#% if ingress.mode == 'cloudflare-tunnel' %#
---
apiVersion: externaldns.k8s.io/v1alpha1
kind: DNSEndpoint
metadata:
  name: cloudflare-tunnel
spec:
  endpoints:
    - dnsName: "external.${SECRET_DOMAIN}"
      recordType: CNAME
      targets: ["#{ cloudflare_tunnel_id() }#.cfargotunnel.com"]
#% endif %#