feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 → v0.22.0 )

[renovate]

This PR contains the following updates:

Package	Update	Change
registry.k8s.io/external-dns/external-dns	minor	v0.21.0 → v0.22.0

---

Release Notes

kubernetes-sigs/external-dns (registry.k8s.io/external-dns/external-dns)

v0.22.0

Compare Source

⚠️ Breaking Changes

• chore!: remove unmaintained providers (akamai, plural, transip) by @​mloiseleur in #​6485
• feat(annotations)!: switch default annotations prefix to GA by @​mloiseleur in #​6424
• feat(provider/pihole)!: drop Pi-hole v5 API support by @​ivankatliarchuk in #​6406
• feat(registry/txt)!: use a- prefix for AWS A ALIAS ownership TXT records by @​mloiseleur in #​6523
• feat(source/gateway-api)!: migrate TLSRoute to v1 by @​ecray in #​6367
• fix(config)!: require explicit --policy flag by @​mloiseleur in #​6508

🚀 Features

• feat: add DNAME record type support by @​clwluvw in #​6553
• feat: add isSource template function to scope --fqdn-template by source by @​ivankatliarchuk in #​6625
• feat(annotations)!: switch default annotations prefix to GA by @​mloiseleur in #​6424
• feat(aws): add aws-hosted-zone-id annotation to pin records to a specific zone by @​namnt2307 in #​6559
• feat(aws): support alias=A and alias=AAAA to create single record type by @​u-kai in #​5997
• feat(chart): ability to watch other namespace by @​jplitza in #​6297
• feat(chart): add enableGatewayListenerSets flag by @​speer in #​6381
• feat(chart): add namespaceOverride by @​alliasgher in #​6389
• feat(chart): add replicaCount to allow scaling external-dns to 0 or 1 by @​yugstar in #​6503
• feat(chart): add support for bool in extraArgs by @​farodin91 in #​6179
• feat(chart): add support to create kubernetes service by @​jullianow in #​6400
• feat(endpoint): support multiple RefObjects per endpoint and per event by @​ivankatliarchuk in #​6495
• feat(provider/pihole)!: drop Pi-hole v5 API support by @​ivankatliarchuk in #​6406
• feat(registry): new CRD option by @​mloiseleur in #​5372
• feat(registry/txt)!: use a- prefix for AWS A ALIAS ownership TXT records by @​mloiseleur in #​6523
• feat(rfc2136): add --rfc2136-axfr, deprecate --rfc2136-tsig-axfr by @​mloiseleur in #​6598
• feat(source): add --fqdn-* flag support to f5-virtualserver and f5-transportserver sources by @​ivankatliarchuk in #​6470
• feat(source): add --fqdn-* flag support to gloo-proxy source by @​ivankatliarchuk in #​6475
• feat(source): add --fqdn-* flag support to traefik-proxy source by @​ivankatliarchuk in #​6468
• feat(source): add label filter support to contour, f5, kong, skipper, traefik sources by @​ivankatliarchuk in #​6538
• feat(source/ambassador): migrate Host CRD to emissary-ingress v3alpha1 by @​mloiseleur in #​6482
• feat(source): apply controller annotation filter at indexer level by @​ivankatliarchuk in #​6426
• feat(source): attach RefObject to all remaining sources by @​mloiseleur in #​6492
• feat(source/fake): extend fake source to emit all supported record types by @​ivankatliarchuk in #​6308
• feat(source/gateway-api)!: migrate TLSRoute to v1 by @​ecray in #​6367
• feat(source): migrate contour, f5, kong, traefik sources to indexer-based filtering by @​ivankatliarchuk in #​6542
• feat(source): migrate ingress and node sources to Indexers pattern by @​ivankatliarchuk in #​6445
• feat(source): set transformer on all informers by @​vflaux in #​6451
• feat(source/template): add fqdn-target-template to pod/service/node and consolidate duplicate template helpers by @​ivankatliarchuk in #​6497
• feat(template): support repeatable --fqdn-template, --target-template, --fqdn-target-template flags by @​ivankatliarchuk in #​6429
• feat(test/crd): support CRD integration tests by @​ivankatliarchuk in #​6412

🐛 Bug fixes

• fix(alibabacloud): fix TXT record value comparison during record updates by @​jiangzm in #​6487
• fix: allow releasing helm charts with immutable releases turned on by @​Raffo in #​6477
• fix(aws): incorrect behavior for non-aliasable record types by @​u-kai in #​6017
• fix(awssd): use namespace-aware parsing for dotted service names by @​am-ltk in #​6365
• fix(aws): unescape wildcard alias target on read by @​ulascansenturk in #​6471
• fix(chart): rbac compliance checkbox for dnsendpoints/status by @​vflaux in #​6442
• fix(cloudflare): send SRV records as structured data by @​tpaulus in #​6560
• fix(config)!: require explicit --policy flag by @​mloiseleur in #​6508
• fix(coredns): return AAAA for IPv6 targets by @​mloiseleur in #​6489
• fix(coredns): unexpected delete when owner is activated by @​farodin91 in #​6206
• fix(coredns): write PTR records without random prefix to etcd by @​dongjiang1989 in #​6478
• fix: create/update event generation for webhook provider by @​tommasopozzetti in #​6361
• fix(dnsimple): read back all supported record types and fix record lookup by type by @​Churi12 in #​6517
• fix(dynamodb): avoid nil region option panic by @​vissieza in #​6417
• fix(events): encapsulate ObjectReference fields by @​ivankatliarchuk in #​6423
• fix(helm): missing quotes on container arguments by @​KhooHaoYit in #​6264
• fix(helm): missing quotes on container arguments when extraArgs is a map by @​vflaux in #​6284
• fix(mapper): prevent index out of bounds in ToEndpointName with multi-dot suffix by @​carterpewpew in #​6433
• fix: pin smartystreets/assertions. mark gandi provider for removal by @​ivankatliarchuk in #​6634
• fix: preserve equals signs in endpoint label values by @​immanuwell in #​6443
• fix(provider/cloudflare): trim surrounding whitespace from API token by @​gecube in #​6533
• fix(provider): normalize alias=A/AAAA to alias=true after AdjustEndpoints by @​u-kai in #​6454
• fix(provider/rfc2136): use independent counters for AXFR and update nameserver rotation by @​pujitha24 in #​6591
• fix(service): switch Endpoints() to indexer-based filtering by @​ivankatliarchuk in #​6344
• fix(source/crd): allow SRV targets with trailing dot in DNSEndpoint by @​SAY-5 in #​6383
• fix(source/fake.go): make fakeSource endpoint generation deterministic by @​vflaux in #​6411
• fix(source): parse gloo-proxy aggregateListener virtual hosts by @​pujitha24 in #​6628
• fix(source): preserve Skipper custom token file by @​PragalvaXFREZ in #​6583
• fix(source): SingletonClientGenerator once-init errors by @​carterpewpew in #​6398
• fix(source): use correct key when checking for existing alias in postProcessor by @​u-kai in #​6388
• fix: support ownership recognition of txt records by @​HartmannVolker in #​6435

📝 Documentation

• docs: add Tencent Cloud webhook provider by @​QianChenglong in #​6432
• docs(ai): add instructions for agents by @​mloiseleur in #​6453
• docs(aws): correct hosted zone annotation prefix by @​immanuwell in #​6569
• docs(ci): validate docs build on PRs targeting master by @​ivankatliarchuk in #​6351
• docs: clarify release tag vs kustomize manifest lag by @​VedantMadane in #​6626
• docs(crd): clarify annotation-filter behavior for DNSEndpoint by @​immanuwell in #​6530
• docs(external-dns chart): fix typo in values README (Eample -> Example) by @​mridulagithub in #​6572
• docs(faq): explain how to migrate a hostname between sources by @​mloiseleur in #​6490
• docs: fix deps, build & links warning by @​mloiseleur in #​6350
• docs(proposal): libdns provider adapter by @​mloiseleur in #​6509
• docs(readme): remove retired go report card badge by @​scholar7r in #​6549
• docs(README): restructure provider and source listings by @​mloiseleur in #​6499
• docs(readme): update Unifi webhook URL by @​onedr0p in #​6534
• docs(rfc2136): fix duplicated word in tutorial by @​s3onghyun in #​6504
• docs(traefik): clarify explicit target requirement by @​immanuwell in #​6502
• docs(tutorials/aws): document AWS SDK credential provider chain by @​alekc in #​6444
• docs(tutorials/aws): fix grammatical error by @​Jawwad78 in #​6384
• docs(tutorials/ovh): Add single-link credential creation by @​fhoekstra in #​6397
• docs(webhook): add namecheap webhook provider by @​evandeaubl in #​6631
• docs(webhook): add NAVER Cloud Platform webhook provider by @​inerplat in #​6575
• docs(webhook): add Porkbun webhook provider to registry by @​mattgmoser in #​6409
• docs(webhook): add reference to netbird external-dns provider by @​kgrotel in #​6460

📦 Others

• chore: add fuzz tests for parsing and normalization functions by @​Raffo in #​6525
• chore: bump dependencies for update by @​Raffo in #​6643
• chore: bump k8s deps to v0.36.0 and remove deprecated scheme.Builder by @​ivankatliarchuk in #​6407
• chore: bump to go version 1.26.6 by @​Raffo in #​6635
• chore(chart): release for v0.21.0 by @​vflaux in #​6354
• chore(chart): remove DNSRecord CRD added ahead of release by @​mloiseleur in #​6516
• chore(cobra): cleanup up leftover Cobra code by @​vflaux in #​6448
• chore(deps): bump github.com/cloudflare/cloudflare-go from v5 to v7 by @​bayazee in #​6550
• chore(deps): bump github.com/projectcontour/contour from 1.33.3 to 1.33.4 by @​app/dependabot in #​6395
• chore(deps): bump gitpython from 3.1.50 to 3.1.52 in /docs/scripts by @​app/dependabot in #​6576
• chore(deps): bump gitpython from 3.1.52 to 3.1.54 in /docs/scripts by @​app/dependabot in #​6585
• chore(deps): bump gitpython from 3.1.54 to 3.1.57 in /docs/scripts by @​app/dependabot in #​6613
• chore(deps): bump gitpython from 3.1.57 to 3.1.58 in /docs/scripts by @​app/dependabot in #​6621
• chore(deps): bump mkdocs-git-revision-date-localized-plugin from 1.5.1 to 1.5.2 in /docs/scripts in the mkdocs-deps group by @​app/dependabot in #​6464
• chore(deps): bump mkdocs-git-revision-date-localized-plugin from 1.5.2 to 1.5.3 in /docs/scripts in the mkdocs-deps group by @​app/dependabot in #​6532
• chore(deps): bump mkdocs-material from 9.7.6 to 9.7.7 in /docs/scripts in the mkdocs-deps group across 1 directory by @​app/dependabot in #​6601
• chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 in /docs/scripts by @​app/dependabot in #​6584
• chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 in /docs/scripts by @​app/dependabot in #​6622
• chore(deps): bump the dev-dependencies group across 1 directory with 20 updates by @​app/dependabot in #​6410
• chore(deps): bump the dev-dependencies group with 10 updates by @​app/dependabot in #​6441
• chore(deps): bump the dev-dependencies group with 12 updates by @​app/dependabot in #​6459
• chore(deps): bump the dev-dependencies group with 22 updates by @​app/dependabot in #​6488
• chore(deps): bump the dev-dependencies group with 3 updates by @​app/dependabot in #​6420
• chore(deps): bump the dev-dependencies group with 4 updates by @​app/dependabot in #​6362
• chore(deps): bump the dev-dependencies group with 4 updates by @​app/dependabot in #​6403
• chore(deps): bump the dev-dependencies group with 5 updates by @​app/dependabot in #​6463
• chore(deps): bump the dev-dependencies group with 6 updates by @​app/dependabot in #​6452
• chore(deps): bump the dev-dependencies group with 9 updates by @​app/dependabot in #​6531
• chore(deps): bump the dev-dependencies group with 9 updates by @​app/dependabot in #​6602
• chore(deps): bump the mkdocs-deps group in /docs/scripts with 2 updates by @​app/dependabot in #​6404
• chore: fix grpc vuln by upgrading lib by @​Raffo in #​6614
• chore: fix typos across codebase by @​Raffo in #​6385
• chore: fix x/text vulnerability by upgrading by @​Raffo in #​6615
• chore: follow the OpenSSF recommendations for github permissions by @​Raffo in #​6378
• chore(release): updates kustomize & docs with v0.21.0 by @​mloiseleur in #​6349
• chore: release v1.21.1 chart version by @​Raffo in #​6401
• chore: update CI workflows to pin pip packages and go packages by @​Raffo in #​6498
• chore: update maintainers by @​mloiseleur in #​6421
• chore: update reviewers by @​mloiseleur in #​6427
• chore: update security contacts by @​Raffo in #​6425
• ci(docs): use latest as alias by @​mloiseleur in #​6352
• ci(e2e): use rollout status for etcd instead of kubectl wait by @​u-kai in #​6474
• ci(github): pin github action by @​ivankatliarchuk in #​6428
• ci: replace GrantBirki/json-yaml-validate action with jq by @​Raffo in #​6318
• ci: replace pre-commit with a SHA-pinned file-hygiene script by @​Raffo in #​6374
• deps(go): bump go from 1.26.1 -> 1.26.5 by @​ivankatliarchuk in #​6568
• refactor(alibabacloud/test): optimize alidns unit tests by @​jiangzm in #​6506
• refactor(controller): controller.Run to return error by @​ivankatliarchuk in #​6345
• refactor(controller): replace custom SIGTERM handler with NotifyContext by @​vflaux in #​5821
• refactor(endpoint): add WithAliasProperty and replace alias string literals by @​u-kai in #​6455
• refactor(endpoint): export ProviderSpecificAlias and consolidate usage by @​u-kai in #​6342
• refactor(endpoint): move MergeEndpoints from source to endpoint package by @​ivankatliarchuk in #​6413
• refactor(events): use typed queue and revisit event controller by @​ivankatliarchuk in #​6346
• refactor(exoscale): migrate provider to egoscale v3 and apex DNS record handling by @​natalie-o-perret in #​6371
• refactor(pdns): replace unmaintained ffledgling/pdns-go with joeig/go-powerdns/v3 by @​mloiseleur in #​6486
• refactor(registry/crd): build REST config from shared client package by @​mloiseleur in #​6514
• refactor(source/gloo): migrate to indexers, add annotation/label/controller filters by @​ivankatliarchuk in #​6515
• refactor(source): migrate AnnotationFilter from string to labels.Selector by @​ivankatliarchuk in #​6526
• refactor: use Set structs instead of map[]struct{} by @​vflaux in #​6360
• security(github): added openssf github action by @​ivankatliarchuk in #​6245
• test(crd): assert the generated CRDs are installable by @​mloiseleur in #​6619
• test(e2e): retry downloads to survive transient network errors by @​u-kai in #​6603
• test(gandi): extend coverage with mock adapters by @​amarkdotdev in #​6518
• test(ingress): fix endpoint count and improve assertion output by @​ivankatliarchuk in #​6194
• test(integration/crd): add SRV record scenario covering RFC 2782 trailing dot by @​ivankatliarchuk in #​6422
• test(pkg/rfc2317): cover bare IPv6 and invalid-mask edge cases by @​SAY-5 in #​6437
• test(registry/crd): expand unit test coverage by @​FirasYousfi in #​6522
• test(source): assert RefObject via ValidateEndpoints opt-in by @​mloiseleur in #​6493
• test(source): fix flaky unstructured source test by @​mloiseleur in #​6483
• test(source): improve skipper routegroup coverage by @​PragalvaXFREZ in #​6580
• test(source/ingress): two ingresses with same host, different IPs by @​ivankatliarchuk in #​6496

📦 Docker Image

# This pull command only works when it's released
docker pull registry.k8s.io/external-dns/external-dns:v0.22.0

---

Configuration

📅 Schedule: (in timezone Europe/Lisbon)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/network/external-dns/cloudflare Kustomization: flux-system/external-dns-cloudflare HelmRelease: network/external-dns-cloudflare

+++ kubernetes/apps/network/external-dns/cloudflare Kustomization: flux-system/external-dns-cloudflare HelmRelease: network/external-dns-cloudflare

@@ -54,13 +54,13 @@

     - --ignore-ingress-tls-spec
     - --ingress-class=traefik-public
     - --gateway-name=traefik-public-default
     fullnameOverride: external-dns-cloudflare
     image:
       repository: registry.k8s.io/external-dns/external-dns
-      tag: v0.21.0
+      tag: v0.22.0
     podAnnotations:
       secret.reloader.stakater.com/reload: cloudflare-api-token-secret
     policy: upsert-only
     provider: cloudflare
     serviceMonitor:
       enabled: true

[github-actions]

--- HelmRelease: network/external-dns-cloudflare Deployment: network/external-dns-cloudflare

+++ HelmRelease: network/external-dns-cloudflare Deployment: network/external-dns-cloudflare

@@ -39,13 +39,13 @@

             - ALL
           privileged: false
           readOnlyRootFilesystem: true
           runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
-        image: registry.k8s.io/external-dns/external-dns:v0.21.0
+        image: registry.k8s.io/external-dns/external-dns:v0.22.0
         imagePullPolicy: IfNotPresent
         env:
         - name: CF_API_TOKEN
           valueFrom:
             secretKeyRef:
               key: api-token