[Question] DNS records deletion on installation.

[gabricar-andela]

Hi there! First, thanks for this nice project!

Do you have any plans to change the behavior of deleting ALL DNS records to which the API token has access? If not, any suggestion of how to implement this tool without downtime on production environments that already have many existing records?

Thanks!

[rxbn]

Hi @gabricar-andela

Thank you for considering cloudflare-operator :)

Since cloudflare-operator is meant to be the single source of truth for all DNS records, it is not planned to change this behavior.

However, we are currently working on a migration guide (containeroo/website#2) and a CLI helper to convert your Cloudflare zone into DNSRecord objects (#367).

I will keep you posted!

-- Robin

[rxbn]

Hi @gabricar-andela,

We now have an initial version of the CLI helper and the migration guide:

• CLI: cfop-generator (If you're on a Mac, you can use brew install containeroo/tap/cfop-generator; otherwise, please download the binary from the GitHub release.)
• Guide: Migration Guide

Would you be willing to test the cfop-generator tool for us?
All you need is an export of your Cloudflare zone. The helper does not modify anything in your Cloudflare account or apply any objects to your Kubernetes cluster.

Please check if the generated DNS records look correct, and let us know if you see any opportunities for improvement.

Your help is greatly appreciated!

Best regards,
Robin

[gabricar-andela]

Hi Robin, thanks!

In our use case, not all of our DNS records live inside our K8S cluster, we have entries pointing to 3rd party tools for example. Would it work the same way?

Also, I'm a little bit afraid to test this in our production environment (unfortunately we use the same zone for prod and staging). I will try to test it in some other account!

[rxbn]

In our use case, not all of our DNS records live inside our K8S cluster, we have entries pointing to 3rd party tools for example. Would it work the same way?

If I understand your question correctly: Yes, you can create DNS records for third-party tools. They don't need to run inside Kubernetes. You just need to create a DNSRecord object in Kubernetes for each record.

Also, I'm a little bit afraid to test this in our production environment (unfortunately we use the same zone for prod and staging). I will try to test it in some other account!

As I mentioned, the helper does not modify anything in your Cloudflare account. You simply need to export the DNS records and run the CLI. It also does not alter anything inside Kubernetes. It’s safe to run without any negative consequences.