fix(external-dns): target tunnel CNAME not LAN LB IP #50

Merged
kblack0610 merged 1 commit from fix/external-dns-tunnel-target into master 2026-06-29 17:44:08 +00:00
Owner

external-dns tried a proxied A-record to 192.168.1.243 (rejected by Cloudflare 9003). --default-targets points all managed records at the public-sites tunnel CNAME.

external-dns tried a proxied A-record to 192.168.1.243 (rejected by Cloudflare 9003). --default-targets points all managed records at the public-sites tunnel CNAME.
external-dns derived the target from the Ingress status (192.168.1.243, the
in-cluster Traefik LB), so it tried to create a proxied A record to a private IP
— Cloudflare rejects that (error 9003). Set --default-targets to the public-sites
tunnel so every managed record is a proxied CNAME to <tunnel>.cfargotunnel.com.
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
kblack0610/home-config!50
No description provided.