search

kubernetes-sigs / external-dns

Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services
Apache License 2.0
7.61k stars 2.55k forks source link

Setting UP external-dns for Multiple Accounts in AWS #4526

Open manishkumar-cpi opened 3 months ago

manishkumar-cpi commented 3 months ago

How to configure External-DNS to manage domains across multiple AWS accounts. We have two AWS accounts, both hosting few domains. I am able to update DNS records in cross account using aws-assume-role flag but how to make same external-dns instance/controller update domains in same account too?

manishkumar-cpi commented 3 months ago

@devang704 Can you paste your policy attached to the role? Seems something wrong with your policy

devang704 commented 3 months ago

Hi @manishkumar-cpi, I have fixed the issue thanks for support!

gdziwoki commented 1 month ago

I wanted to provide a bit more background as to why this would be a very welcome change. We want to use the EKS Multi-Account strategy. Dev teams will have accounts where they can set up their DBs and whatnot, their secrets in Secretmanager, have logs pushed to Cloudwatch in their accounts etc. Most of the controllers support cross-account use-cases. This is one of the missing ones, which would allow each dev team to manage domains in their accounts independantly.