When enable encryption of TXT record, Deletion of the DNS record failed.

[vtj-mizuno]

What happened:

I deployed external-dns in Amazon EKS using helm.
When enable encryption of TXT record and set to policy=sync, Deletion of the DNS record failed.

How to reproduce it (as minimally and precisely as possible):

1. Deploy external-dns with following args.
   '--txt-encrypt-enabled'
   '--txt-encrypt-aes-key=(32Byte Key)'
   '--policy=sync'
2. Deploy Ingress (registered DNS record by external-dns).
3. Delete Ingress (A DNS record should be deleted by external-dns, but fails).

Anything else we need to know?:

"InvalidChangeBatch" error is reported by AWS Route53. The error message is as follows.

"[Tried to delete resource record set [name='cname-foo.example.com.', type='TXT'] but the values provided do not match the current values, Tried to delete resource record set [name='foo.example.com.', type='TXT'] but the values provided do not match the current values]",

value of resourceRecords changes every time when I confirm contents of ChangeResourceRecordSets event. Probably handling of Nonce is inappropriate.

Environment:

• External-DNS version: 0.13.5
• DNS provider: AWS

[szuecs]

@vsychov