claude-botandClaude Opus 5.5
0806bdfab5
Step 1 of 2 of the label split, owner decision 2026-10-22: dns.renner.uno/internal -> UniFi (LAN) DNS via external-dns-unifi dns.renner.uno/public -> Cloudflare DNS via external-dns-cloudflare netbird.renner.uno/public -> NetBird reverse-proxy service (netbird-service-sync) Additive only; no consumer reads the new labels yet: - dns.renner.uno/internal on every object external-dns-unifi publishes today (24 Ingresses incl. Grafana via chart values, 6 LoadBalancer Services = the 31 live UDM hostnames). - netbird.renner.uno/public next to every dns.renner.uno/public label (20 Ingresses). netbird-service-sync already ORs both labels, so its desired set is unchanged. authentik-gate-sync copies source labels to the generated *-gate Ingresses. Step 2 flips external-dns-unifi to dns.renner.uno/internal=true, netbird-service-sync to netbird.renner.uno/public only, and external-dns-cloudflare to dns.renner.uno/public=true. It must merge only after this change is applied, or external-dns-unifi (policy sync) would delete LAN records. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>