feat(helm): update chart external-dns to 1.14.3

[layla-bot]

This PR contains the following updates:

Package	Update	Change
external-dns	minor	1.13.1 -> 1.14.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[layla-bot]

--- kubernetes/apps/main/networking/external-dns/app Kustomization: flux-system/external-dns HelmRelease: networking/external-dns-cloudflare

+++ kubernetes/apps/main/networking/external-dns/app Kustomization: flux-system/external-dns HelmRelease: networking/external-dns-cloudflare

@@ -13,13 +13,13 @@

     spec:
       chart: external-dns
       sourceRef:
         kind: HelmRepository
         name: external-dns
         namespace: flux-system
-      version: 1.13.1
+      version: 1.14.3
   install:
     remediation:
       retries: 3
   interval: 30m
   uninstall:
     keepHistory: false

[layla-bot]

--- HelmRelease: networking/external-dns-cloudflare ServiceAccount: networking/external-dns-cloudflare

+++ HelmRelease: networking/external-dns-cloudflare ServiceAccount: networking/external-dns-cloudflare

@@ -5,7 +5,8 @@

   name: external-dns-cloudflare
   namespace: networking
   labels:
     app.kubernetes.io/name: external-dns
     app.kubernetes.io/instance: external-dns-cloudflare
     app.kubernetes.io/managed-by: Helm
+automountServiceAccountToken: null
 
--- HelmRelease: networking/external-dns-cloudflare Deployment: networking/external-dns-cloudflare

+++ HelmRelease: networking/external-dns-cloudflare Deployment: networking/external-dns-cloudflare

@@ -24,25 +24,28 @@

       annotations:
         secret.reloader.stakater.com/reload: external-dns-cloudflare-secret
     spec:
       serviceAccountName: external-dns-cloudflare
       securityContext:
         fsGroup: 65534
+        runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: external-dns
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
+          privileged: false
           readOnlyRootFilesystem: true
+          runAsGroup: 65532
           runAsNonRoot: true
-          runAsUser: 65534
-        image: registry.k8s.io/external-dns/external-dns:v0.13.6
+          runAsUser: 65532
+        image: registry.k8s.io/external-dns/external-dns:v0.14.0
         imagePullPolicy: IfNotPresent
         env:
         - name: CF_API_EMAIL
           valueFrom:
             secretKeyRef:
               key: email