@@ -31,7 +31,9 @@ demonstrates the deployment as a
31
31
[ sidecar container] ( https://kubernetes.io/docs/concepts/workloads/pods/#workload-resources-for-managing-pods )
32
32
within the ExternalDNS pod.
33
33
34
- ``` shell
34
+ ``` shell
35
+ # We create a Secret from an auth token. Alternatively, you can also
36
+ # use keys to authenticate the webhook - see "Authentication" below.
35
37
kubectl create secret generic external-dns-stackit-webhook --from-literal=auth-token=' <Your-Token>'
36
38
```
37
39
@@ -203,7 +205,7 @@ spec:
203
205
successThreshold: 1
204
206
timeoutSeconds: 5
205
207
env:
206
- - name: AUTH_TOKEN
208
+ - name: STACKIT_SERVICE_ACCOUNT_TOKEN
207
209
valueFrom:
208
210
secretKeyRef:
209
211
name: external-dns-stackit-webhook
@@ -217,7 +219,6 @@ The configuration of the STACKIT webhook can be accomplished through command lin
217
219
Below are the options that are available.
218
220
219
221
- ` --project-id ` /` PROJECT_ID ` (required): Specifies the project id of the STACKIT project.
220
- - ` --auth-token ` /` AUTH_TOKEN ` (required): Defines the authentication token for the STACKIT API.
221
222
- ` --worker ` /` WORKER ` (optional): Specifies the number of workers to employ for querying the API. Given that we
222
223
need to iterate over all zones and records, it can be parallelized. However, it is important to avoid
223
224
setting this number excessively high to prevent receiving 429 rate limiting from the API (default 10).
@@ -229,6 +230,14 @@ Below are the options that are available.
229
230
- ` --log-level ` /` LOG_LEVEL ` (optional): Defines the log level (default "info"). Possible values are: debug, info, warn,
230
231
error.
231
232
233
+ ## Authentication
234
+
235
+ The STACKIT webhook uses the [ STACKIT Go SDK] ( https://github.com/stackitcloud/stackit-sdk-go ) and therefore inherits its
236
+ options for authentication: You can use either Token or Key authentication flows. The example above uses the Token flow
237
+ for authentication by providing the ` STACKIT_SERVICE_ACCOUNT_TOKEN ` environment variable in the ` Deployment ` . For more
238
+ information on how to provide e.g. a Service Account Key to be used by the SDK, see
239
+ [ authentication options for the STACKIT Go SDK] ( https://github.com/stackitcloud/stackit-sdk-go?tab=readme-ov-file#authentication ) .
240
+
232
241
## FAQ
233
242
234
243
### 1. Issue with Creating Service using External DNS Annotation
0 commit comments