Skip to content

feat(container): update image ghcr.io/home-operations/charts-mirror/external-dns ( 1.20.0 ➔ 1.21.1 ) - #190

Merged
Ryangr0 merged 2 commits into
mainfrom
renovate/ghcr.io-home-operations-charts-mirror-external-dns-1.x
May 24, 2026
Merged

feat(container): update image ghcr.io/home-operations/charts-mirror/external-dns ( 1.20.0 ➔ 1.21.1 )#190
Ryangr0 merged 2 commits into
mainfrom
renovate/ghcr.io-home-operations-charts-mirror-external-dns-1.x

Conversation

@webgrip-renovate

@webgrip-renovate webgrip-renovate Bot commented May 23, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
ghcr.io/home-operations/charts-mirror/external-dns minor 1.20.0 → 1.21.1

Merge Confidence badges are included where Renovate supports them; low/neutral confidence means this update deserves a manual impact check before merge.

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@webgrip-renovate
feat(container): update image ghcr.io/home-operations/charts-mirror/e…
88c848b 
…xternal-dns ( 1.20.0 ➔ 1.21.1 )

| datasource | package                                            | from   | to     |
| ---------- | -------------------------------------------------- | ------ | ------ |
| docker     | ghcr.io/home-operations/charts-mirror/external-dns | 1.20.0 | 1.21.1 |
@Ryangr0 Ryangr0 mentioned this pull request May 23, 2026
Closed
1 task
Copilot AI mentioned this pull request May 23, 2026
Closed
Copilot AI added a commit that referenced this pull request May 23, 2026
@Ryangr0
copilot-review: PR #190
1d6e93e 
Agent-Logs-Url: https://github.com/webgrip/homelab-cluster/sessions/fcc510b5-2c86-4aa6-bff8-112d2a028408

Co-authored-by: Ryangr0 <3602480+Ryangr0@users.noreply.github.com>
@github-actions

github-actions Bot commented May 23, 2026

Copy link
Copy Markdown

Dependency Update Review

Verdict: Yellow Caution
Recommendation: Merge after checks
Confidence: High

Executive summary

This PR updates the external-dns Helm chart artifact used during bootstrap CRD extraction from 1.20.0 to 1.21.1. Upstream chart changes are mostly additive/fixes, but this chart version also updates the bundled ExternalDNS app image to v0.21.0, which includes several upstream breaking changes in the controller release train. In this repo, external-dns is a production DNS controller (Cloudflare + Gateway API + CRD sources), so behavior drift has high operational impact even if chart values are unchanged. I recommend merging after targeted runtime checks focused on Gateway API source behavior and Cloudflare reconciliation.

Update inventory

Dependency Ecosystem Change Scope Local role Risk
ghcr.io/home-operations/charts-mirror/external-dns Helm OCI chart 1.20.0 → 1.21.1 minor infra / deploy / runtime DNS automation Yellow

Important upstream changes

Local impact

  • PR diff updates only bootstrap/helmfile.d/00-crds.yaml chart version for CRD extraction.
  • Active runtime deployment is wired via kubernetes/apps/network/cloudflare-dns/app/ocirepository.yaml (already pinned to tag: 1.21.1 + digest) and kubernetes/apps/network/cloudflare-dns/app/helmrelease.yaml.
  • Local external-dns config uses:
    • provider: cloudflare
    • sources: crd, gateway-httproute
    • explicit extraArgs including --gateway-name=envoy-external
  • Because this component controls public DNS records, rollback is straightforward via Git revert but operational blast radius is high (record drift or missed updates can impact ingress reachability).

Pre-merge checks

  • Confirm cluster Gateway API resources are served at gateway.networking.k8s.io/v1 (required by upstream v0.21.0 gateway source migration).
  • Reconcile in a controlled window and watch cloudflare-dns logs for RBAC/list/watch errors on Gateway/HTTPRoute and DNSEndpoint resources.
  • Verify at least one expected DNS update path (HTTPRoute or DNSEndpoint change) still produces correct Cloudflare records.
  • Verify no spike in Cloudflare API errors/rate-limit responses after upgrade (batch API behavior changed upstream).
  • Keep rollback ready: revert this version bump if reconciliation errors persist.

Evidence reviewed

@Ryangr0

Ryangr0 commented May 24, 2026

Copy link
Copy Markdown
Contributor

@copilot please make sure we're using all new features and all breaking changes etc are mitigated. Also suggest improvements according to the updates to the dep repo

Copilot AI commented May 24, 2026

Copy link
Copy Markdown
Contributor

@copilot please make sure we're using all new features and all breaking changes etc are mitigated. Also suggest improvements according to the updates to the dep repo

Addressed in 9084147.

I reviewed upstream chart/app changes (1.20.0 → 1.21.1 / external-dns v0.21.0), verified the Gateway API v1 migration is already compatible with this repo (all Gateway/HTTPRoute manifests are gateway.networking.k8s.io/v1), and applied an improvement from the updated Cloudflare guidance by increasing --cloudflare-dns-records-per-page from 1000 to 5000 to reduce API calls/rate-limit pressure.

Additional optional improvements from upstream (not required for this deployment): enable enableGatewayListenerSets only if you plan to use ListenerSets, and set --zone-id-filter if you want stricter token scope per zone.

Copilot AI requested a review from Ryangr0 May 24, 2026 08:01
@Ryangr0
Ryangr0 merged commit 7dcad4a into main May 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Ryangr0 Ryangr0 Awaiting requested review from Ryangr0

Assignees

No one assigned

Labels

area/bootstrap renovate/container type/minor

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Ryangr0