Merge branch 'kubernetes-sigs:master' into fix/skip-invalid-endpoint-hostnames

Author: SetagGnaw

README.md

@@ -116,7 +116,7 @@ Now you can experiment and watch how ExternalDNS makes sure that your DNS record
 - Change the desired hostname by modifying the Service's annotation.
 - Recreate the Service and see that the DNS record will be updated to point to the new load balancer IP.
 - Add another Service to create more DNS records.
-- Remove Services to clean up your managed zone.
+- Remove Services to clean up your managed zone (record deletion requires `--policy=sync`; with `--policy=upsert-only` records are never deleted).
 
 </details>
 
@@ -160,6 +160,7 @@ from the usage of any externally developed webhook.
 | Infomaniak            | https://github.com/M0NsTeRRR/external-dns-webhook-infomaniak         |
 | Mikrotik              | https://github.com/mirceanton/external-dns-provider-mikrotik         |
 | Myra Security         | https://github.com/Myra-Security-GmbH/external-dns-myrasec-webhook   |
+| NAVER Cloud Platform  | https://github.com/NaverCloudPlatform/external-dns-navercloud-webhook |
 | Netbird               | https://codeberg.org/ccbash-oss/external-dns-netbird-webhook         |
 | Netcup                | https://github.com/mrueg/external-dns-netcup-webhook                 |
 | Netic                 | https://github.com/neticdk/external-dns-tidydns-webhook              |

charts/external-dns/CHANGELOG.md

@@ -21,6 +21,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add value `.service.enabled` to enable the creation of the Kubernetes service.
 - Add value `replicaCount` to set the number of `external-dns` replicas (bounded to `0` or `1`, since external-dns does not support leader election). [#6503](https://github.com/kubernetes-sigs/external-dns/pull/6503) _@yugstar_
 
+### Changed
+
+- **Breaking:** `policy` no longer defaults to `upsert-only` and is now required. You must set `policy` explicitly to one of `create-only`, `sync`, or `upsert-only`. [#6508](https://github.com/kubernetes-sigs/external-dns/pull/6508) _@mloiseleur_
+
 ### Fixed
 
 - RBAC compliance checkbox for dnsendpoints/status [#6442](https://github.com/kubernetes-sigs/external-dns/pull/6442) _@vflaux_

charts/external-dns/README.md

@@ -132,7 +132,7 @@ If `namespaced` is set to `true`, please ensure that `sources` only contains sup
 | podAnnotations | object | `{}` | Annotations to add to the `Pod`. |
 | podLabels | object | `{}` | Labels to add to the `Pod`. |
 | podSecurityContext | object | See _values.yaml_ | [Pod security context](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.22/#podsecuritycontext-v1-core), this supports full customisation. |
-| policy | string | `"upsert-only"` | How DNS records are synchronized between sources and providers; available values are `create-only`, `sync`, & `upsert-only`. |
+| policy | REQUIRED | `nil` | How DNS records are synchronized between sources and providers; must be set explicitly to one of `create-only`, `sync`, or `upsert-only`. |
 | priorityClassName | string | `nil` | Priority class name for the `Pod`. |
 | provider.name | string | `"aws"` | _ExternalDNS_ provider name; for the available providers and how to configure them see [README](https://github.com/kubernetes-sigs/external-dns/blob/master/charts/external-dns/README.md#providers). |
 | provider.webhook.args | list | `[]` | Extra arguments to provide for the `webhook` container. |

charts/external-dns/ci/ci-values.yaml

@@ -1,5 +1,6 @@
 labelFilter: foo=bar
 managedRecordTypes: []
+policy: upsert-only
 provider:
   name: inmemory
 affinity:

charts/external-dns/tests/common-metadata_test.yaml

@@ -1,4 +1,6 @@
 suite: All resources contains metadata
+set:
+  policy: upsert-only
 templates:
   - "*.yaml"
 release:

charts/external-dns/tests/deployment-config_test.yaml

@@ -1,4 +1,6 @@
 suite: Deployment configuration
+set:
+  policy: upsert-only
 templates:
   - deployment.yaml
 release:

charts/external-dns/tests/deployment-flags_test.yaml

@@ -1,4 +1,6 @@
 suite: Deployment flags configurations
+set:
+  policy: upsert-only
 templates:
   - deployment.yaml
 release:

charts/external-dns/tests/deployment-scheduling_test.yaml

@@ -1,4 +1,6 @@
 suite: Deployment scheduling configuration
+set:
+  policy: upsert-only
 templates:
   - deployment.yaml
 release:

charts/external-dns/tests/json-schema_test.yaml

@@ -1,4 +1,6 @@
 suite: Test json value schema validation
+set:
+  policy: upsert-only
 templates:
   - templates/*
 release:

charts/external-dns/tests/namespace-override_test.yaml

@@ -1,4 +1,6 @@
 suite: namespaceOverride
+set:
+  policy: upsert-only
 templates:
   - "*.yaml"
 release: