mirror of
				https://github.com/kubernetes-sigs/external-dns.git
				synced 2025-10-31 18:50:59 +01:00 
			
		
		
		
	
		
			
				
	
	
		
			187 lines
		
	
	
		
			4.6 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
			
		
		
	
	
			187 lines
		
	
	
		
			4.6 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
| # Setting up ExternalDNS for Services on Civo
 | |
| 
 | |
| This tutorial describes how to setup ExternalDNS for usage within a Kubernetes cluster using Civo DNS Manager.
 | |
| 
 | |
| Make sure to use **>0.12.2** version of ExternalDNS for this tutorial.
 | |
| 
 | |
| ## Managing DNS with Civo
 | |
| 
 | |
| If you want to learn about how to use Civo DNS Manager read the following tutorials:
 | |
| 
 | |
| [An Introduction to Managing DNS](https://www.civo.com/learn/configure-dns)
 | |
| 
 | |
| ## Get Civo Token
 | |
| 
 | |
| Copy the token in the settings fo your account
 | |
| 
 | |
| The environment variable `CIVO_TOKEN` will be needed to run ExternalDNS with Civo.
 | |
| 
 | |
| ## Deploy ExternalDNS
 | |
| 
 | |
| Connect your `kubectl` client to the cluster you want to test ExternalDNS with.
 | |
| Then apply one of the following manifests file to deploy ExternalDNS.
 | |
| 
 | |
| ### Manifest (for clusters without RBAC enabled)
 | |
| 
 | |
| ```yaml
 | |
| apiVersion: apps/v1
 | |
| kind: Deployment
 | |
| metadata:
 | |
|   name: external-dns
 | |
| spec:
 | |
|   strategy:
 | |
|     type: Recreate
 | |
|   selector:
 | |
|     matchLabels:
 | |
|       app: external-dns
 | |
|   template:
 | |
|     metadata:
 | |
|       labels:
 | |
|         app: external-dns
 | |
|     spec:
 | |
|       containers:
 | |
|       - name: external-dns
 | |
|         image: registry.k8s.io/external-dns/external-dns:v0.13.4
 | |
|         args:
 | |
|         - --source=service # ingress is also possible
 | |
|         - --domain-filter=example.com # (optional) limit to only example.com domains; change to match the zone created above.
 | |
|         - --provider=civo
 | |
|         env:
 | |
|         - name: CIVO_TOKEN
 | |
|           value: "YOUR_CIVO_API_TOKEN"
 | |
| ```
 | |
| 
 | |
| ### Manifest (for clusters with RBAC enabled)
 | |
| 
 | |
| ```yaml
 | |
| apiVersion: v1
 | |
| kind: ServiceAccount
 | |
| metadata:
 | |
|   name: external-dns
 | |
| ---
 | |
| apiVersion: rbac.authorization.k8s.io/v1beta1
 | |
| kind: ClusterRole
 | |
| metadata:
 | |
|   name: external-dns
 | |
| rules:
 | |
| - apiGroups: [""]
 | |
|   resources: ["services","endpoints","pods"]
 | |
|   verbs: ["get","watch","list"]
 | |
| - apiGroups: ["extensions","networking.k8s.io"]
 | |
|   resources: ["ingresses"]
 | |
|   verbs: ["get","watch","list"]
 | |
| - apiGroups: [""]
 | |
|   resources: ["nodes"]
 | |
|   verbs: ["list"]
 | |
| ---
 | |
| apiVersion: rbac.authorization.k8s.io/v1beta1
 | |
| kind: ClusterRoleBinding
 | |
| metadata:
 | |
|   name: external-dns-viewer
 | |
| roleRef:
 | |
|   apiGroup: rbac.authorization.k8s.io
 | |
|   kind: ClusterRole
 | |
|   name: external-dns
 | |
| subjects:
 | |
| - kind: ServiceAccount
 | |
|   name: external-dns
 | |
|   namespace: default
 | |
| ---
 | |
| apiVersion: apps/v1
 | |
| kind: Deployment
 | |
| metadata:
 | |
|   name: external-dns
 | |
| spec:
 | |
|   strategy:
 | |
|     type: Recreate
 | |
|   selector:
 | |
|     matchLabels:
 | |
|       app: external-dns
 | |
|   template:
 | |
|     metadata:
 | |
|       labels:
 | |
|         app: external-dns
 | |
|     spec:
 | |
|       serviceAccountName: external-dns
 | |
|       containers:
 | |
|       - name: external-dns
 | |
|         image: registry.k8s.io/external-dns/external-dns:v0.13.4
 | |
|         args:
 | |
|         - --source=service # ingress is also possible
 | |
|         - --domain-filter=example.com # (optional) limit to only example.com domains; change to match the zone created above.
 | |
|         - --provider=civo
 | |
|         env:
 | |
|         - name: CIVO_TOKEN
 | |
|           value: "YOUR_CIVO_API_TOKEN"
 | |
| ```
 | |
| 
 | |
| ## Deploying an Nginx Service
 | |
| 
 | |
| Create a service file called 'nginx.yaml' with the following contents:
 | |
| 
 | |
| ```yaml
 | |
| apiVersion: apps/v1
 | |
| kind: Deployment
 | |
| metadata:
 | |
|   name: nginx
 | |
| spec:
 | |
|   selector:
 | |
|     matchLabels:
 | |
|       app: nginx
 | |
|   template:
 | |
|     metadata:
 | |
|       labels:
 | |
|         app: nginx
 | |
|     spec:
 | |
|       containers:
 | |
|       - image: nginx
 | |
|         name: nginx
 | |
|         ports:
 | |
|         - containerPort: 80
 | |
| ---
 | |
| apiVersion: v1
 | |
| kind: Service
 | |
| metadata:
 | |
|   name: nginx
 | |
|   annotations:
 | |
|     external-dns.alpha.kubernetes.io/hostname: my-app.example.com
 | |
| spec:
 | |
|   selector:
 | |
|     app: nginx
 | |
|   type: LoadBalancer
 | |
|   ports:
 | |
|     - protocol: TCP
 | |
|       port: 80
 | |
|       targetPort: 80
 | |
| ```
 | |
| 
 | |
| Note the annotation on the service; use the same hostname as the Civo DNS zone created above.
 | |
| 
 | |
| ExternalDNS uses this annotation to determine what services should be registered with DNS. Removing the annotation will cause ExternalDNS to remove the corresponding DNS records.
 | |
| 
 | |
| Create the deployment and service:
 | |
| 
 | |
| ```console
 | |
| $ kubectl create -f nginx.yaml
 | |
| ```
 | |
| 
 | |
| Depending where you run your service it can take a little while for your cloud provider to create an external IP for the service.
 | |
| 
 | |
| Once the service has an external IP assigned, ExternalDNS will notice the new service IP address and synchronize the Civo DNS records.
 | |
| 
 | |
| ## Verifying Civo DNS records
 | |
| 
 | |
| Check your [Civo UI](https://www.civo.com/account/dns) to view the records for your Civo DNS zone.
 | |
| 
 | |
| Click on the zone for the one created above if a different domain was used.
 | |
| 
 | |
| This should show the external IP address of the service as the A record for your domain.
 | |
| 
 | |
| ## Cleanup
 | |
| 
 | |
| Now that we have verified that ExternalDNS will automatically manage Civo DNS records, we can delete the tutorial's example:
 | |
| 
 | |
| ```
 | |
| $ kubectl delete service -f nginx.yaml
 | |
| $ kubectl delete service -f externaldns.yaml
 | |
| ``` |