@@ -205,26 +205,20 @@ Create `pihole-values.yaml`. This exposes Pi-hole's DNS (port 53) as a Tailscale
205205` ` ` yaml
206206# pihole-values.yaml
207207admin:
208- existingSecret: "pihole-admin-secret"
209- passwordKey: password
210-
208+ existingSecret: "pihole-admin-secret" # Name of the K8s secret created above
209+ passwordKey: password # Key within the secret
211210extraEnvVars:
212211 FTLCONF_dns_listeningMode: 'all'
213-
214212serviceDns:
215213 type: LoadBalancer
216- loadBalancerClass: tailscale
214+ loadBalancerClass: tailscale # Expose DNS service via Tailscale
217215 port: 53
218216 annotations:
219- # USER: Replace with your desired Tailscale FQDN for Pi-hole DNS
220- "tailscale.com/hostname": "pihole-dns"
221-
217+ "tailscale.com/hostname": "pihole-dns" # USER: Replace with your desired Tailscale FQDN for Pi-hole DNS
222218serviceWeb:
223219 type: ClusterIP # Keep web UI internal
224-
225220ingressWeb:
226221 enabled: false # Disable Pi-hole's ingress if managing access differently
227-
228222podDnsConfig:
229223 enabled: false # Avoid conflicts with cluster DNS
230224` ` `
@@ -247,37 +241,30 @@ Create `external-dns-pihole-values.yaml` to configure ExternalDNS for your Pi-ho
247241fullnameOverride: external-dns-pihole
248242image:
249243 tag: v0.17.0
250- logLevel: debug # Or info
251244provider: pihole
252-
253245env:
254246 - name: EXTERNAL_DNS_PIHOLE_PASSWORD
255247 valueFrom:
256248 secretKeyRef:
257249 name: pihole-admin-secret # Match secret name for Pi-hole
258- key: password # Match key in secret
259-
250+ key: password # Match key in secret
260251extraArgs:
261252 # USER: Adjust Pi-hole server URL if service name/namespace differs.
262253 # Points to Pi-hole web admin (port 80 internally).
263- # Assumes Pi-hole in 'pihole-ns ', release 'pihole' (service: 'pihole-web').
254+ # Assumes Pi-hole in 'tailscale ', release 'pihole' (service: 'pihole-web').
264255 - --pihole-server=http://pihole-web.tailscale
265256 - --pihole-api-version=6
266257 # USER: Customize label selector to match your Gateway resources.
267258 - --gateway-label-filter=external-dns==example # Matches label in main guide's Gateway
268-
269259policy: sync # Or "upsert-only"
270-
271260sources:
272261 - gateway-httproute # For hostnames in HTTPRoutes attached to labeled Gateways
273- # - service # To create DNS for annotated K8s services
262+ - service # To create DNS for annotated K8s services
274263 # - ingress # If using Ingress resources
275-
276264# USER: Define domain(s) for ExternalDNS to manage in Pi-hole (e.g., "example.com").
277265domainFilters:
278266 - "example.com"
279267 # - "another.internal.domain"
280-
281268# USER: Customize for TXT record identification.
282269txtOwnerId: "my-k8s-cluster-pihole"
283270txtPrefix: "k8s-edns-"
0 commit comments