fix(k8s.tjo.cloud): external dns

.env.encrypted

@@ -1,15 +1,15 @@
-TF_VAR_tailscale_apikey=ENC[AES256_GCM,data:vGD4TTWRI3DTHKGrDZ7caCB7pDwzrDib/Y+GYFMIEGt3c4PuQaNpLqfIombJvvDTk8A0Wc6HtVz8mzKNHm8=,iv:M5h3s0TuNDKBaAYZ3d/Ff4+dCHirP/GMZX4NkQyzIt8=,tag:LtokX79W6SKaZusx/ClkIw==,type:str]
+TF_VAR_tailscale_apikey=ENC[AES256_GCM,data:zuGzLIwidsaGJAuzpe9oVMQediipHorOiMZR+mtsBj4MVUSkJt0+Hv/9KanQ/x93WPggL9dHr4EqfEvyOv0=,iv:nJbN1N5IrU60KTWkKpeDaeuaw6f1hoj85Md5kYWO2dc=,tag:KfdepFTJFAT01Jfw5UIfUA==,type:str]
-TF_VAR_oidc_username=ENC[AES256_GCM,data:3f4vUxTZ4+34GpJyaT3ktqajHr9vVB8W/PFK27r7rP0bpXPs,iv:HPGonXXsgFzTK/XY/ORC6Nw+um0tNvFwghTbteOs41o=,tag:M0yxpk6n4vx92xtQIv3i9A==,type:str]
+TF_VAR_oidc_username=ENC[AES256_GCM,data:tiVs6bJz2Wlp5rFOpP55rboTjBxmuWSE1N2GeyI/9dKMZo9F,iv:PQvmRppeUGYwkCQcGWZ/X4680KVQ4LpcUaFoTnR5PyI=,tag:UddxOy+3dqKsKsl8dM+Mvg==,type:str]
-TF_VAR_oidc_password=ENC[AES256_GCM,data:brND11Sxa8uK9tlMfSWytYeZ4Y3eO2QDGQ0Cu/toHE2b66zNwZEBR5IvZrlWtjkuQfDiWjajMjYSNcW6zP8=,iv:GdhuDI+05H23I0UKS5StY2V9CBWRwPaT1GsqsLZbIlk=,tag:eWS4ZDMzMpl4xcRpbuhAzQ==,type:str]
+TF_VAR_oidc_password=ENC[AES256_GCM,data:IKIOk/NDwxU6okebzwm2DprXWEblCQai3gu3RndfkQ034Mpl8a3yVzcplrYP/JNbnDdHKaDg7hF85UAhZoQ=,iv:1CsxrduE9SMqyTROZpkxewRKQJDO+dACEj5OcyB8hj0=,tag:idqIWO8Io1IJIVSAt++OlQ==,type:str]
-TF_VAR_oidc_issuer_url=ENC[AES256_GCM,data:jujlu91XuI/LhVj/u0eaWHKurUu8CzCqR4G3YCxKIGCmKwafJ7TkUuqIQ2ceEqC60g==,iv:/qoJXI4FHNFvJtwiJxw3GD63cFp3V4bXMl0eUuGi7/4=,tag:WLwBrN908Ji89cwr2DtD5Q==,type:str]
+TF_VAR_oidc_issuer_url=ENC[AES256_GCM,data:2UJOnU1Ktf7Q1GsQG160K0fZp6/e7Sc4jrY3erQocqgpSWVyNGU2sJMsKG6aoJmxXw==,iv:4QzQlJ0B2i5w4RqIzvIObgmi1szMhvm8VZs5dzYh78w=,tag:O2RaNzb0w7RMLzEjjjzlCQ==,type:str]
-TF_VAR_oidc_client_id=ENC[AES256_GCM,data:24YpuazLQ/mCjvmV8vVoU3RQkIbMfwZKKZ93gqtgpc7cZoNtSYzjl4VC,iv:L1kw2loslUXc4KoQZzZvg5uP+mihRiQ2U8FNr4DL17c=,tag:ImkrNzAdk6rZTOXlHLVQug==,type:str]
+TF_VAR_oidc_client_id=ENC[AES256_GCM,data:N1KSDiuUl6KF5/H3iU1Mw8pVj12LHaU0lbMZdTqiCTc2asSUtkgCCm0Q,iv:FKkJXcWlEyre4YGGQ5/gLzD7pgJwD5T6i99lweyWl5I=,tag:b2cHmuznzRznNWfFvZXnMg==,type:str]
-TF_VAR_digitalocean_token=ENC[AES256_GCM,data:hr5SUNbuorHRkC/j1rorxJ0fjVAiHsFtUDImoFSAxT0iyfzF4KFVuMY7AxjO4wbeQgXLFzzF0JNJvagXGGVDAdpwGN1oGb/fgA==,iv:t1h48svbg074oBO8Az+Gevd2jfwIvevyvLCDAZrW3eY=,tag:NA2Tg63Y0XciJMw/JM+ybw==,type:str]
+TF_VAR_dnsimple_account_id=ENC[AES256_GCM,data:x0Gd82UWEFg=,iv:vmTdc8afg+fDne7GqKKeYmnmFxUdfcTI2DyZ+p1no9k=,tag:EDd6fzhcqGTxe928fSu2qQ==,type:str]
-TF_VAR_dnsimple_token=ENC[AES256_GCM,data:hK5rojr1IaoM67497d5A+0k+yZX2GNB/3xjpc8GdY0IQXpGFxdy8K3rVcR5w,iv:IC7WYcXyqX3Bc7veVmVe8Ox0GLGleUGGs+HCYWqsGIk=,tag:YaiH8dLmoJRskAA9MtVQRw==,type:str]
+TF_VAR_dnsimple_token=ENC[AES256_GCM,data:Xfm0qRFAgo9J2EyXD5+FiylMgit9rUQ3mCzLxAVkEPbHR+UGl4DfS+khG1uW,iv:ynzntkCgWFs62w79p4OGxpQbVaifoiIdKrQohPnis7g=,tag:wHWmoAdf61ufY6LiDgfZww==,type:str]
-TF_VAR_proxmox_token=ENC[AES256_GCM,data:GgqRf5Q5WUsMfm6j4WLBVIOrXDn1FICGFkcAkOEQiJwxfU/WvDOw7otJu+/V9/ergkDlkmk1AbIsKnLcvQ==,iv:CpfMgPl5qaVFdawfld7cOcw4JIvE4TrMQisr0hksCo0=,tag:iEKwAdhN5Slu9UQ85c7SEA==,type:str]
+TF_VAR_proxmox_token=ENC[AES256_GCM,data:69/4ySLnO7/XsK0Dv1K5P7QCfA0YlXbwyECPIAKiGuYuGpa1T9HUbHiXpyZGOQ4z5zZOQ0NFTp1QDc+9gQ==,iv:4CFB2CV/NlM+NHWAmwtDlb2oURm2PPwXeNQRHrwr8e8=,tag:rA7tB5zRo2IGYSHTGgdnfQ==,type:str]
-TF_VAR_authentik_token=ENC[AES256_GCM,data:L3USkiDziZFEGPfAqTaHgn5vtScIg1FHkknCpwDSle4U8ttFrFFFytzE79CtpH3pMRF3FNLHTxnzxMYNChg=,iv:y55nor1SPMFzHmVIsFRsTbZmNsI6urm0pDJLqjAce+Q=,tag:+RCdcree7OCRl+GApVCzCg==,type:str]
+TF_VAR_authentik_token=ENC[AES256_GCM,data:MW2aabg6tW0IWiFoXil7P38YmDrjy8mTL1mZ3U9QGQIcoA+GAoflElmU8B0t4ecz0C4vsBJSa2a/aCzjwz0=,iv:SMstbHG1JS/j+32uP6cxmQBM7ZpcSw6gUYLrsAUVu80=,tag:KOiGCSeklHr2QPo3wB+r2A==,type:str]
-sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdnlnZjB6Y042MWtzZGgw\ncmZzN2RqbHlqbWlHbG5OU0tERHdpUldEMlh3CmFydHVtRDk3SlMweTl0L3VKZlh2\nNEhhZ1oySkY4M1c4c1NHc214T2JVVmcKLS0tIHRYYm1RU016MENXTVpvWWFsYU5l\nQzczVmdtdXRONHVXMGR6UFpLTHNIT2sKdMAQJOWLpkfAptjR9/X6U1ZviwIx1p3n\nB8uqqZ79raaIDDVeWD72ewpGwr+r3WAnVUR8rlX4qitFMs7dGghDKw==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBySHl2bUV1L3pzdjFiR3NY\nbUVhZTlVMXBNZXoyT1JwSUNoeE1LdDlhYzBFCkNFY3ExRjNLMGhQS2FEQWdvK2ww\nNWRnZW85ZjZqQXh0NnhTZDV5RzJFWncKLS0tIDcyYm9SaDFvYVZuMFdSWDVXcEJI\nS0wxeUxFc1gxRXdVUVRzcDJnVllTc00KgbSAvu1d/MhiTTLFNBZeVrxIqiGwQLSV\nY5wj0JO+Hbnc4GGNgP/l//2NdisoW5KDSuBtb4jYaST4fnc+AAGAGA==\n-----END AGE ENCRYPTED FILE-----\n
 sops_age__list_0__map_recipient=age1cl3d4wtrrqrgldmrzpu53q2mk60r7hrhrymsrwss8s57z4mdv9fst4a55h
-sops_lastmodified=2025-01-03T20:59:20Z
+sops_lastmodified=2025-01-04T10:03:21Z
-sops_mac=ENC[AES256_GCM,data:sm112nUxn/1fHHX9l6ehaCtZZuE3SgXboAN/tVWn1J+0WaHnwLxD/JkeBRYEI+0HquTiZLVl65dbxJuc7LZoNYkTgU7vdXx7mnbq1C9IuxG5MVBeGnNINs5QhD4H0B6Fh8zAiLC5BmBz7EspCDcaz3P2oxL7e0I0xVnXaKSM51c=,iv:AoW3qidAMbWHmjZ8WYA3rxHaMUpZnomN9fkeZM2p2co=,tag:aoXxyU+Xm8Qr9GSAV+QbKg==,type:str]
+sops_mac=ENC[AES256_GCM,data:VxHkYhQWUA7q7LbHIpXUnC+841VX5BqtmBjAotv4eUWGlFM7ewwWA/vwDKE9e0+CGpCc9JCobutUHVy9XMGnZLXg2hZmdxjs3igEEWdEXg/lCmyh+Rdo1uYF1YLT4XzqWvxKXAy3NoQQ7WiIL0ihR28FBaqqygme0YnStK6RMBY=,iv:/7D7tn0RDHfqdG7JBd69bAjfkz9rcu5QpAB1oEXGaP0=,tag:thd2ao6KVOTzDYcIROU9Fg==,type:str]
 sops_unencrypted_suffix=_unencrypted
 sops_version=3.9.2

k8s.tjo.cloud/cluster/terraform.tfstate.encrypted

@@ -1,8 +1,8 @@
 {
-	"version": "ENC[AES256_GCM,data:CA==,iv:93MNKLJO4OYP19jlsFQj2AVWEOabstKC8vo3I9Q2i6Q=,tag:Xs/2AmYg7tkxQv1Wnb6AwQ==,type:float]",
+	"version": "ENC[AES256_GCM,data:lQ==,iv:SYNcW46e7HEOh7iczdWJFH9I8y8sox0nzrcYcrPiKKM=,tag:HinDAl4Q6896UllEruRV8Q==,type:float]",
-	"terraform_version": "ENC[AES256_GCM,data:D+zQp14=,iv:FwLKbksviuCqGXzghjNb28UBWTokmF0KjRjpu6svi4M=,tag:TL/r3ES9DltK88vr2okgaQ==,type:str]",
+	"terraform_version": "ENC[AES256_GCM,data:1mbixhY=,iv:mCUnLWsm1lmfmpmRcFMo5sT+zrZcuh9toCieKZGCq1E=,tag:BvkRHRvrainaz8meSNIm7A==,type:str]",
-	"serial": "ENC[AES256_GCM,data:lg==,iv:V8SsViRHFRJkEoOj2Kf3MMtDBKZ4pN3JdVXKbFSWBkM=,tag:GLQkOQJ67/w5mAE9HSMxOQ==,type:float]",
+	"serial": "ENC[AES256_GCM,data:mw==,iv:Pl0GbMeWh+0vIcWzgDyS97QZ6bpUA3JOMVnTKB8Xels=,tag:/UWZxEzlgIkRYCPMCQbBKA==,type:float]",
-	"lineage": "ENC[AES256_GCM,data:SvyLpjy3hzS9ZmSdZJg7CeGYTrA2cy5obND18DFBFbtjJK4j,iv:OGIwhaT576E9HLxbQSUjC8YhEEla261jW/VaWT+6Pn8=,tag:f7GZie6alqG3dYFP3w4LwQ==,type:str]",
+	"lineage": "ENC[AES256_GCM,data:TDGlpj0jUKKGYiJnQdqzn4uCF9TFTJYqfGwpPeeOEeWzQOri,iv:uI9OXyJYHI84IisQ3xND+xLl+tA5nOaScHtW+o19OLI=,tag:EcezSEDO0XTzATY/vCylZw==,type:str]",
 	"outputs": {},
 	"resources": [],
 	"check_results": null,
@@ -14,11 +14,11 @@
 		"age": [
 			{
 				"recipient": "age1cl3d4wtrrqrgldmrzpu53q2mk60r7hrhrymsrwss8s57z4mdv9fst4a55h",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdlpkaWRZekFabmpXbDNk\ndUxQOFhWakNCUlp0clYveXpYeWF5ZWJxUUE0Cld3dUxMN2JabHlaUkhzdTFrZWtV\ncE14Yk03dVpZWXo4WldFNU5jeWwxZzAKLS0tIDJsZk8wZDdvT2VSMDBqKzZaa1Zn\nT0d0NTdJRzNTcTFjNm5aelhnajEvb2MKhjL1D88m1kDt8UNcuUhOymp04K2D3wYC\nD8dGjxViR2PL+UYQDvkLQnAPsEdmv3tC4Ekbj1G7efJy+PUvMg0bJQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2WU0xYlQ5K2IyUTNBQjdp\ncGd5czRrNGJtazNHeTkySFJFbXpIbkRMZUZ3CldDVVR2YVBjdHo3V09OSi9sS2ps\nWHVxdUw4dnpZWUpwVENuVCt6YzNGR0EKLS0tIHQ5UnpBTG1STFpkVW5OTExpRXN0\nSXFXajlzenJHWm10a3hyZ1B2V2djZW8KCyre83uxYFWHuJFfZrxVTinFHFod42aF\nOqVk7nWcQmFaoVBbywYKX1XNQEzUz/3LUQh5N9pgBsCCEfd3oVURVQ==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2025-01-03T20:59:25Z",
+		"lastmodified": "2025-01-04T10:03:25Z",
-		"mac": "ENC[AES256_GCM,data:l3iUxO585M7EvlSuEsD8PIRT22Qx480uZibyPzDnLSvT6AIHCxU0EaeL7gHd7jMTJXPrj4yTTFQKTEecQctJcUmTlJD+R+WUZgLDVNI2ql6ciB8e13LlBMt46aF1BpBDPHBlaFBsUvXWrZmv41vx7qsT+gXzj9cqEfuGnjqZdco=,iv:8nF4tibPS4X7v2xqTmmAVp1yWnaVvt1mSCZczPmA6fM=,tag:2tQf/Ct+c6IkYxqJGRGoYg==,type:str]",
+		"mac": "ENC[AES256_GCM,data:8GxpvXkg5hBhWOvqgulIZ9SHYiw/2SH8a7VHZ0npF4sRkRDp8l+0CqfNZREHJSKU5UnKfZql+v3cJpM9wzKZSfQf0FATxMpwp8SUi8g4ebeOjHcaYl16ti+63hhvJ9P0SKAdlc7kPZr+FigJSR1Sme9UcjKZXEpaFexvmt/NOBw=,iv:P3CBWgdU4/UCZGBUCBx2wkzvgx4au2imdhNA+mQ0DHM=,tag:QQ5RJXEqDs9YTVBpbnYFdA==,type:str]",
 		"pgp": null,
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.9.2"

k8s.tjo.cloud/main.tf

@@ -109,7 +109,7 @@ module "cluster-components" {
   oidc_client_id  = var.oidc_client_id
 
   dnsimple_token = var.dnsimple_token
-  dnsimple_account_id = "155200"
+  dnsimple_account_id = var.dnsimple_account_id
 
   cluster_name   = module.cluster.name
   cluster_domain = "k8s.tjo.cloud"

k8s.tjo.cloud/modules/cluster-components/external-dns.tf

@@ -19,7 +19,7 @@ resource "helm_release" "external-dns-privileged" {
             name: ${kubernetes_secret.dnsimple.metadata[0].name}
             key: account_id
       - name: DNSIMPLE_ZONES
-        value: "k8s.tjo.cloud,internal.k8s.tjo.cloud"
+        value: "k8s.tjo.cloud"
     sources:
       - ingress
       - service

k8s.tjo.cloud/terraform.tf

@@ -70,7 +70,7 @@ provider "proxmox" {
 
 provider "dnsimple" {
   token = var.dnsimple_token
-  account = "155200"
+  account = var.dnsimple_account_id
 }
 
 provider "helm" {

k8s.tjo.cloud/variables.tf

@@ -17,6 +17,10 @@ variable "dnsimple_token" {
   sensitive = true
 }
 
+variable "dnsimple_account_id" {
+  type = string
+}
+
 variable "proxmox_token" {
   type      = string
   sensitive = true