feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) by renovate[bot] · Pull Request #845 · mpeterson/homelab

renovate · 2026-08-21T01:57:37Z

This PR contains the following updates:

Package	Update	Change
registry.k8s.io/external-dns/external-dns	minor	`v0.21.0` → `v0.22.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

kubernetes-sigs/external-dns (registry.k8s.io/external-dns/external-dns)

`v0.22.0`

Compare Source

General information

Action required before upgrade

⚠️ The default annotation prefix is now external-dns.kubernetes.io/ with no fallback (#6424)
- 🚨 This change can delete all your DNS records.
- ℹ️ You can either migrate your annotations or set --annotation-prefix=external-dns.alpha.kubernetes.io/.
- ➡️ It's recommended to try this version with --dry-run=true, see recommended upgrade instructions.
⚠️ To avoid any unwanted DNS records deletion from the annotation prefix change, --policy is now required with no default (#6508).

Important

⚠️ CRD/API upgrades: Gateway API TLSRoute now uses v1, standard channel since Gateway API v1.5.0 (#6367). Ambassador Host now uses getambassador.io/v3alpha1 (#6482). Pi-hole v5 API is removed, v6+ only (#6406).
ℹ️ On AWS, ownership TXT records for A ALIAS now use the a- prefix (#6523). Migration is automatic and ownership is preserved
- Leftover cname- records can be cleaned with scripts/aws-cleanup-legacy-txt-records.py --alias-cname-cleanup.
ℹ️ This release removes in-tree support for Akamai, Plural & Transip (#6485).
- Users needing those providers can use a previous version of ExternalDNS or a webhook-based provider. Gandi is marked for removal (#6634).
ℹ️ New: crd registry as an alternative to TXT (#5372)
ℹ️ DNAME record support (#6553), and --rfc2136-axfr replacing the deprecated --rfc2136-tsig-axfr (#6598).
ℹ️ Guide on how to safely upgrade External-DNS

⚠️ Breaking Changes

[annotations] switch default annotations prefix to GA by @mloiseleur in #6424
[config] require explicit --policy flag by @mloiseleur in #6508
[provider/pihole] drop Pi-hole v5 API support by @ivankatliarchuk in #6406
[registry/txt] use a- prefix for AWS A ALIAS ownership TXT records by @mloiseleur in #6523
remove unmaintained providers (akamai, plural, transip) by @mloiseleur in #6485
[source/gateway-api] migrate TLSRoute to v1 by @ecray in #6367

🚀 Features

add DNAME record type support by @clwluvw in #6553
add isSource template function to scope --fqdn-template by source by @ivankatliarchuk in #6625
[aws] add aws-hosted-zone-id annotation to pin records to a specific zone by @namnt2307 in #6559
[aws] support alias=A and alias=AAAA to create single record type by @u-kai in #5997
[endpoint] support multiple RefObjects per endpoint and per event by @ivankatliarchuk in #6495
[registry] new CRD option by @mloiseleur in #5372
[rfc2136] add --rfc2136-axfr, deprecate --rfc2136-tsig-axfr by @mloiseleur in #6598
[source] add --fqdn-* flag support to f5-virtualserver and f5-transportserver sources by @ivankatliarchuk in #6470
[source] add --fqdn-* flag support to gloo-proxy source by @ivankatliarchuk in #6475
[source] add --fqdn-* flag support to traefik-proxy source by @ivankatliarchuk in #6468
[source] add label filter support to contour, f5, kong, skipper, traefik sources by @ivankatliarchuk in #6538
[source/ambassador] migrate Host CRD to emissary-ingress v3alpha1 by @mloiseleur in #6482
[source] apply controller annotation filter at indexer level by @ivankatliarchuk in #6426
[source] attach RefObject to all remaining sources by @mloiseleur in #6492
[source/fake] extend fake source to emit all supported record types by @ivankatliarchuk in #6308
[source] migrate contour, f5, kong, traefik sources to indexer-based filtering by @ivankatliarchuk in #6542
[source] migrate ingress and node sources to Indexers pattern by @ivankatliarchuk in #6445
[source] set transformer on all informers by @vflaux in #6451
[source/template] add fqdn-target-template to pod/service/node and consolidate duplicate template helpers by @ivankatliarchuk in #6497
[template] support repeatable --fqdn-template, --target-template, --fqdn-target-template flags by @ivankatliarchuk in #6429
[test/crd] support CRD integration tests by @ivankatliarchuk in #6412

🐛 Bug fixes

[alibabacloud] fix TXT record value comparison during record updates by @jiangzm in #6487
[aws] incorrect behavior for non-aliasable record types by @u-kai in #6017
[awssd] use namespace-aware parsing for dotted service names by @am-ltk in #6365
[aws] unescape wildcard alias target on read by @ulascansenturk in #6471
[cloudflare] send SRV records as structured data by @tpaulus in #6560
[coredns] return AAAA for IPv6 targets by @mloiseleur in #6489
[coredns] unexpected delete when owner is activated by @farodin91 in #6206
[coredns] write PTR records without random prefix to etcd by @dongjiang1989 in #6478
create/update event generation for webhook provider by @tommasopozzetti in #6361
[dnsimple] read back all supported record types and fix record lookup by type by @Churi12 in #6517
[dynamodb] avoid nil region option panic by @vissieza in #6417
[events] encapsulate ObjectReference fields by @ivankatliarchuk in #6423
[mapper] prevent index out of bounds in ToEndpointName with multi-dot suffix by @carterpewpew in #6433
pin smartystreets/assertions. mark gandi provider for removal by @ivankatliarchuk in #6634
preserve equals signs in endpoint label values by @immanuwell in #6443
[provider/cloudflare] trim surrounding whitespace from API token by @gecube in #6533
[provider] normalize alias=A/AAAA to alias=true after AdjustEndpoints by @u-kai in #6454
[provider/rfc2136] use independent counters for AXFR and update nameserver rotation by @pujitha24 in #6591
[service] switch Endpoints() to indexer-based filtering by @ivankatliarchuk in #6344
[source/crd] allow SRV targets with trailing dot in DNSEndpoint by @SAY-5 in #6383
[source/fake.go] make fakeSource endpoint generation deterministic by @vflaux in #6411
[source] parse gloo-proxy aggregateListener virtual hosts by @pujitha24 in #6628
[source] preserve Skipper custom token file by @PragalvaXFREZ in #6583
[source] SingletonClientGenerator once-init errors by @carterpewpew in #6398
[source] use correct key when checking for existing alias in postProcessor by @u-kai in #6388
support ownership recognition of txt records by @HartmannVolker in #6435

📝 Documentation

add Tencent Cloud webhook provider by @QianChenglong in #6432
[ai] add instructions for agents by @mloiseleur in #6453
[aws] correct hosted zone annotation prefix by @immanuwell in #6569
[ci] validate docs build on PRs targeting master by @ivankatliarchuk in #6351
clarify release tag vs kustomize manifest lag by @VedantMadane in #6626
[crd] clarify annotation-filter behavior for DNSEndpoint by @immanuwell in #6530
[faq] explain how to migrate a hostname between sources by @mloiseleur in #6490
fix deps, build & links warning by @mloiseleur in #6350
[proposal] libdns provider adapter by @mloiseleur in #6509
[readme] remove retired go report card badge by @scholar7r in #6549
[README] restructure provider and source listings by @mloiseleur in #6499
[readme] update Unifi webhook URL by @onedr0p in #6534
[rfc2136] fix duplicated word in tutorial by @s3onghyun in #6504
[traefik] clarify explicit target requirement by @immanuwell in #6502
[tutorials/aws] document AWS SDK credential provider chain by @alekc in #6444
[tutorials/aws] fix grammatical error by @Jawwad78 in #6384
[tutorials/ovh] Add single-link credential creation by @fhoekstra in #6397
[webhook] add namecheap webhook provider by @evandeaubl in #6631
[webhook] add NAVER Cloud Platform webhook provider by @inerplat in #6575
[webhook] add Porkbun webhook provider to registry by @mattgmoser in #6409
[webhook] add reference to netbird external-dns provider by @kgrotel in #6460

📦 Docker Image

# This pull command only works when it's released
docker pull registry.k8s.io/external-dns/external-dns:v0.22.0

📦 Others

chore

add fuzz tests for parsing and normalization functions by @Raffo in #6525
bump dependencies for update by @Raffo in #6643
bump k8s deps to v0.36.0 and remove deprecated scheme.Builder by @ivankatliarchuk in #6407
bump to go version 1.26.6 by @Raffo in #6635
[cobra] cleanup up leftover Cobra code by @vflaux in #6448
fix grpc vuln by upgrading lib by @Raffo in #6614
fix typos across codebase by @Raffo in #6385
fix x/text vulnerability by upgrading by @Raffo in #6615
follow the OpenSSF recommendations for github permissions by @Raffo in #6378
[release] updates kustomize & docs with v0.21.0 by @mloiseleur in #6349
update CI workflows to pin pip packages and go packages by @Raffo in #6498
update maintainers by @mloiseleur in #6421
update reviewers by @mloiseleur in #6427
update security contacts by @Raffo in #6425

ci

[docs] use latest as alias by @mloiseleur in #6352
[e2e] use rollout status for etcd instead of kubectl wait by @u-kai in #6474
[github] pin github action by @ivankatliarchuk in #6428
replace GrantBirki/json-yaml-validate action with jq by @Raffo in #6318
replace pre-commit with a SHA-pinned file-hygiene script by @Raffo in #6374

deps

bump github.com/cloudflare/cloudflare-go from v5 to v7 by @bayazee in #6550
bump github.com/projectcontour/contour from 1.33.3 to 1.33.4 by @app/dependabot in #6395
bump gitpython from 3.1.50 to 3.1.52 in /docs/scripts by @app/dependabot in #6576
bump gitpython from 3.1.52 to 3.1.54 in /docs/scripts by @app/dependabot in #6585
bump gitpython from 3.1.54 to 3.1.57 in /docs/scripts by @app/dependabot in #6613
bump gitpython from 3.1.57 to 3.1.58 in /docs/scripts by @app/dependabot in #6621
bump mkdocs-git-revision-date-localized-plugin from 1.5.1 to 1.5.2 in /docs/scripts in the mkdocs-deps group by @app/dependabot in #6464
bump mkdocs-git-revision-date-localized-plugin from 1.5.2 to 1.5.3 in /docs/scripts in the mkdocs-deps group by @app/dependabot in #6532
bump mkdocs-material from 9.7.6 to 9.7.7 in /docs/scripts in the mkdocs-deps group across 1 directory by @app/dependabot in #6601
bump pymdown-extensions from 10.21.3 to 11.0 in /docs/scripts by @app/dependabot in #6584
bump pymdown-extensions from 11.0 to 11.0.1 in /docs/scripts by @app/dependabot in #6622
bump the dev-dependencies group across 1 directory with 20 updates by @app/dependabot in #6410
bump the dev-dependencies group with 10 updates by @app/dependabot in #6441
bump the dev-dependencies group with 12 updates by @app/dependabot in #6459
bump the dev-dependencies group with 22 updates by @app/dependabot in #6488
bump the dev-dependencies group with 3 updates by @app/dependabot in #6420
bump the dev-dependencies group with 4 updates by @app/dependabot in #6362
bump the dev-dependencies group with 4 updates by @app/dependabot in #6403
bump the dev-dependencies group with 5 updates by @app/dependabot in #6463
bump the dev-dependencies group with 6 updates by @app/dependabot in #6452
bump the dev-dependencies group with 9 updates by @app/dependabot in #6531
bump the dev-dependencies group with 9 updates by @app/dependabot in #6602
bump the mkdocs-deps group in /docs/scripts with 2 updates by @app/dependabot in #6404
[go] bump go from 1.26.1 -> 1.26.5 by @ivankatliarchuk in #6568

refactor

[alibabacloud/test] optimize alidns unit tests by @jiangzm in #6506
[controller] controller.Run to return error by @ivankatliarchuk in #6345
[controller] replace custom SIGTERM handler with NotifyContext by @vflaux in #5821
[endpoint] add WithAliasProperty and replace alias string literals by @u-kai in #6455
[endpoint] export ProviderSpecificAlias and consolidate usage by @u-kai in #6342
[endpoint] move MergeEndpoints from source to endpoint package by @ivankatliarchuk in #6413
[events] use typed queue and revisit event controller by @ivankatliarchuk in #6346
[exoscale] migrate provider to egoscale v3 and apex DNS record handling by @natalie-o-perret in #6371
[pdns] replace unmaintained ffledgling/pdns-go with joeig/go-powerdns/v3 by @mloiseleur in #6486
[registry/crd] build REST config from shared client package by @mloiseleur in #6514
[source/gloo] migrate to indexers, add annotation/label/controller filters by @ivankatliarchuk in #6515
[source] migrate AnnotationFilter from string to labels.Selector by @ivankatliarchuk in #6526
use Set structs instead of map[]struct{} by @vflaux in #6360

security

[github] added openssf github action by @ivankatliarchuk in #6245

test

[crd] assert the generated CRDs are installable by @mloiseleur in #6619
[e2e] retry downloads to survive transient network errors by @u-kai in #6603
[gandi] extend coverage with mock adapters by @amarkdotdev in #6518
[ingress] fix endpoint count and improve assertion output by @ivankatliarchuk in #6194
[integration/crd] add SRV record scenario covering RFC 2782 trailing dot by @ivankatliarchuk in #6422
[pkg/rfc2317] cover bare IPv6 and invalid-mask edge cases by @SAY-5 in #6437
[registry/crd] expand unit test coverage by @FirasYousfi in #6522
[source] assert RefObject via ValidateEndpoints opt-in by @mloiseleur in #6493
[source] fix flaky unstructured source test by @mloiseleur in #6483
[source] improve skipper routegroup coverage by @PragalvaXFREZ in #6580
[source/ingress] two ingresses with same host, different IPs by @ivankatliarchuk in #6496

Configuration

📅 Schedule: (in timezone Asia/Jerusalem)

Branch creation
- "after 2am and before 7am"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-08-21T02:00:41Z

Argo CD Diff Preview

Summary:

Modified (3):
± external-dns-cloudflare (+1|-1)
± external-dns-internal (+1|-1)
± infra (+2|-2)

external-dns-cloudflare (kubernetes/infra/external-dns-cloudflare/app.yaml)

Deployment: network/external-dns-cloudflare

         - name: CF_API_TOKEN
           valueFrom:
             secretKeyRef:
               key: api-token
               name: external-dns-cloudflare-secret
-        image: registry.k8s.io/external-dns/external-dns:v0.21.0@sha256:f53faaf71cb270d1ca9dce6ea0c94bfebf1a18696263487f0fbc74b9bf2bd7ff
+        image: registry.k8s.io/external-dns/external-dns:v0.22.0@sha256:5fdcaf7deb5c158f93a1fc6fe169cdff4cfb9ae0172bee1a90ab0ef74fb9c9cf
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 2
           httpGet:
             path: /healthz

external-dns-internal (kubernetes/infra/external-dns-internal/app.yaml)

Deployment: network/external-dns-internal

         - name: EXTERNAL_DNS_RFC2136_TSIG_SECRET
           valueFrom:
             secretKeyRef:
               key: tsig-secret
               name: external-dns-internal-secret
-        image: registry.k8s.io/external-dns/external-dns:v0.21.0@sha256:f53faaf71cb270d1ca9dce6ea0c94bfebf1a18696263487f0fbc74b9bf2bd7ff
+        image: registry.k8s.io/external-dns/external-dns:v0.22.0@sha256:5fdcaf7deb5c158f93a1fc6fe169cdff4cfb9ae0172bee1a90ab0ef74fb9c9cf
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 2
           httpGet:
             path: /healthz

infra (kubernetes/bootstrap/infra.yaml)

Application: argocd/external-dns-cloudflare

     server: https://kubernetes.default.svc
   info:
   - name: Chart
     value: external-dns@1.20.0
   - name: Image
-    value: registry.k8s.io/external-dns/external-dns:v0.21.0@sha256:f53faaf71cb270d1ca9dce6ea0c94bfebf1a18696263487f0fbc74b9bf2bd7ff
+    value: registry.k8s.io/external-dns/external-dns:v0.22.0@sha256:5fdcaf7deb5c158f93a1fc6fe169cdff4cfb9ae0172bee1a90ab0ef74fb9c9cf
   project: default
   source:
     path: kubernetes/infra/external-dns-cloudflare/
     repoURL: https://github.com/mpeterson/homelab
     targetRevision: main

Application: argocd/external-dns-internal

     server: https://kubernetes.default.svc
   info:
   - name: Chart
     value: external-dns@1.20.0
   - name: Image
-    value: registry.k8s.io/external-dns/external-dns:v0.21.0@sha256:f53faaf71cb270d1ca9dce6ea0c94bfebf1a18696263487f0fbc74b9bf2bd7ff
+    value: registry.k8s.io/external-dns/external-dns:v0.22.0@sha256:5fdcaf7deb5c158f93a1fc6fe169cdff4cfb9ae0172bee1a90ab0ef74fb9c9cf
   project: default
   source:
     path: kubernetes/infra/external-dns-internal/
     repoURL: https://github.com/mpeterson/homelab
     targetRevision: main

Stats:
[Applications: 86], [Full Run: 1m43s], [Rendering: 40s], [Cluster: 19s], [Argo CD: 44s]

…0.21.0 ➔ v0.22.0 )

renovate Bot added the manual-review label Aug 21, 2026

github-actions Bot added the area/kubernetes label Aug 21, 2026

renovate Bot changed the title ~~feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 )~~ feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) - autoclosed Aug 21, 2026

renovate Bot closed this Aug 21, 2026

renovate Bot deleted the renovate/registry.k8s.io-external-dns-external-dns-0.x branch August 21, 2026 06:20

renovate Bot changed the title ~~feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) - autoclosed~~ feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) Aug 22, 2026

renovate Bot reopened this Aug 22, 2026

renovate Bot force-pushed the renovate/registry.k8s.io-external-dns-external-dns-0.x branch 14 times, most recently from 3cd47a0 to 5742f2b Compare August 28, 2026 04:55

renovate Bot changed the title ~~feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 )~~ feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) - autoclosed Aug 28, 2026

renovate Bot closed this Aug 28, 2026

renovate Bot changed the title ~~feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) - autoclosed~~ feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) Aug 29, 2026

renovate Bot reopened this Aug 29, 2026

renovate Bot force-pushed the renovate/registry.k8s.io-external-dns-external-dns-0.x branch 2 times, most recently from 5742f2b to 61e464a Compare August 29, 2026 01:41

renovate Bot changed the title ~~feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 )~~ feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) - autoclosed Aug 29, 2026

renovate Bot closed this Aug 29, 2026

feat(container): update registry.k8s.io/external-dns/external-dns ( v…

e9c2fdf

…0.21.0 ➔ v0.22.0 )

renovate Bot changed the title ~~feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) - autoclosed~~ feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) Aug 30, 2026

renovate Bot reopened this Aug 30, 2026

renovate Bot force-pushed the renovate/registry.k8s.io-external-dns-external-dns-0.x branch from 61e464a to e9c2fdf Compare August 30, 2026 00:50

Navigation Menu

feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 ) - #845

feat(container): update registry.k8s.io/external-dns/external-dns ( v0.21.0 ➔ v0.22.0 )#845
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/registry.k8s.io-external-dns-external-dns-0.x

renovate Bot commented Aug 21, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 21, 2026 •

edited

Loading

Deployment: network/external-dns-cloudflare

Deployment: network/external-dns-internal

Application: argocd/external-dns-cloudflare

Application: argocd/external-dns-internal

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Aug 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.22.0

General information

⚠️ Breaking Changes

🚀 Features

🐛 Bug fixes

📝 Documentation

📦 Docker Image

📦 Others

Configuration

Uh oh!

github-actions Bot commented Aug 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Argo CD Diff Preview

Deployment: network/external-dns-cloudflare

Deployment: network/external-dns-internal

Application: argocd/external-dns-cloudflare

Application: argocd/external-dns-internal

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 21, 2026 •

edited

Loading

`v0.22.0`

github-actions Bot commented Aug 21, 2026 •

edited

Loading