# Provider 
provider: pihole

# Policy
policy: upsert-only

# TXT owner
txtOwnerId: homelab

# Log level
logLevel: info

extraArgs:
  - --pihole-tls-skip-verify
  - --pihole-api-version=6

# Pi-hole password from secret
env:
  - name: EXTERNAL_DNS_PIHOLE_PASSWORD
    valueFrom:
      secretKeyRef:
        name: pihole-password
        key: password
  - name: EXTERNAL_DNS_PIHOLE_SERVER
    # make sure NOT to put a trailing slash, as external-dns adds its own
    value: http://pihole-web.pihole-system.svc.cluster.local

# Sources to watch
sources:
  - ingress
  - service

# Service account
serviceAccount:
  create: true
  name: external-dns

# RBAC
rbac:
  create: true

# Image configuration
image:
  repository: registry.k8s.io/external-dns/external-dns
  tag: v0.19.0
  pullPolicy: IfNotPresent