Merge remote-tracking branch 'refs/remotes/origin/feat-code-cleanup-0' into feat-code-cleanup-0

* refs/remotes/origin/feat-code-cleanup-0:
  fix(cloudflare): custom hostnames edge-cases causing duplicates (kubernetes-sigs#5183)
  feat(banner): standardize user agent and output (kubernetes-sigs#5154)
  feat: IDNA awareness in the zone finder (kubernetes-sigs#5147)
  chore(deps): bump the dev-dependencies group across 1 directory with 20 updates
  chore(deps): bump renovatebot/github-action
  feat(chart): Update image to v0.16.1
  fix: correct route53 iam
  chore(deps): bump renovatebot/github-action
  feat(ovh): major rewriting of the provider (kubernetes-sigs#5143)
  Add Yandex Cloud Webhook
  chore(openstack designate)!: remove in-tree provider

Author: ivankatliarchuk

.github/workflows/dependency-update.yaml

@@ -17,7 +17,7 @@ jobs:
         uses: actions/[email protected]
       # https://github.com/renovatebot/github-action
       - name: self-hosted renovate
-        uses: renovatebot/[email protected].14
+        uses: renovatebot/[email protected].17
         with:
           # https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication
           token: ${{ secrets.GITHUB_TOKEN }}

Makefile

@@ -88,8 +88,10 @@ IMAGE_STAGING  = gcr.io/k8s-staging-external-dns/$(BINARY)
 REGISTRY      ?= us.gcr.io/k8s-artifacts-prod/external-dns
 IMAGE         ?= $(REGISTRY)/$(BINARY)
 VERSION       ?= $(shell git describe --tags --always --dirty --match "v*")
+GIT_COMMIT    ?= $(shell git rev-parse --short HEAD)
 BUILD_FLAGS   ?= -v
 LDFLAGS       ?= -X sigs.k8s.io/external-dns/pkg/apis/externaldns.Version=$(VERSION) -w -s
+LDFLAGS       += -X sigs.k8s.io/external-dns/pkg/apis/externaldns.GitCommit=$(GIT_COMMIT)
 ARCH          ?= amd64
 SHELL          = /bin/bash
 IMG_PLATFORM  ?= linux/amd64,linux/arm64,linux/arm/v7

README.md

@@ -49,7 +49,6 @@ ExternalDNS allows you to keep selected zones (via `--domain-filter`) synchroniz
 - [CloudFlare](https://www.cloudflare.com/dns)
 - [DigitalOcean](https://www.digitalocean.com/products/networking)
 - [DNSimple](https://dnsimple.com/)
-- [OpenStack Designate](https://docs.openstack.org/designate/latest/)
 - [PowerDNS](https://www.powerdns.com/)
 - [CoreDNS](https://coredns.io/)
 - [Exoscale](https://www.exoscale.com/dns/)
@@ -58,7 +57,7 @@ ExternalDNS allows you to keep selected zones (via `--domain-filter`) synchroniz
 - [RFC2136](https://tools.ietf.org/html/rfc2136)
 - [NS1](https://ns1.com/)
 - [TransIP](https://www.transip.eu/domain-name/)
-- [OVH](https://www.ovh.com)
+- [OVHcloud](https://www.ovhcloud.com)
 - [Scaleway](https://www.scaleway.com)
 - [Akamai Edge DNS](https://learn.akamai.com/en-us/products/cloud_security/edge_dns.html)
 - [GoDaddy](https://www.godaddy.com)
@@ -86,7 +85,7 @@ See PR #3063 for all the discussions about it.
 Known providers using webhooks:
 
 | Provider              | Repo                                                                 |
-|-----------------------|----------------------------------------------------------------------|
+| --------------------- | -------------------------------------------------------------------- |
 | Abion                 | https://github.com/abiondevelopment/external-dns-webhook-abion       |
 | Adguard Home Provider | https://github.com/muhlba91/external-dns-provider-adguard            |
 | Anexia                | https://github.com/ProbstenHias/external-dns-anexia-webhook          |
@@ -109,6 +108,7 @@ Known providers using webhooks:
 | STACKIT               | https://github.com/stackitcloud/external-dns-stackit-webhook         |
 | Unifi                 | https://github.com/kashalls/external-dns-unifi-webhook               |
 | Vultr                 | https://github.com/vultr/external-dns-vultr-webhook                  |
+| Yandex Cloud          | https://github.com/ismailbaskin/external-dns-yandex-webhook/         |
 
 ## Status of in-tree providers
 
@@ -137,7 +137,6 @@ The following table clarifies the current status of the providers according to t
 | CloudFlare | Beta | |
 | DigitalOcean | Alpha | |
 | DNSimple | Alpha | |
-| OpenStack Designate | Alpha | |
 | PowerDNS | Alpha | |
 | CoreDNS | Alpha | |
 | Exoscale | Alpha | |
@@ -146,7 +145,7 @@ The following table clarifies the current status of the providers according to t
 | RFC2136 | Alpha | |
 | NS1 | Alpha | |
 | TransIP | Alpha | |
-| OVH | Alpha | |
+| OVHcloud | Beta | @rbeuque74 |
 | Scaleway DNS | Alpha | @Sh4d1 |
 | UltraDNS | Alpha | |
 | GoDaddy | Alpha | |
@@ -204,12 +203,11 @@ The following tutorials are provided:
 - [NS Record Creation with CRD Source](docs/sources/ns-record.md)
 - [MX Record Creation with CRD Source](docs/sources/mx-record.md)
 - [TXT Record Creation with CRD Source](docs/sources/txt-record.md)
-- [OpenStack Designate](docs/tutorials/designate.md)
 - [Oracle Cloud Infrastructure (OCI) DNS](docs/tutorials/oracle.md)
 - [PowerDNS](docs/tutorials/pdns.md)
 - [RFC2136](docs/tutorials/rfc2136.md)
 - [TransIP](docs/tutorials/transip.md)
-- [OVH](docs/tutorials/ovh.md)
+- [OVHcloud](docs/tutorials/ovh.md)
 - [Scaleway](docs/tutorials/scaleway.md)
 - [UltraDNS](docs/tutorials/ultradns.md)
 - [GoDaddy](docs/tutorials/godaddy.md)

charts/external-dns/CHANGELOG.md

@@ -18,15 +18,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [UNRELEASED]
 
+## [v1.16.0] - 2025-03-20
+
 ### Added
 
-- Added helm testing framework `helm plugin unittest`. ([#5137](https://github.com/kubernetes-sigs/external-dns/pull/5137)) _@ivankatliarchuk_
-- Added ability to generate schema with `helm plugin schema`. ([#5075](https://github.com/kubernetes-sigs/external-dns/pull/5075)) _@ivankatliarchuk_
-- Added `docs/contributing/dev-guide.md#helm-values` guide. ([#5075](https://github.com/kubernetes-sigs/external-dns/pull/5075)) _@ivankatliarchuk_
+- Add helm testing framework `helm plugin unittest`. ([#5137](https://github.com/kubernetes-sigs/external-dns/pull/5137)) _@ivankatliarchuk_
+- Add ability to generate schema with `helm plugin schema`. ([#5075](https://github.com/kubernetes-sigs/external-dns/pull/5075)) _@ivankatliarchuk_
+- Add `docs/contributing/dev-guide.md#helm-values` guide. ([#5075](https://github.com/kubernetes-sigs/external-dns/pull/5075)) _@ivankatliarchuk_
 
 ### Changed
 
 - Regenerate JSON schema with `helm-values-schema-json' plugin. ([#5075](https://github.com/kubernetes-sigs/external-dns/pull/5075)) _@ivankatliarchuk_
+- Update _ExternalDNS_ OCI image version to [v0.16.1](https://github.com/kubernetes-sigs/external-dns/releases/tag/v0.16.1). ([#xxxx](https://github.com/kubernetes-sigs/external-dns/pull/xxxx)) _@stevehipwell_
 
 ## [v1.15.2] - 2025-02-14
 
@@ -238,6 +241,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 RELEASE LINKS
 -->
 [UNRELEASED]: https://github.com/kubernetes-sigs/external-dns/tree/master/charts/external-dns
+[v1.16.0]: https://github.com/kubernetes-sigs/external-dns/releases/tag/external-dns-helm-chart-1.16.0
 [v1.15.2]: https://github.com/kubernetes-sigs/external-dns/releases/tag/external-dns-helm-chart-1.15.2
 [v1.15.1]: https://github.com/kubernetes-sigs/external-dns/releases/tag/external-dns-helm-chart-1.15.1
 [v1.15.0]: https://github.com/kubernetes-sigs/external-dns/releases/tag/external-dns-helm-chart-1.15.0

charts/external-dns/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: external-dns
 description: ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
 type: application
-version: 1.15.2
-appVersion: 0.15.1
+version: 1.16.0
+appVersion: 0.16.1
 keywords:
   - kubernetes
   - externaldns
@@ -21,8 +21,12 @@ maintainers:
 annotations:
   artifacthub.io/changes: |
     - kind: added
-      description: "Added `transportservers` resource to ClusterRole when specifying `f5-transportserver` or `f5-virtualserver` as a source."
-    - kind: fixed
-      description: "Fixed handling of non-string types in `serviceAccount.metadata.annotations` field."
-    - kind: fixed
-      description: "Fixed regression where `affinity.nodeAffinity` was being ignored."
+      description: "Add helm testing framework `helm plugin unittest`."
+    - kind: added
+      description: "Add ability to generate schema with `helm plugin schema`."
+    - kind: added
+      description: "Add `docs/contributing/dev-guide.md#helm-values` guide."
+    - kind: changed
+      description: "Regenerate JSON schema with `helm-values-schema-json' plugin."
+    - kind: changed
+      description: "Update _ExternalDNS_ OCI image version to [v0.16.1](https://github.com/kubernetes-sigs/external-dns/releases/tag/v0.16.1)."

charts/external-dns/README.md

@@ -1,6 +1,6 @@
 # external-dns
 
-![Version: 1.15.2](https://img.shields.io/badge/Version-1.15.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.15.1](https://img.shields.io/badge/AppVersion-0.15.1-informational?style=flat-square)
+![Version: 1.16.0](https://img.shields.io/badge/Version-1.16.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.16.1](https://img.shields.io/badge/AppVersion-0.16.1-informational?style=flat-square)
 
 ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
 
@@ -27,7 +27,7 @@ helm repo add external-dns https://kubernetes-sigs.github.io/external-dns/
 After you've installed the repo you can install the chart.
 
 ```shell
-helm upgrade --install external-dns external-dns/external-dns --version 1.15.2
+helm upgrade --install external-dns external-dns/external-dns --version 1.16.0
 ```
 
 ## Providers

docs/flags.md

@@ -49,7 +49,7 @@
 | `--[no-]traefik-disable-legacy` | Disable listeners on Resources under the traefik.containo.us API Group |
 | `--[no-]traefik-disable-new` | Disable listeners on Resources under the traefik.io API Group |
 | `--nat64-networks=NAT64-NETWORKS` | Adding an A record for each AAAA record in NAT64-enabled networks; specify multiple times for multiple possible nets (optional) |
-| `--provider=provider` | The DNS provider where the DNS records will be created (required, options: akamai, alibabacloud, aws, aws-sd, azure, azure-dns, azure-private-dns, civo, cloudflare, coredns, designate, digitalocean, dnsimple, exoscale, gandi, godaddy, google, ibmcloud, inmemory, linode, ns1, oci, ovh, pdns, pihole, plural, rfc2136, scaleway, skydns, tencentcloud, transip, ultradns, webhook) |
+| `--provider=provider` | The DNS provider where the DNS records will be created (required, options: akamai, alibabacloud, aws, aws-sd, azure, azure-dns, azure-private-dns, civo, cloudflare, coredns, digitalocean, dnsimple, exoscale, gandi, godaddy, google, ibmcloud, inmemory, linode, ns1, oci, ovh, pdns, pihole, plural, rfc2136, scaleway, skydns, tencentcloud, transip, ultradns, webhook) |
 | `--provider-cache-time=0s` | The time to cache the DNS provider record list requests. |
 | `--domain-filter=` | Limit possible target zones by a domain suffix; specify multiple times for multiple domains (optional) |
 | `--exclude-domains=` | Exclude subdomains (optional) |
@@ -107,6 +107,7 @@
 | `--inmemory-zone=` | Provide a list of pre-configured zones for the inmemory provider; specify multiple times for multiple zones (optional) |
 | `--ovh-endpoint="ovh-eu"` | When using the OVH provider, specify the endpoint (default: ovh-eu) |
 | `--ovh-api-rate-limit=20` | When using the OVH provider, specify the API request rate limit, X operations by seconds (default: 20) |
+| `--[no-]ovh-enable-cname-relative` | When using the OVH provider, specify if CNAME should be treated as relative on target without final dot (default: false) |
 | `--pdns-server="http://localhost:8081"` | When using the PowerDNS/PDNS provider, specify the URL to the pdns server (required when --provider=pdns) |
 | `--pdns-server-id="localhost"` | When using the PowerDNS/PDNS provider, specify the id of the server to retrieve. Should be `localhost` except when the server is behind a proxy (optional when --provider=pdns) (default: localhost) |
 | `--pdns-api-key=""` | When using the PowerDNS/PDNS provider, specify the API key to use to authorize requests (required when --provider=pdns) |

docs/tutorials/aws.md

@@ -30,7 +30,7 @@ Hosted Zone IDs.
       "Action": [
         "route53:ListHostedZones",
         "route53:ListResourceRecordSets",
-        "route53:ListTagsForResource"
+        "route53:ListTagsForResources"
       ],
       "Resource": [
         "*"