v0.14.2

What's Changed

• kustomize-v0.14.1 by @Raffo in #4331
• replace all links in tutorials for v0.14.1 by @Raffo in #4332
• chore: upgrade ExternalDNS to go 1.22 by @mloiseleur in #4318
• build(deps): bump the dev-dependencies group with 13 updates by @dependabot in #4329
• build(deps): bump the dev-dependencies group with 5 updates by @dependabot in #4334
• build(deps): bump the dev-dependencies group with 9 updates by @dependabot in #4349
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #4341
• Add dnsendpoint CRD to Helm chart by @onedr0p in #4322
• build(deps): bump the dev-dependencies group with 13 updates by @dependabot in #4361
• build(deps): bump GrantBirki/json-yaml-validate from 2.6.1 to 2.6.2 in the dev-dependencies group by @dependabot in #4364
• chore(chart): Released chart for v0.14.1 by @stevehipwell in #4357
• chore: alphabetical order on providers by @mloiseleur in #4350
• doc: advertise current plan on providers by @mloiseleur in #4365
• Fix(ipv6): support ipv6 shortener and expander equal by @dongjiang1989 in #4351
• feat(WebhookProvider): Let WebhookProvider return SoftError on response status codes >= 500 by @SimonKienzler in #4319
• Webhook provider: Use correct error gauge in AdjustEndpoints() func by @SimonKienzler in #4374
• build(deps): bump the dev-dependencies group with 18 updates by @dependabot in #4381
• Add exclude domains value in Chart by @bford-evs in #4380
• docs(aws): fix typo and upgrade cleanup flow by @franzudev in #4389
• docs(gke): detail how to configure workload identity by @userbradley in #4373
• chore(ci): fix failing test by @mloiseleur in #4397
• chore: Update controller-tools version to v0.14.0 by @dongjiang1989 in #4400
• chore(ci): update golangci-lint to v1.57.2 by @dongjiang1989 in #4406
• chore: upgrade ExternalDNS to go 1.22.2 by @mloiseleur in #4414
• build(deps): bump the dev-dependencies group across 1 directory with 4 updates by @dependabot in #4412
• build(deps): bump the dev-dependencies group across 1 directory with 24 updates by @dependabot in #4416
• custom Azure Active Directory Authority Host by @Jeremy-Boyle in #4210
• feat(DNSimple): User API tokens by @IntegralProgrammer in #4274
• docs: annotation placement for azuredns tutorial by @jonas-budde in #4415
• feat(azure): add zone name filter for Azure Private DNS by @khuedoan in #4346
• test: detect no change necessary with provider specific config by @szuecs in #4189
• docs: add setup example with helm chart on some providers by @omerap12 in #4405
• test: controller run() and successfully shutdown by @szuecs in #3639
• fix syntax on cloudflare externalDNS by @ilyesAj in #4436
• build(deps): bump the dev-dependencies group across 1 directory with 11 updates by @dependabot in #4440
• chore(chart): Adding extra containers by @omerap12 in #4432
• aws: add ca-west-1 region by @jeremy-albuixech in #4444
• fix: duplicated endpoint per hosted zone by @leonardocaylent in #4296
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 in the dev-dependencies group by @dependabot in #4438
• Add IPv6 AAAA record support to PiHole provider by @PseudoResonance in #4324
• fix: soft error on cloudflare rate limits by @ebachle in #4437
• Update cloudflare.md by @mfreeman451 in #4449
• Fix headings, whitespace by @stefanlasiewski in #4457
• docs: add reference to anexia webhook provider by @ProbstenHias in #4441
• fix logline mentioning plugin api by @Raffo in #4459
• docs: lint gke docs + make terraform config more secure by @DrFaust92 in #4456
• build(deps): bump action-stars/install-tool-from-github-release from 0.2.2 to 0.2.3 in the dev-dependencies group by @dependabot in #4464
• changed documentation to include more details description when using API Tokens by @rhjensen79 in #4474
• fix: add clarification to endpoint unit tests by @leonardocaylent in #4462
• build(deps): bump the dev-dependencies group across 1 directory with 19 updates by @mloiseleur in #4476
• build(deps): bump the dev-dependencies group across 1 directory with 19 updates by @dependabot in #4475

Images

registry.k8s.io/external-dns/external-dns:v0.14.2

New Contributors

• @onedr0p made their first contribution in #4322
• @SimonKienzler made their first contribution in #4319
• @bford-evs made their first contribution in #4380
• @franzudev made their first contribution in #4389
• @userbradley made their first contribution in #4373
• @Jeremy-Boyle made their first contribution in #4210
• @IntegralProgrammer made their first contribution in #4274
• @jonas-budde made their first contribution in #4415
• @khuedoan made their first contribution in #4346
• @omerap12 made their first contribution in #4405
• @ilyesAj made their first contribution in #4436
• @jeremy-albuixech made their first contribution in #4444
• @leonardocaylent made their first contribution in #4296
• @PseudoResonance made their first contribution in #4324
• @ebachle made their first contribution in #4437
• @mfreeman451 made their first contribution in #4449
• @ProbstenHias made their first contribution in #4441
• @DrFaust92 made their first contribution in #4456
• @rhjensen79 made their first contribution in #4474

Full Changelog: v0.14.1...v0.14.2

external-dns-helm-chart-1.14.4

Added

• Added support for setting dnsConfig. (#4265) @davhdavh
• Added support for DNSEndpoint CRD. (#4322) @onedr0p

Changed

• Updated ExternalDNS OCI image version to v0.14.1. (#4357) @stevehipwell

v0.14.1

What's Changed

• docs: add reference to adguard webhook provider by @muhlba91 in #4030
• Update azure.md by @sesoldi in #4009
• add initial support for gw apis 1.0.0 GA by @larivierec in #4019
• build(deps): bump the dev-dependencies group with 3 updates by @dependabot in #4028
• add stackit webhook to readme by @PatrickKoss in #4029
• Add org.opencontainers.image.source label to container image by @robinschneider in #4022
• bump kustomize version to v0.14.0 by @Raffo in #4024
• OCI Provider private zone and workload identity support by @anders-swanson in #3995
• RFC2136: Allow multiple zones by @CRASH-Tech in #3976
• chore(chart): Updated GH workflows by @stevehipwell in #4010
• fix: dynamodb registry when statements over 25 by @danie1sullivan in #4021
• Allow to configure revisionHistoryLimit on the K8s Deployment resource by @arnisoph in #4008
• chore: Bump kingpin/v2 dep by @mrueg in #4033
• Update all image versions in documentation by @Raffo in #4037
• updated various broken link in ultradns tutorial by @kundan2707 in #3794
• Make --ignore-hostname-annotation flag more consistent by @johngmyers in #3964
• service source uses externalIPs in ExternalName type if available by @dromie in #4007
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #4046
• fix(google): ensure trailing dot for SRV records by @siliconsheep in #4048
• oracle provider: dns zone cache by @anders-swanson in #4049
• fix(httpProxy): drop status==valid filter by @nefelim4ag in #3978
• doc: added --infoblox-view argument to Infoblox documentation by @tanerm in #4036
• fix: regression on scaleway provider in 0.14.0 by @M0NsTeRRR in #4039
• Add GleSYS to the readme for webhooks by @glesys-andreas in #4054
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #4057
• feat: make webhook httpapi reusable by @mrueg in #4065
• Make routegroup client IPv6 compatible by @mikkeloscar in #4068
• doc: fix link to ionos webhook provider by @akrieg-ionos in #4031
• feat(chart): Added complex provider support by @stevehipwell in #4085
• chore: update 45 go modules dependancies by @mloiseleur in #4088
• webhook: Move httpapi into own package by @mrueg in #4084
• doc: Add netcup webhook provider by @mrueg in #4095
• build(deps): bump the dev-dependencies group with 3 updates by @dependabot in #4097
• update to add il-central-1 by @theloneexplorerquest in #4093
• Add readme bizflycloud webhook provider by @huyduong2792 in #4079
• fix: Allow revisionHistoryLimit to be set to 0 by @bodgit in #4053
• helm: Avoid unnecessary pod restart on each helm chart version by @jkroepke in #4103
• Correct typo from 'Kuberntes' to 'Kubernetes' by @jongwooo in #4118
• build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #4123
• cleanup: remove dead code ((Create|Update|Delete)Records functions in AWS, Google, DNSimple) by @mloiseleur in #4129
• ci: remove confusing-naming property by @PascalBourdier in #4116
• chore: fix code comment by @tanujd11 in #4131
• fix: include cloudflare error in metrics and logs by @danie1sullivan in #4082
• gateway-api: fix wildcard matching by @abursavich in #4124
• build(deps): bump the dev-dependencies group with 23 updates by @dependabot in #4134
• Hetzner webhook provider readme link by @mconfalonieri in #4051
• Fix timeout for traefik-proxy source by @k8r-io in #4076
• build(deps): bump the dev-dependencies group with 7 updates by @dependabot in #4144
• fix: remove useless functions by @PascalBourdier in #4115
• fix(ambassador): don't resolve LB hostname by @fad3t in #4092
• doc(azure): shows how to use userAssignedIdentityID with clientId in azure.json by @thesse1 in #4133
• build(deps): bump the dev-dependencies group with 4 updates by @dependabot in #4146
• webhook: Fix metric name and add request gauges by @mrueg in #4078
• build(deps): bump the dev-dependencies group with 2 updates by @dependabot in #4145
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #4154
• fix: heritage txt record was not able to be created for txt record by @tanujd11 in #4140
• build(deps): bump the dev-dependencies group with 9 updates by @dependabot in #4155
• fix(istio): support for ExternalIPs in Istio resources by @KarstenSiemer in #4094
• Update rfc2136 provider to split out changes per zone by @gregsidelinger in #4107
• Exoscale provider optimization by @kobajagi in #4071
• fix: godaddy - rate limiter add one token every second by @nefelim4ag in #4087
• feat(helm-chart): Allow configuration of ipFamilyPolicy by @dongjiang1989 in #4153
• chore(chart): Deprecated secretConfiguration by @stevehipwell in #4161
• feat: support webhook provider in Chart by @mloiseleur in #4032
• feat(helm-chart): Released chart for v0.14.0 by @appkins in #4073
• chore(chart): Fixed chart changelog by @stevehipwell in #4168
• fix(pdns): provider implicitly changes CNAME to ALIAS by @tmaroschik in #4162
• fix(chart): Fix webhook install failure by @gabe565 in #4173
• fix: provide possibility to have a soft error mode by @szuecs in #4166
• [helm] Allow tpl in provider again by @jkroepke in #4180
• Fix args for webhook deployment by @webwurst in #4202
• add RBAC fix to namespaces - get, watch, list to each gateway-*route by @orenlevi111 in #4205
• chore: Released chart v1.14.3 by @stevehipwell in #4208
• build(deps): bump the dev-dependencies group with 24 updates by @dependabot in #4227
• Fix "workload identity" spelling by @gdubicki in #4201
• feat(aws-provider): create flag to support sub-domains match parent by @thiagoluiznunes in #4236
• Change coredns testing to fix failing tests by @pascalgn in #4245
• Validate AWS record values size during batch set generation by @megum1n in #4126
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in https://github.com/kubernetes-sigs/external-d...

external-dns-helm-chart-1.14.3

Fixed

• Fixed args for webhook deployment. (#4202) @webwurst
• Fixed support for gateway-grpcroute, gateway-tlsroute, gateway-tcproute & gateway-udproute. (#4205) @orenlevi111
• Fixed incorrect implementation for setting the automountServiceAccountToken. (#4208) @stevehipwell

external-dns-helm-chart-1.14.2

Fixed

• Restore template support in .Values.provider and .Values.provider.name

external-dns-helm-chart-1.14.1

Fixed

• Fixed webhook install failure: "http-webhook-metrics": must be no more than 15 characters. (#4173) @gabe565

external-dns-helm-chart-1.14.0

Added

• Added the option to explicitly enable or disable service account token automounting. (#3983) @gilles-gosuin
• Added the option to configure revisionHistoryLimit on the K8s Deployment resource. (#4008) @arnisoph
• Added support for webhook providers, as a sidecar. (#4032 @mloiseleur
• Added the option to configure ipFamilyPolicy and ipFamilies of external-dns Service. (#4153) @dongjiang1989

Changed

• Avoid unnecessary pod restart on each helm chart version. (#4103) @jkroepke
• Updated ExternalDNS OCI image version to v0.14.0. (#4073) @appkins

Deprecated

• The secretConfiguration value has been deprecated in favour of creating secrets external to the Helm chart and configuring their use via the extraVolumes & extraVolumeMounts values. (#4161) @stevehipwell

v0.14.0

Important changes

This is the first release to officially support the new WebHook provider that will allow to extend ExternalDNS in a new way out of tree. Please refer to https://github.com/kubernetes-sigs/external-dns/blob/v0.14.0/docs/tutorials/webhook-provider.md for more information .

What's Changed

• feat(helm-chart): Released chart for v0.13.6 by @stevehipwell in #3917
• update kustomization.yaml with v0.13.6 by @Raffo in #3923
• fix(linode): don't try to create existing records by @wbh1 in #3903
• build(deps): bump the dev-dependencies group with 2 updates by @dependabot in #3914
• feat: upgrade ExternalDNS to go 1.21 by @mloiseleur in #3922
• Add johngmyers as approver by @johngmyers in #3931
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #3932
• fix: nodePort #2704 - publish ready endpoints by @nefelim4ag in #3447
• fix: filter peering zones in google provider by @itspngu in #3690
• Filter out entire endpoint if it ends up without targets after filtering in targetFilterSource by @BadLiveware in #3451
• Allow annotation target override on gateway by @BadLiveware in #3452
• Fix planning for multi-cluster dual stack record types by @cronik in #3747
• chore(providers): allow AdjustEndpoints to return error by @johngmyers in #3911
• [TXT Registry] Fix Records() case handling by @Sewci0 in #3912
• Support GoDaddy domains with PENDING_DNS_ACTIVE status by @m-adawi in #3889
• feat(azure): add AAAA records support by @jbpaux in #3908
• Document the Service source by @johngmyers in #3913
• Gandi provider: refactor tests to be more readable, robusts, and extensible; and minor fixes by @gfaugere in #3893
• Add support for multiple gloo namespaces in one External DNS instance by @megum1n in #3480
• Move seanmalloy to emeritus_approvers by @johngmyers in #3935
• Represent AWS Alias records as record type A by @johngmyers in #3910
• Document the Gateway sources by @johngmyers in #3936
• Add --exclude-record-types flag by @johngmyers in #3748
• Refactor setting the "resource" label into endpointsForHostname by @johngmyers in #3762
• Remove dependency on dnscontrol by @TomOnTime in #3941
• Document where OWNERS file should be synced by @johngmyers in #3937
• Webhook provider by @Raffo in #3063
• Use ServiceIP for ClusterIP Services with internal-hostname annotation by @johngmyers in #3938
• Support --label-filter for node source by @johngmyers in #3940
• Add --webhook-server flag for running as a webhook server by @johngmyers in #3957
• Implement target annotation for more sources by @johngmyers in #3944
• Clarified documentation for Pi-hole DNS provider by @hotspoons in #3963
• Refactor getTTLFromAnnotations() to not return error by @johngmyers in #3939
• AWSSD: Utilize DiscoverInstances instead of ListInstances by @voro015 in #2506
• document there are four ways of configuring access by @femnad in #3969
• fix: parentheses typo on cli help by @mloiseleur in #3968
• Add external_dns_controller_last_reconcile_timestamp_seconds metric by @gozer in #3340
• fix(azure): sovereign cloud support by @jbpaux in #3942
• Remove the --run-aws-provider-as-webhook flag by @johngmyers in #3962
• build(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 by @dependabot in #3984
• fix case of userAssignedIdentityID field by @femnad in #3989
• Add support for NS records in the Linode provider by @julsemaan in #3987
• [TXT Registry] Make the nonce stable when generating delete records by @Sewci0 in #3901
• Add mloiseleur to reviewer group by @Raffo in #3700
• Allow opt-out of service account token automounting by @gilles-gosuin in #3983
• Update Scaleway provider to support config files by @bakhtin in #4002
• build(deps): bump google.golang.org/grpc from 1.56.2 to 1.56.3 by @dependabot in #4004
• feat: add support for external IP in ambassador host source by @fad3t in #3734
• docs: Inform the situation on webhook provider by @mloiseleur in #3991

Docker image

registry.k8s.io/external-dns/external-dns:v0.14.0

New Contributors

• @itspngu made their first contribution in #3690
• @BadLiveware made their first contribution in #3451
• @m-adawi made their first contribution in #3889
• @jbpaux made their first contribution in #3908
• @gfaugere made their first contribution in #3893
• @TomOnTime made their first contribution in #3941
• @hotspoons made their first contribution in #3963
• @femnad made their first contribution in #3969
• @gozer made their first contribution in #3340
• @julsemaan made their first contribution in #3987
• @gilles-gosuin made their first contribution in #3983
• @bakhtin made their first contribution in #4002
• @fad3t made their first contribution in #3734

Full Changelog: v0.13.6...v0.14.0

external-dns-helm-chart-1.13.1

Added

• Added RBAC for Traefik to ClusterRole. (#3325) @ThomasK33
• Added support for init containers. (#3325) @calvinbui

Changed

• Disallowed privilege escalation in container security context and set the seccomp profile type to RuntimeDefault. (#3689) @nrvnrvn
• Updated ExternalDNS OCI image version to v0.13.6. (#3917) @stevehipwell

Removed

• Removed RBAC rule for already removed contour-ingressroute source. (#3764) @johngmyers

v0.13.6

Important notes

• Users upgrading from versions < v0.12.0 with the txt registry (--registry=txt) to this release should run v0.13.5 at least once (--once) to avoid #3876
• There was a change to the Docker image which is now built with ko and based on a distroless image.

For other important info, please refer to the next section.

What's Changed

• docs: Update deprecated apiVersions by @Antvirf in #3646
• Bump kustomize version to latest (v0.13.5) by @Raffo in #3642
• Bump versions in docs for v0.13.5 by @Raffo in #3643
• feat(chart): updated chart to ExternalDNS v0.13.5 by @GMartinez-Sisti in #3661
• build(deps): bump github.com/IBM-Cloud/ibm-cloud-cli-sdk from 1.0.0 to 1.1.0 by @dependabot in #3666
• Define Labels type and JSON tags for ProviderSpecific fields by @aruneshpa in #3456
• Remove roadmap section from README.md by @johngmyers in #3653
• Remove unnecessary Route53 code by @johngmyers in #3669
• Simplify filter interfaces by @johngmyers in #3660
• Very minor typo Update to azure.md by @dmealo in #3594
• Upgrade ExternalDNS to go 1.20 by @mloiseleur in #3673
• refactor: use always fmt.Errorf("...: %w", err), instead of %s or %v by @szuecs in #3677
• Enable dependabot grouped updates by @Raffo in #3678
• Improve registry documentation by @johngmyers in #3652
• Add johngmyers to reviewers by @johngmyers in #3664
• build(deps): bump the dev-dependencies group with 4 updates by @dependabot in #3679
• Manual grouped dependency upgrade by @Raffo in #3682
• chore: Fixed gh workflow approve by @stevehipwell in #3691
• Provider GoDaddy fix domain update by @nefelim4ag in #3427
• Update dependencies that has vulnerabilities by @szuecs in #3693
• Gloo: Add support for listener.metadataStatic by @megum1n in #3476
• Add support for Traefik 2's IngressRoute, IngressRouteTCP and IngressRouteUDP by @ThomasK33 in #3055
• Replace deprecated command with environment file by @jongwooo in #3698
• feat(chart): comply with Pod Security Standards by @nrvnrvn in #3689
• Route53 update configuration of target health checks by @johngmyers in #3674
• fix: extdns crashes when virtual service points to nonexistent … by @rumstead in #3686
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #3701
• Handle migration to the new TXT format: use ForceUpdate strategy by @mcharriere in #3635
• build(deps): bump dev-dependencies group with 41 updates by @mloiseleur in #3697
• minor fixes to the scaleway provider by @Sh4d1 in #2928
• Add DynamoDB registry implementation by @johngmyers in #3648
• Update aws IAM policy example by @jalaziz in #3723
• create an alias when record in a zone another than the target by @epollia in #3338
• Document annotations by @johngmyers in #3729
• Fix bug in the civo provider to avoid infinite record creation by @alejandrojnm in #3687
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #3730
• Add no-change info log for cloudflare provider by @aoz-turk in #3629
• Refactor some Service code by @johngmyers in #3728
• fix: scaleway documentation, remove SCW_DEFAULT_ORGANIZATION_ID by @gugdewescale in #3282
• Added traefik-proxy rules to helm chart by @ThomasK33 in #3325
• [AWS] Adjust TTL for alias records by @Sewci0 in #3738
• Suppress dependabot updates for OpenShift by @johngmyers in #3739
• helm: Don't suppress configuration for registries other than TXT by @johngmyers in #3736
• support cnames and aaaa for default-targets by @cgroschupp in #3745
• use only tags with prefix v for version determination by @cgroschupp in #3760
• Remove flags and documentation for removed contour-ingressroute source by @johngmyers in #3764
• fix: update plural client that includes license by @davidspek in #3779
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #3777
• Add serialization/deserialization support to DomainFilter by @johngmyers in #3758
• Refactor Provider to require DomainFilter by @johngmyers in #3711
• fix img dir by @liupeng0518 in #3786
• Fix domain filter to fix build by @Raffo in #3804
• chore(ci): fix storage use, go version and lint job by @mloiseleur in #3829
• always use tcp for rfc2136 by @Protryon in #3837
• fix clean apk cache directory by @fougner in #3656
• fix: pdns logging by @M0NsTeRRR in #3811
• Tagget parameter TXTEncryptAESKey as secure by @HansK-p in #3791
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #3831
• Update Dockerfile for libssl3 and libcrypto3 CVE's by @nshelke777 in #3783
• doc: Add example of setting up traefik IngressRoute with externalDNS annotations by @anthonycorbacho in #3853
• build(deps): bump dependencies (26 updates) by @mloiseleur in #3824
• helm: support initContainers by @calvinbui in #3838
• [TXT Registry] Fix handling of records produced by toNewTXTName in toEndpoint by @Sewci0 in #3724
• Remove PropertyValuesEqual method from Provider interface by @johngmyers in #3702
• Migrate metadata from TXT to DynamoDB registries by @johngmyers in #3726
• Fix reconciliation of provider-specific properties by @johngmyers in #3863
• fix(infoblox): set view and zone query parameters by @cronik in #3560
• feat(ovh): add cache based on DNS zone SOA value by @rbeuque74 in #3026
• Bump the timeout for golangci-lint by @johngmyers in #3865
• exoscale provider: migrate to exoscale API v2 by @kobajagi in #2917
• Add AWS API gateway endpoint zoneId mappings by @avi-08 in #3826
• feat: add support for ingress backed istio gateways by @DP19 in #3842
• fix!: align PDNS provider by removing MatchParent by @matusf in #3869
• loop through all hosted zones to match the domain record by @allurisravanth in #3695
• Build image with ko by @johngmyers in #3835
• Fixes to staging image build by @johngmyers in #3899
• aws: add ap-southeast-4 region by @jwitrick in #3897
• fix: remove useless warning log messages for instrumented_http.Transport by @mloiseleur in h...