feat(external-dns): update helm-release to v1.14.0

[tyriis-automation]

This PR contains the following updates:

Package	Update	Change	OpenSSF
external-dns	minor	1.13.1 -> 1.14.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[sonarqubecloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

[tyriis-automation]

--- HelmRelease: networking/external-dns ServiceAccount: networking/external-dns

+++ HelmRelease: networking/external-dns ServiceAccount: networking/external-dns

@@ -1,9 +1,10 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
+automountServiceAccountToken: null
 metadata:
   name: external-dns
   namespace: networking
   labels:
     app.kubernetes.io/name: external-dns
     app.kubernetes.io/instance: external-dns
--- HelmRelease: networking/external-dns Deployment: networking/external-dns

+++ HelmRelease: networking/external-dns Deployment: networking/external-dns

@@ -21,28 +21,32 @@

       labels:
         app.kubernetes.io/name: external-dns
         app.kubernetes.io/instance: external-dns
       annotations:
         secret.reloader.stakater.com/reload: external-dns-secret
     spec:
+      automountServiceAccountToken: null
       serviceAccountName: external-dns
       securityContext:
         fsGroup: 65534
+        runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: external-dns
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
+          privileged: false
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
-          runAsUser: 65534
-        image: registry.k8s.io/external-dns/external-dns:v0.13.6
+          runAsUser: 65532
+        image: registry.k8s.io/external-dns/external-dns:v0.14.0
         imagePullPolicy: IfNotPresent
         env:
         - name: CF_API_EMAIL
           valueFrom:
             secretKeyRef:
               key: email

[tyriis-automation]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ EDITORCONFIG	editorconfig-checker	1		0	0.01s
✅ REPOSITORY	gitleaks	yes		no	2.03s
✅ YAML	prettier	1		0	0.53s
✅ YAML	yamllint	1		0	0.37s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

[tyriis-automation]

--- kubernetes/talos-flux/apps/networking/external-dns/app Kustomization: flux-system/apps-external-dns HelmRelease: networking/external-dns

+++ kubernetes/talos-flux/apps/networking/external-dns/app Kustomization: flux-system/apps-external-dns HelmRelease: networking/external-dns

@@ -14,13 +14,13 @@

     spec:
       chart: external-dns
       sourceRef:
         kind: HelmRepository
         name: external-dns-charts
         namespace: flux-system
-      version: 1.13.1
+      version: 1.14.0
   install:
     createNamespace: true
     remediation:
       retries: 3
   interval: 15m
   maxHistory: 15