #NSD using #CatalogZones from PowerDNS + DNSDist.
- #DNSSEC reenabled
- #ExternalDNS and #CertManager configuration vastly simplified.
- #Ingress controller migrated from #Nginx to #Traefik
Bottom line: https://sikkerpånettet.dk/ now gives the site a 100% #security score. There are still improvements to be made (weirdly enough) - specifically I'm looking into supporting DANE for #TLS certificate signatures in #DNS.
Now that's off the TODO-list :-)
-
Numerous technical and security improvements on the infrastructure that supports https://mstdn.dk
- DNS simplified extensively by migrating public facing secondary nameservers to #NSD using #CatalogZones from PowerDNS + DNSDist.
- #DNSSEC reenabled
- #ExternalDNS and #CertManager configuration vastly simplified.
- #Ingress controller migrated from #Nginx to #Traefik
Bottom line: https://sikkerpånettet.dk/ now gives the site a 100% #security score. There are still improvements to be made (weirdly enough) - specifically I'm looking into supporting DANE for #TLS certificate signatures in #DNS.
Now that's off the TODO-list :-)
-
Numerous technical and security improvements on the infrastructure that supports https://mstdn.dk
- DNS simplified extensively by migrating public facing secondary nameservers to #NSD using #CatalogZones from PowerDNS + DNSDist.
- #DNSSEC reenabled
- #ExternalDNS and #CertManager configuration vastly simplified.
- #Ingress controller migrated from #Nginx to #Traefik
Bottom line: https://sikkerpånettet.dk/ now gives the site a 100% #security score. There are still improvements to be made (weirdly enough) - specifically I'm looking into supporting DANE for #TLS certificate signatures in #DNS.
Now that's off the TODO-list :-)
-
Numerous technical and security improvements on the infrastructure that supports https://mstdn.dk
- DNS simplified extensively by migrating public facing secondary nameservers to #NSD using #CatalogZones from PowerDNS + DNSDist.
- #DNSSEC reenabled
- #ExternalDNS and #CertManager configuration vastly simplified.
- #Ingress controller migrated from #Nginx to #Traefik
Bottom line: https://sikkerpånettet.dk/ now gives the site a 100% #security score. There are still improvements to be made (weirdly enough) - specifically I'm looking into supporting DANE for #TLS certificate signatures in #DNS.
Now that's off the TODO-list :-)
-
Numerous technical and security improvements on the infrastructure that supports https://mstdn.dk
- DNS simplified extensively by migrating public facing secondary nameservers to #NSD using #CatalogZones from PowerDNS + DNSDist.
- #DNSSEC reenabled
- #ExternalDNS and #CertManager configuration vastly simplified.
- #Ingress controller migrated from #Nginx to #Traefik
Bottom line: https://sikkerpånettet.dk/ now gives the site a 100% #security score. There are still improvements to be made (weirdly enough) - specifically I'm looking into supporting DANE for #TLS certificate signatures in #DNS.
Now that's off the TODO-list :-)
-
Figured out some more of the homelab Kubernetes fun tonight: I probably need an etcd operator on the cluster, responding on some-hostname:2379 so that the external-dns service can find what it needs. I don't have this setup yet so nothing is running on :2379.
I didn't see this mentioned in the docs so tomorrow I'll design something and see if I can get it working.
I also really should take some better notes, if only for my own documentation. Then I should probably redeploy my original infrastructure.
-
Figured out some more of the homelab Kubernetes fun tonight: I probably need an etcd operator on the cluster, responding on some-hostname:2379 so that the external-dns service can find what it needs. I don't have this setup yet so nothing is running on :2379.
I didn't see this mentioned in the docs so tomorrow I'll design something and see if I can get it working.
I also really should take some better notes, if only for my own documentation. Then I should probably redeploy my original infrastructure.
-
Figured out some more of the homelab Kubernetes fun tonight: I probably need an etcd operator on the cluster, responding on some-hostname:2379 so that the external-dns service can find what it needs. I don't have this setup yet so nothing is running on :2379.
I didn't see this mentioned in the docs so tomorrow I'll design something and see if I can get it working.
I also really should take some better notes, if only for my own documentation. Then I should probably redeploy my original infrastructure.
-
Figured out some more of the homelab Kubernetes fun tonight: I probably need an etcd operator on the cluster, responding on some-hostname:2379 so that the external-dns service can find what it needs. I don't have this setup yet so nothing is running on :2379.
I didn't see this mentioned in the docs so tomorrow I'll design something and see if I can get it working.
I also really should take some better notes, if only for my own documentation. Then I should probably redeploy my original infrastructure.
-
Figured out some more of the homelab Kubernetes fun tonight: I probably need an etcd operator on the cluster, responding on some-hostname:2379 so that the external-dns service can find what it needs. I don't have this setup yet so nothing is running on :2379.
I didn't see this mentioned in the docs so tomorrow I'll design something and see if I can get it working.
I also really should take some better notes, if only for my own documentation. Then I should probably redeploy my original infrastructure.
-
I spent probably a weeks worth of hours learning more #kubernetes so I could save $60 a month.
I have a nice 3 node kube cluster with a 2 node #keepalived #haproxy TCP load balancer. All on #ARM VPS.
Haproxy ingress
#ExternalDNS operator
#CertManager
#RookCeph
#ArgoCD
#KeyCloak
#ValKey
#Mastodon
#CloudNativePG #Postgresql -
I spent probably a weeks worth of hours learning more #kubernetes so I could save $60 a month.
I have a nice 3 node kube cluster with a 2 node #keepalived #haproxy TCP load balancer. All on #ARM VPS.
Haproxy ingress
#ExternalDNS operator
#CertManager
#RookCeph
#ArgoCD
#KeyCloak
#ValKey
#Mastodon
#CloudNativePG #Postgresql -
I spent probably a weeks worth of hours learning more #kubernetes so I could save $60 a month.
I have a nice 3 node kube cluster with a 2 node #keepalived #haproxy TCP load balancer. All on #ARM VPS.
Haproxy ingress
#ExternalDNS operator
#CertManager
#RookCeph
#ArgoCD
#KeyCloak
#ValKey
#Mastodon
#CloudNativePG #Postgresql -
I spent probably a weeks worth of hours learning more #kubernetes so I could save $60 a month.
I have a nice 3 node kube cluster with a 2 node #keepalived #haproxy TCP load balancer. All on #ARM VPS.
Haproxy ingress
#ExternalDNS operator
#CertManager
#RookCeph
#ArgoCD
#KeyCloak
#ValKey
#Mastodon
#CloudNativePG #Postgresql -
Ha, funktioniert: LoadBalancer für #dovecot wird automatisch erzeugt, automatisch in DNS eingetragen und automatisch ein TLS-Zertifikat erzeugt. Langsam nimmt mein Mail-auf-Kubernetes-Setup Form an.
-
Ha, funktioniert: LoadBalancer für #dovecot wird automatisch erzeugt, automatisch in DNS eingetragen und automatisch ein TLS-Zertifikat erzeugt. Langsam nimmt mein Mail-auf-Kubernetes-Setup Form an.
-
Ha, funktioniert: LoadBalancer für #dovecot wird automatisch erzeugt, automatisch in DNS eingetragen und automatisch ein TLS-Zertifikat erzeugt. Langsam nimmt mein Mail-auf-Kubernetes-Setup Form an.
-
Ha, funktioniert: LoadBalancer für #dovecot wird automatisch erzeugt, automatisch in DNS eingetragen und automatisch ein TLS-Zertifikat erzeugt. Langsam nimmt mein Mail-auf-Kubernetes-Setup Form an.
-
Ha, funktioniert: LoadBalancer für #dovecot wird automatisch erzeugt, automatisch in DNS eingetragen und automatisch ein TLS-Zertifikat erzeugt. Langsam nimmt mein Mail-auf-Kubernetes-Setup Form an.
-
Low hanging stateless fruits moved from ArgoCD to #FluxCD: #CertManager, #ExternalDNS, #Drone, #Stakater #Reloader. Those seem to be in working order. It's gonna take a bit of time moving the stateful projects though.
-
Low hanging stateless fruits moved from ArgoCD to #FluxCD: #CertManager, #ExternalDNS, #Drone, #Stakater #Reloader. Those seem to be in working order. It's gonna take a bit of time moving the stateful projects though.
-
Low hanging stateless fruits moved from ArgoCD to #FluxCD: #CertManager, #ExternalDNS, #Drone, #Stakater #Reloader. Those seem to be in working order. It's gonna take a bit of time moving the stateful projects though.
-
Low hanging stateless fruits moved from ArgoCD to #FluxCD: #CertManager, #ExternalDNS, #Drone, #Stakater #Reloader. Those seem to be in working order. It's gonna take a bit of time moving the stateful projects though.
-
Low hanging stateless fruits moved from ArgoCD to #FluxCD: #CertManager, #ExternalDNS, #Drone, #Stakater #Reloader. Those seem to be in working order. It's gonna take a bit of time moving the stateful projects though.
