Step 5: tower 0.4.0 — DNS automation via Cloudflare

templates/backend-deployment.yaml

@@ -56,6 +56,22 @@ spec:
                 secretKeyRef:
                   name: {{ .Values.config.existingSecret }}
                   key: ARGOCD_PASSWORD
+            # Cloudflare creds for per-tenant DNS automation. Optional —
+            # if absent, deploys to the in-cluster destination still
+            # work (wildcard A handles them); deploys to non-default
+            # servers fail fast with a clear error.
+            - name: TOWER_CLOUDFLARE_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.config.existingSecret }}
+                  key: CLOUDFLARE_TOKEN
+                  optional: true
+            - name: TOWER_CLOUDFLARE_ZONE_ID
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.config.existingSecret }}
+                  key: CLOUDFLARE_ZONE_ID
+                  optional: true
           readinessProbe:
             httpGet:
               path: /healthz