kubernetes-cloudflare-sync.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  namespace: default
  name: kubernetes-cloudflare-sync
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
  name: kubernetes-cloudflare-sync
rules:
  - apiGroups: [""]
    resources: ["nodes"]
    verbs: ["list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: kubernetes-cloudflare-sync-viewer
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: kubernetes-cloudflare-sync
subjects:
  - kind: ServiceAccount
    name: kubernetes-cloudflare-sync
    namespace: default
---
apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: default
  name: kubernetes-cloudflare-sync
  labels:
    app: kubernetes-cloudflare-sync
spec:
  replicas: 1
  selector:
    matchLabels:
      app: kubernetes-cloudflare-sync
  template:
    metadata:
      labels:
        app: kubernetes-cloudflare-sync
    spec:
      serviceAccountName: kubernetes-cloudflare-sync
      terminationGracePeriodSeconds: 0
      containers:
        - name: kubernetes-cloudflare-sync
          image: quay.io/calebdoxsey/kubernetes-cloudflare-sync:v0.2.0
          args:
            - --dns-name=do.doxsey.net
          env:
            - name: CF_API_KEY
              valueFrom:
                secretKeyRef:
                  name: cloudflare
                  key: api-key
            - name: CF_API_EMAIL
              valueFrom:
                secretKeyRef:
                  name: cloudflare
                  key: email
          resources:
            limits:
              memory: "50Mi"
              cpu: "100m"