You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- host should be the IP of your master DNS server.
139
142
- tsig-secret should be changed to match your secret.
140
143
- tsig-keyname needs to match the keyname you used (if you changed it).
@@ -309,7 +312,7 @@ You'll want to configure `external-dns` similarly to the following:
309
312
310
313
### Secure Updates Using RFC3645 (GSS-TSIG)
311
314
312
-
### DNS-side configuration
315
+
####DNS-side configuration
313
316
314
317
1. Create a DNS zone
315
318
2. Enable secure dynamic updates for the zone
@@ -318,7 +321,7 @@ You'll want to configure `external-dns` similarly to the following:
318
321
If you see any error messages which indicate that `external-dns` was somehow not able to fetch
319
322
existing DNS records from your DNS server, this could mean that you forgot about step 3.
320
323
321
-
#### Kerberos Configuration
324
+
#####Kerberos Configuration
322
325
323
326
DNS with secure updates relies upon a valid Kerberos configuration running within the `external-dns` container. At this time, you will need to create a ConfigMap for the `external-dns` container to use and mount it in your deployment. Below is an example of a working Kerberos configuration inside a ConfigMap definition. This may be different depending on many factors in your environment:
324
327
@@ -356,8 +359,7 @@ data:
356
359
yourdomain.com = YOUR-REALM.COM
357
360
.yourdomain.com = YOUR-REALM.COM
358
361
```
359
-
In most cases, the realm name will probably be the same as the domain name, so you can simply replace
360
-
`YOUR-REALM.COM` with something like `YOURDOMAIN.COM`.
362
+
In most cases, the realm name will probably be the same as the domain name, so you can simply replace `YOUR-REALM.COM` with something like `YOURDOMAIN.COM`.
361
363
362
364
Once the ConfigMap is created, the container `external-dns` container needs to be told to mount that ConfigMap as a volume at the default Kerberos configuration location. The pod spec should include a similar configuration to the following:
363
365
@@ -376,7 +378,7 @@ Once the ConfigMap is created, the container `external-dns` container needs to b
376
378
...
377
379
```
378
380
379
-
#### `external-dns` configuration
381
+
##### `external-dns` configuration
380
382
381
383
You'll want to configure `external-dns` similarly to the following:
0 commit comments