fix

kubernetes/system/external-dns/base/external-dns.yaml

@@ -1,21 +1,12 @@
 apiVersion: v1
-kind: Namespace
-metadata:
-  name: external-dns
-  labels:
-    name: external-dns
----
-apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: external-dns
-  namespace: external-dns
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: external-dns
-  namespace: external-dns
 rules:
 - apiGroups: [""]
   resources: ["services","endpoints","pods"]
@@ -30,22 +21,20 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: external-dns
-  namespace: external-dns
+  name: external-dns-viewer
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: external-dns
 subjects:
 - kind: ServiceAccount
   name: external-dns
-  namespace: external-dns
+  namespace: default
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: external-dns
-  namespace: external-dns
 spec:
   strategy:
     type: Recreate
@@ -60,15 +49,14 @@ spec:
       serviceAccountName: external-dns
       containers:
       - name: external-dns
-        imagePullPolicy: Always
-        image: registry.k8s.io/external-dns/external-dns:v0.14.0
+        image: registry.k8s.io/external-dns/external-dns:v0.14.2
         args:
-        - --source=ingress
-        - --domain-filter=ninebasetwo.net
+        - --source=ingress # ingress is also possible
+        - --domain-filter=ninebasetwo.net # (optional) limit to only example.com domains; change to match the zone created above.
         - --provider=cloudflare
-        - --cloudflare-proxied
+        - --cloudflare-proxied # (optional) enable the proxy feature of Cloudflare (DDOS protection, CDN...)
         env:
         - name: CF_API_KEY
           value: "ce2277909a5917bc9655fbe1b84180efedceb" # this is supposed to be a secret
         - name: CF_API_EMAIL
-          value: "[email protected]"
+          value: "[email protected]"