apiVersion: dns.cnrm.cloud.google.com/v1beta1
kind: DNSManagedZone
metadata:
  name: testKptName-goog-apis # {"$kpt-set":"name-goog-apis"}
spec:
  description: "private zone for Google APIs"
  dnsName: "googleapis.com."
  visibility: private
  privateVisibilityConfig:
    networks:
    - networkRef:
        name: testKptName # {"$kpt-set":"name"}
---
apiVersion: dns.cnrm.cloud.google.com/v1beta1
kind: DNSRecordSet
metadata:
  name: testKptName-goog-cname # {"$kpt-set":"name-goog-cname"}
spec:
  name: "*.googleapis.com."
  type: "CNAME"
  ttl: 300
  managedZoneRef:
    name: testKptName-goog-apis # {"$kpt-set":"name-goog-apis"}
  rrdatas:
  - "restricted.googleapis.com."
---
apiVersion: dns.cnrm.cloud.google.com/v1beta1
kind: DNSRecordSet
metadata:
  name: testKptName-goog-a # {"$kpt-set":"name-goog-a"}
spec:
  name: "restricted.googleapis.com."
  type: "A"
  ttl: 300
  managedZoneRef:
    name: testKptName-goog-apis # {"$kpt-set":"name-goog-apis"}
  rrdatas:
  - "199.36.153.4"
  - "199.36.153.5"
  - "199.36.153.6"
  - "199.36.153.7"
