talexander/kubernetes_ip_demo
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix external dns zone matching.

Browse Source
This commit is contained in:
Tom Alexander 2025-03-22 15:19:44 -04:00
parent 47cca17e51
commit 8a0f78032c
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
terraform/external_dns.tf
View File

@ -43,7 +43,7 @@ resource "google_project_iam_member" "external_dns" {
role = "roles/dns.reader" role = "roles/dns.reader"
} }
resource "google_dns_managed_zone_iam_member" "member" { resource "google_dns_managed_zone_iam_member" "external_dns" {
project = google_project.project.project_id project = google_project.project.project_id
managed_zone = google_dns_managed_zone.zone.name managed_zone = google_dns_managed_zone.zone.name
role = "roles/dns.admin" role = "roles/dns.admin"

3
terraform/modules/k8s_workload/external_dns.tf
View File

@ -12,7 +12,8 @@ variable "external_dns_gcp_service_account_email" {
locals { locals {
external_dns_namespace = length(kubernetes_namespace.external_dns) == 0 ? var.external_dns_k8s_namespace : kubernetes_namespace.external_dns[0].metadata[0].name external_dns_namespace = length(kubernetes_namespace.external_dns) == 0 ? var.external_dns_k8s_namespace : kubernetes_namespace.external_dns[0].metadata[0].name
external_dns_domain_filter = trimsuffix("${var.cluster.name}.${var.dns_managed_zone.dns_name}", ".") external_dns_domain_filter = trimsuffix("${var.dns_managed_zone.dns_name}", ".")
# external_dns_domain_filter needs to match a google_dns_managed_zone so to keep things simple I am only filtering to the dns_root. If we wanted to filter to the cluster subdomain, we could create a separate google_dns_managed_zone for each cluster (and set IAM permissions accordingly).
} }
resource "kubernetes_namespace" "external_dns" { resource "kubernetes_namespace" "external_dns" {