Changed

• Updated ExternalDNS OCI image version to v0.15.0. (#xxxx) @stevehipwell

Fixed

• Fixed provider.webhook.resources behavior to correctly leverage resource limits. (#4560) @crutonjohn
• Fixed provider.webhook.imagePullPolicy behavior to correctly leverage pull policy. (#4643) @kimsondrup
• Fixed to add correct webhook metric port to Service and ServiceMonitor. (#4643) @kimsondrup
• Fixed to no longer require the unauthenticated webhook provider port to be exposed for health probes. (#4691) @kimsondrup & @hatrx

Important notes

This release drops a few unmaintained providers. See #4719 as mentioned in #4347. If you need to use any of the previous providers, please use a previous release of external DNS or follow the instructions to implement a webhook provider that supports those providers.

What's Changed

• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 in the dev-dependencies group by @dependabot in #4477
• Update kustomize version for v0.14.2 by @Raffo in #4480
• build(deps): bump the dev-dependencies group with 8 updates by @dependabot in #4478
• update docs to v0.14.2 by @Raffo in #4481
• build(deps): bump GrantBirki/json-yaml-validate from 2.7.1 to 3.0.0 in the dev-dependencies group by @dependabot in #4489
• fix: re-add api-approved.kubernetes.io annotation by @morremeyer in #4488
• feat(webhooks): pass webhook-* annotations to webhook providers by @Raffo in #4458
• fix(traefik): Nil pointer exception if legacy traefik is disabled by @kbudde in #4502
• add unifi webhook to readme by @onedr0p in #4504
• Drop experimental notice in webhook flags by @Raffo in #4507
• feat(coredns): etcd authentication by @matthieugouel in #4503
• Bump the dev-dependencies group across 1 directory with 13 updates by @dependabot in #4514
• Add Infoblox webhook provider by @k0da in #4513
• 🌱 docs(footer): Add trademark disclaimer by @mariasalcedo in #4529
• chore!: Remove infoblox in-tree provider by @mloiseleur in #4516
• Update to Go 1.22.4 by @Raffo in #4534
• Bump the dev-dependencies group across 1 directory with 19 updates by @dependabot in #4536
• Add documentation about etcd HTTPS for CoreDNS provider by @AlessandroZanatta in #4538
• chore(chart): Released chart for v0.14.2 by @stevehipwell in #4541
• Bump the dev-dependencies group with 4 updates by @dependabot in #4540
• feat(aws): use AWS profiles using .credentials file by @roehrijn in #3973
• fix(cloudflare): trimSpace on token read from file by @simonostendorf in #4515
• docs: upgrade mkdocs and fix broken links by @mloiseleur in #4378
• chore(deps): bump github.com/vektah/gqlparser/v2 from 2.5.1 to 2.5.14 by @dependabot in #4546
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 by @dependabot in #4544
• chore(deps): bump the dev-dependencies group across 1 directory with 19 updates by @dependabot in #4562
• chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 in the dev-dependencies group by @dependabot in #4547
• feat(rfc2136): add PTR optional support by @angeloxx in #4283
• Update cloudflare.md by @tobiabocchi in #4583
• feat!: update GRPCRoute client from v1alpha2 to stable v1 by @thameezb in #4567
• docs(annotations): note how to set multiple hostnames by @hopkinsth in #4602
• chore(deps): bump the dev-dependencies group across 1 directory with 2 updates by @dependabot in #4604
• Gateway API: Revert Gateway and HTTPRoute objects from v1 to v1beta1 by @abursavich in #4610
• chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 by @dependabot in #4600
• chore(deps): bump the dev-dependencies group across 1 directory with 37 updates by @dependabot in #4655
• docs: fix broken link by @ilmax in #4662
• azure-private-dns: Fix LoadBalancer example by @orgads in #4663
• AWS: Change documentation to use Helm values by @pier-oliviert in #4577
• chore(deps): bump the dev-dependencies group across 1 directory with 10 updates by @dependabot in #4668
• Improve MinEventInterval compliance with docs by @tjamet in #3400
• Add provider cache by @tjamet in #4597
• chore: update maintainers by @mloiseleur in #4679
• fix(helm): make use of resource values for webhook by @crutonjohn in #4560
• Fix AWS Cloud Map docs: annotation key/value pairs must be strings by @mjlshen in #4683
• Webhook provider helm chart fixes by @kimsondrup in #4643
• chore(deps): bump the dev-dependencies group across 1 directory with 16 updates by @dependabot in #4684
• chore(deps): bump GrantBirki/json-yaml-validate from 3.0.0 to 3.1.0 in the dev-dependencies group by @dependabot in #4685
• Add tutorial to DynamoDB registry docs by @mjlshen in #4686
• chore(deps): bump GrantBirki/json-yaml-validate from 3.1.0 to 3.2.0 in the dev-dependencies group by @dependabot in #4700
• chore(deps): bump GrantBirki/json-yaml-validate from 3.2.0 to 3.2.1 in the dev-dependencies group by @dependabot in #4702
• chore: upgrade ExternalDNS to go 1.23 by @mloiseleur in #4698
• feat: add annotation and label filters to Ambassador Host Source by @KyleMartin901 in #2633
• Add RouterOS provider to README.md by @benfiola in #4714
• feat: support dual stack for gateway api by @thameezb in #4469
• chore(deps): bump actions/setup-python from 5.1.1 to 5.2.0 in the dev-dependencies group by @dependabot in #4712
• chore: remove unmaintained providers by @mloiseleur in #4719

Images

docker pull registry.k8s.io/external-dns/external-dns:v0.15.0

New Contributors

• @kbudde made their first contribution in #4502
• @matthieugouel made their first contribution in #4503
• @mariasalcedo made their first contribution in #4529
• @AlessandroZanatta made their first contribution in #4538
• @roehrijn made their first contribution in #3973
• @simonostendorf made their first contribution in #4515
• @angeloxx made their first contribution in #4283
• @tobiabocchi made their first contribution in #4583
• @thameezb made their first contribution in #4567
• @hopkinsth made their first contribution in #4602
• @ilmax made their first contribution in #4662
• @orgads made their first contribution in #4663
• @pier-oliviert made their first contribution in #4577
• @crutonjohn made their first contribution in #4560
• @mjlshen made their first contribution in #4683
• @kimsondrup made their first contribution in #4643
• @KyleMartin901 made their first contribution in #2633
• @benfiola made their first contribution in #4714

Full Changelog: v0.14.2...v0.15.0

Added

• Added support for extraContainers argument. (#4432) @omerap12
• Added support for setting excludeDomains argument. (#4380) @bford-evs

Changed

• Updated ExternalDNS OCI image version to v0.14.2. (#4541) @stevehipwell
• Updated DNSEndpoint CRD. (#4541) @stevehipwell
• Changed the implementation for revisionHistoryLimit to be more generic. (#4541) @stevehipwell

Fixed

• Fixed the ServiceMonitor job name to correctly use the instance label. (#4541) @stevehipwell

What's Changed

• kustomize-v0.14.1 by @Raffo in #4331
• replace all links in tutorials for v0.14.1 by @Raffo in #4332
• chore: upgrade ExternalDNS to go 1.22 by @mloiseleur in #4318
• build(deps): bump the dev-dependencies group with 13 updates by @dependabot in #4329
• build(deps): bump the dev-dependencies group with 5 updates by @dependabot in #4334
• build(deps): bump the dev-dependencies group with 9 updates by @dependabot in #4349
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #4341
• Add dnsendpoint CRD to Helm chart by @onedr0p in #4322
• build(deps): bump the dev-dependencies group with 13 updates by @dependabot in #4361
• build(deps): bump GrantBirki/json-yaml-validate from 2.6.1 to 2.6.2 in the dev-dependencies group by @dependabot in #4364
• chore(chart): Released chart for v0.14.1 by @stevehipwell in #4357
• chore: alphabetical order on providers by @mloiseleur in #4350
• doc: advertise current plan on providers by @mloiseleur in #4365
• Fix(ipv6): support ipv6 shortener and expander equal by @dongjiang1989 in #4351
• feat(WebhookProvider): Let WebhookProvider return SoftError on response status codes >= 500 by @SimonKienzler in #4319
• Webhook provider: Use correct error gauge in AdjustEndpoints() func by @SimonKienzler in #4374
• build(deps): bump the dev-dependencies group with 18 updates by @dependabot in #4381
• Add exclude domains value in Chart by @bford-evs in #4380
• docs(aws): fix typo and upgrade cleanup flow by @franzudev in #4389
• docs(gke): detail how to configure workload identity by @userbradley in #4373
• chore(ci): fix failing test by @mloiseleur in #4397
• chore: Update controller-tools version to v0.14.0 by @dongjiang1989 in #4400
• chore(ci): update golangci-lint to v1.57.2 by @dongjiang1989 in #4406
• chore: upgrade ExternalDNS to go 1.22.2 by @mloiseleur in #4414
• build(deps): bump the dev-dependencies group across 1 directory with 4 updates by @dependabot in #4412
• build(deps): bump the dev-dependencies group across 1 directory with 24 updates by @dependabot in #4416
• custom Azure Active Directory Authority Host by @Jeremy-Boyle in #4210
• feat(DNSimple): User API tokens by @IntegralProgrammer in #4274
• docs: annotation placement for azuredns tutorial by @jonas-budde in #4415
• feat(azure): add zone name filter for Azure Private DNS by @khuedoan in #4346
• test: detect no change necessary with provider specific config by @szuecs in #4189
• docs: add setup example with helm chart on some providers by @omerap12 in #4405
• test: controller run() and successfully shutdown by @szuecs in #3639
• fix syntax on cloudflare externalDNS by @ilyesAj in #4436
• build(deps): bump the dev-dependencies group across 1 directory with 11 updates by @dependabot in #4440
• chore(chart): Adding extra containers by @omerap12 in #4432
• aws: add ca-west-1 region by @jeremy-albuixech in #4444
• fix: duplicated endpoint per hosted zone by @leonardocaylent in #4296
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 in the dev-dependencies group by @dependabot in #4438
• Add IPv6 AAAA record support to PiHole provider by @PseudoResonance in #4324
• fix: soft error on cloudflare rate limits by @ebachle in #4437
• Update cloudflare.md by @mfreeman451 in #4449
• Fix headings, whitespace by @stefanlasiewski in #4457
• docs: add reference to anexia webhook provider by @ProbstenHias in #4441
• fix logline mentioning plugin api by @Raffo in #4459
• docs: lint gke docs + make terraform config more secure by @DrFaust92 in #4456
• build(deps): bump action-stars/install-tool-from-github-release from 0.2.2 to 0.2.3 in the dev-dependencies group by @dependabot in #4464
• changed documentation to include more details description when using API Tokens by @rhjensen79 in #4474
• fix: add clarification to endpoint unit tests by @leonardocaylent in #4462
• build(deps): bump the dev-dependencies group across 1 directory with 19 updates by @mloiseleur in #4476
• build(deps): bump the dev-dependencies group across 1 directory with 19 updates by @dependabot in #4475

Images

registry.k8s.io/external-dns/external-dns:v0.14.2

New Contributors

• @onedr0p made their first contribution in #4322
• @SimonKienzler made their first contribution in #4319
• @bford-evs made their first contribution in #4380
• @franzudev made their first contribution in #4389
• @userbradley made their first contribution in #4373
• @Jeremy-Boyle made their first contribution in #4210
• @IntegralProgrammer made their first contribution in #4274
• @jonas-budde made their first contribution in #4415
• @khuedoan made their first contribution in #4346
• @omerap12 made their first contribution in #4405
• @ilyesAj made their first contribution in #4436
• @jeremy-albuixech made their first contribution in #4444
• @leonardocaylent made their first contribution in #4296
• @PseudoResonance made their first contribution in #4324
• @ebachle made their first contribution in #4437
• @mfreeman451 made their first contribution in #4449
• @ProbstenHias made their first contribution in #4441
• @DrFaust92 made their first contribution in #4456
• @rhjensen79 made their first contribution in #4474

Full Changelog: v0.14.1...v0.14.2

Added

• Added support for setting dnsConfig. (#4265) @davhdavh
• Added support for DNSEndpoint CRD. (#4322) @onedr0p

Changed

• Updated ExternalDNS OCI image version to v0.14.1. (#4357) @stevehipwell

What's Changed

• docs: add reference to adguard webhook provider by @muhlba91 in #4030
• Update azure.md by @sesoldi in #4009
• add initial support for gw apis 1.0.0 GA by @larivierec in #4019
• build(deps): bump the dev-dependencies group with 3 updates by @dependabot in #4028
• add stackit webhook to readme by @PatrickKoss in #4029
• Add org.opencontainers.image.source label to container image by @robinschneider in #4022
• bump kustomize version to v0.14.0 by @Raffo in #4024
• OCI Provider private zone and workload identity support by @anders-swanson in #3995
• RFC2136: Allow multiple zones by @CRASH-Tech in #3976
• chore(chart): Updated GH workflows by @stevehipwell in #4010
• fix: dynamodb registry when statements over 25 by @danie1sullivan in #4021
• Allow to configure revisionHistoryLimit on the K8s Deployment resource by @arnisoph in #4008
• chore: Bump kingpin/v2 dep by @mrueg in #4033
• Update all image versions in documentation by @Raffo in #4037
• updated various broken link in ultradns tutorial by @kundan2707 in #3794
• Make --ignore-hostname-annotation flag more consistent by @johngmyers in #3964
• service source uses externalIPs in ExternalName type if available by @dromie in #4007
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #4046
• fix(google): ensure trailing dot for SRV records by @siliconsheep in #4048
• oracle provider: dns zone cache by @anders-swanson in #4049
• fix(httpProxy): drop status==valid filter by @nefelim4ag in #3978
• doc: added --infoblox-view argument to Infoblox documentation by @tanerm in #4036
• fix: regression on scaleway provider in 0.14.0 by @M0NsTeRRR in #4039
• Add GleSYS to the readme for webhooks by @glesys-andreas in #4054
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #4057
• feat: make webhook httpapi reusable by @mrueg in #4065
• Make routegroup client IPv6 compatible by @mikkeloscar in #4068
• doc: fix link to ionos webhook provider by @akrieg-ionos in #4031
• feat(chart): Added complex provider support by @stevehipwell in #4085
• chore: update 45 go modules dependancies by @mloiseleur in #4088
• webhook: Move httpapi into own package by @mrueg in #4084
• doc: Add netcup webhook provider by @mrueg in #4095
• build(deps): bump the dev-dependencies group with 3 updates by @dependabot in #4097
• update to add il-central-1 by @theloneexplorerquest in #4093
• Add readme bizflycloud webhook provider by @huyduong2792 in #4079
• fix: Allow revisionHistoryLimit to be set to 0 by @bodgit in #4053
• helm: Avoid unnecessary pod restart on each helm chart version by @jkroepke in #4103
• Correct typo from 'Kuberntes' to 'Kubernetes' by @jongwooo in #4118
• build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #4123
• cleanup: remove dead code ((Create|Update|Delete)Records functions in AWS, Google, DNSimple) by @mloiseleur in #4129
• ci: remove confusing-naming property by @PascalBourdier in #4116
• chore: fix code comment by @tanujd11 in #4131
• fix: include cloudflare error in metrics and logs by @danie1sullivan in #4082
• gateway-api: fix wildcard matching by @abursavich in #4124
• build(deps): bump the dev-dependencies group with 23 updates by @dependabot in #4134
• Hetzner webhook provider readme link by @mconfalonieri in #4051
• Fix timeout for traefik-proxy source by @k8r-io in #4076
• build(deps): bump the dev-dependencies group with 7 updates by @dependabot in #4144
• fix: remove useless functions by @PascalBourdier in #4115
• fix(ambassador): don't resolve LB hostname by @fad3t in #4092
• doc(azure): shows how to use userAssignedIdentityID with clientId in azure.json by @thesse1 in #4133
• build(deps): bump the dev-dependencies group with 4 updates by @dependabot in #4146
• webhook: Fix metric name and add request gauges by @mrueg in #4078
• build(deps): bump the dev-dependencies group with 2 updates by @dependabot in #4145
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in #4154
• fix: heritage txt record was not able to be created for txt record by @tanujd11 in #4140
• build(deps): bump the dev-dependencies group with 9 updates by @dependabot in #4155
• fix(istio): support for ExternalIPs in Istio resources by @KarstenSiemer in #4094
• Update rfc2136 provider to split out changes per zone by @gregsidelinger in #4107
• Exoscale provider optimization by @kobajagi in #4071
• fix: godaddy - rate limiter add one token every second by @nefelim4ag in #4087
• feat(helm-chart): Allow configuration of ipFamilyPolicy by @dongjiang1989 in #4153
• chore(chart): Deprecated secretConfiguration by @stevehipwell in #4161
• feat: support webhook provider in Chart by @mloiseleur in #4032
• feat(helm-chart): Released chart for v0.14.0 by @appkins in #4073
• chore(chart): Fixed chart changelog by @stevehipwell in #4168
• fix(pdns): provider implicitly changes CNAME to ALIAS by @tmaroschik in #4162
• fix(chart): Fix webhook install failure by @gabe565 in #4173
• fix: provide possibility to have a soft error mode by @szuecs in #4166
• [helm] Allow tpl in provider again by @jkroepke in #4180
• Fix args for webhook deployment by @webwurst in #4202
• add RBAC fix to namespaces - get, watch, list to each gateway-*route by @orenlevi111 in #4205
• chore: Released chart v1.14.3 by @stevehipwell in #4208
• build(deps): bump the dev-dependencies group with 24 updates by @dependabot in #4227
• Fix "workload identity" spelling by @gdubicki in #4201
• feat(aws-provider): create flag to support sub-domains match parent by @thiagoluiznunes in #4236
• Change coredns testing to fix failing tests by @pascalgn in #4245
• Validate AWS record values size during batch set generation by @megum1n in #4126
• build(deps): bump the dev-dependencies group with 1 update by @dependabot in https://github.com/kubernetes-sigs/external-d...

Fixed

• Fixed args for webhook deployment. (#4202) @webwurst
• Fixed support for gateway-grpcroute, gateway-tlsroute, gateway-tcproute & gateway-udproute. (#4205) @orenlevi111
• Fixed incorrect implementation for setting the automountServiceAccountToken. (#4208) @stevehipwell

Fixed

• Restore template support in .Values.provider and .Values.provider.name

Fixed

• Fixed webhook install failure: "http-webhook-metrics": must be no more than 15 characters. (#4173) @gabe565

Added

• Added the option to explicitly enable or disable service account token automounting. (#3983) @gilles-gosuin
• Added the option to configure revisionHistoryLimit on the K8s Deployment resource. (#4008) @arnisoph
• Added support for webhook providers, as a sidecar. (#4032 @mloiseleur
• Added the option to configure ipFamilyPolicy and ipFamilies of external-dns Service. (#4153) @dongjiang1989

Changed

• Avoid unnecessary pod restart on each helm chart version. (#4103) @jkroepke
• Updated ExternalDNS OCI image version to v0.14.0. (#4073) @appkins

Deprecated

• The secretConfiguration value has been deprecated in favour of creating secrets external to the Helm chart and configuring their use via the extraVolumes & extraVolumeMounts values. (#4161) @stevehipwell