apiVersion: v2
name: bp-external-dns
version: 1.1.2
description: |
  Catalyst-curated Blueprint umbrella chart for ExternalDNS. Depends on the
  upstream `external-dns` chart (kubernetes-sigs) as a Helm subchart so
  `helm dependency build` pulls the upstream payload into this artifact;
  the Catalyst overlay templates in templates/ (NetworkPolicy,
  ServiceMonitor, ExternalSecret) sit alongside the upstream subchart and
  Helm renders both at install time. Catalyst-curated values flow into the
  upstream subchart under the `external-dns:` key in values.yaml.

  ExternalDNS synchronizes Kubernetes Gateway/Service/Ingress resources with
  the per-Sovereign PowerDNS authoritative server (and any external cloud DNS
  providers — Cloudflare, Hetzner DNS, Route53, GCP, Azure, Dynadot via the
  Catalyst webhook). Geo + health-checked failover responses are owned by
  PowerDNS lua-records, NOT by ExternalDNS. See platform/external-dns/README.md
  and docs/MULTI-REGION-DNS.md.
type: application
keywords: [catalyst, blueprint, external-dns, dns]
maintainers:
  - name: OpenOva Catalyst
    email: catalyst@openova.io

# Upstream chart pulled in as a Helm subchart so `helm dependency build`
# bundles it into the OCI artifact. Pinned to kubernetes-sigs/external-dns
# 1.15.2 (appVersion 0.15.1) — last 1.15.x release, validated against
# Kubernetes 1.31. Per docs/INVIOLABLE-PRINCIPLES.md #4 (never hardcode) the
# version is operator-bumpable via PR + Blueprint release; mirrors
# bp-cilium / bp-cert-manager / bp-powerdns wrapper shape.
dependencies:
  - name: external-dns
    version: "1.15.2"
    repository: "https://kubernetes-sigs.github.io/external-dns/"
