External (multiple domain names )

[CrnaStrela94]

can anybody help me and explain, i got cluster up and running but I'm not able to figure out how to use flux to add multiple domain names, at the moment I'm able to host one domain name with multiple subdomains but how can i host multiple domain names, and is there a way to use flux or any other part of the template to add more domain names, i don't want to manually add domains in cluster tried it and it works but when flux get updated from git repo the cluster resets all my setting so I'm searching for the way to add them thru git repo

I'm sorry if this is wrong place to aske but i tried everything and still not successful. ty all for any info

[onedr0p]

i don't want to manually add domains in cluster tried it and it works but when flux get updated from git repo the cluster resets all my setting so I'm searching for the way to add them thru git repo

Apologies but this comment makes me think you should get more familiar with the layout, tooling and paradigms used here. Your GitHub repository is the desired state of your Kubernetes cluster. Add, update or remove YAML files by commiting and pushing them to your repo, then Flux will apply them. Or even better, create a new branch of your main branch, make you changes to the YAML files then open a PR so that the flux-local GitHub workflow can test/verify your changes and post diffs to the PR with the changes Flux will make. Then merge it when the changes look good and verify they are by poking around the cluster.

What you did is known as a "dirty edit", meaning the changes you made to the cluster were not tracked in Git. Flux will revert changes you make to the resources it knows about because your desired state is Git, not your dirty edits. If Flux does not know about those resources, it won't touch them.

[CrnaStrela94]

yes that part i learned the hard way :), could u point me to right file to make the changes for the domain name / adding more, I'm not sure exactly where i need to add the domains, because the script is using secret-domain and there is my current domain name i just need a clue where to make the changes, i have hit the wall for the moment ben one same issue for the past 4 weeks
and ty for the response

[onedr0p]

I can give a high level overview as there are a lot of resources to touch to make it happen and I feel this is a bit outside normal usage. Hopefully you can fill in the rest thru trial and error and reading documentation.

• You may need to re-generate your cloudflare API token to include the scope for your second domain if it only has access to your${SECRET_DOMAIN} and update all the sops secrets that reference it.
• You will need to create a new entry in the cluster-secrets.sops.yaml, call it SECRET_DOMAIN_2 and give it your other domain.
• Update the ClusterIssuer YAML file and change the dnsZones to dnsZones: ["${SECRET_DOMAIN}","${SECRET_DOMAIN_2}"]
• For internal DNS to work, in the k8s-gateway HelmRelease file you will need to add the second domain in the domain Helm value: domain: "${SECRET_DOMAIN},${SECRET_DOMAIN_2}"
• This is probably the hardest part to switch to. Since you are using two domains, you cannot attach the wildcard cert to the ingress-nginx controllers like I have it with .controller.extraArgs.default-ssl-certificate and instead use annotations on your ingresses to generate certificates as described here (Note the cert-manager.io/cluster-issuer annotation and tls block in that doc.).
• You will need to update the cloudflared config.yaml file and add two list items with your new domain like the ones for ${SECRET_DOMAIN} that are already there.
• In the external-dns HelmRelease you will need to add the second domain to the domain filter: domainFilters: ["${SECRET_DOMAIN}","${SECRET_DOMAIN_2}"]

I probably left something out so YMMV

[CrnaStrela94]

TY u just made my life easier