external-dns webhook

Kubernetes external-dns webhook provider for domain-pinned subtrees.

Avura implements the external-dns webhook provider contract, so a Kubernetes cluster can manage records for a domain-pinned subtree directly. Point external-dns at a per-domain token URL instead of the standard bearer header.

/api/external-dns/:token

GET/api/external-dns/:token

Provider negotiation — returns the domain filter external-dns is responsible for.

GET/api/external-dns/:token/records

List the records external-dns currently manages in the pinned subtree.

POST/api/external-dns/:token/records

Apply a changeset of record creates, updates, and deletes.

POST/api/external-dns/:token/adjustendpoints

Let Avura normalize a batch of endpoints before external-dns applies them.

GET/api/external-dns/:token/healthz

Liveness check external-dns polls before talking to the provider.

The :token segment is a domain-pinned token, not an Authorization header — this is a requirement of the external-dns webhook contract itself.