Move Adguard as the external DNS.

Coredns should only serve internal DNS requests, and let Adguard handle requests to *.kalexlab.xyz.

helm/cilium/extra/coredns-ip-pool.yaml

@@ -2,13 +2,13 @@
 apiVersion: "cilium.io/v2alpha1"
 kind: CiliumLoadBalancerIPPool
 metadata:
-  name: pool-coredns
+  name: pool-adguard
 spec:
   blocks:
     - cidr: "192.168.10.21/32"
   serviceSelector:
     matchLabels:
-      kalexlab.xyz/ip-pool: coredns
+      kalexlab.xyz/ip-pool: adguard
 ---
 apiVersion: "cilium.io/v2alpha1"
 kind: CiliumL2AnnouncementPolicy
@@ -20,4 +20,4 @@ spec:
   loadBalancerIPs: true
   serviceSelector:
     matchLabels:
-      kalexlab.xyz/ip-pool: coredns
+      kalexlab.xyz/ip-pool: adguard

helm/coredns/values.yaml

@@ -18,9 +18,6 @@ prometheus:
 service:
   clusterIP: "10.32.0.254"
 
-customLabels:
-  kalexlab.xyz/ip-pool: coredns
-
 servers:
   - zones:
       - zone: .
@@ -30,7 +27,7 @@ servers:
     # hostPort: 53
     plugins:
       # - name: debug
-      # - name: log
+      - name: log
       - name: errors
       # Serves a /health endpoint on :8080, required for livenessProbe
       - name: health
@@ -47,12 +44,12 @@ servers:
           ttl 30
 
       - name: forward
-        parameters: ". 10.32.0.253 1.1.1.1"
-        configBlock: |-
-          policy sequential
+        parameters: "kalexlab.xyz. 10.32.0.253"
+      - name: forward
+        parameters: ". 1.1.1.1"
 
       - name: prometheus
-        parameters: 0.0.0.0:9153
+        parameters: "0.0.0.0:9153"
 
       - name: loop
       - name: reload

kubernetes/management/adguard/adguard.yaml

@@ -6,6 +6,7 @@ metadata:
   name: adguard
   labels:
     kalexlab.xyz/app: adguard
+    kalexlab.xyz/ip-pool: adguard
 spec:
   type: ClusterIP
   clusterIP: 10.32.0.253