fix

kubernetes/system/external-dns/base/external-dns.yaml

@@ -1,50 +1,7 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: external-dns
-  namespace: external-dns
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: external-dns
-  namespace: external-dns
-rules:
-- apiGroups: [""]
-  resources: ["services"]
-  verbs: ["get","watch","list"]
-- apiGroups: [""]
-  resources: ["pods"]
-  verbs: ["get","watch","list"]
-- apiGroups: ["networking","networking.k8s.io"]
-  resources: ["ingresses"]
-  verbs: ["get","watch","list"]
-- apiGroups: [""]
-  resources: ["nodes"]
-  verbs: ["get","watch","list"]
-- apiGroups: [""]
-  resources: ["endpoints"]
-  verbs: ["get","watch","list"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: external-dns-viewer
-  namespace: external-dns
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: external-dns
-subjects:
-- kind: ServiceAccount
-  name: external-dns
-  namespace: default
----
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: external-dns
-  namespace: external-dns
 spec:
   strategy:
     type: Recreate
@@ -56,7 +13,6 @@ spec:
       labels:
         app: external-dns
     spec:
-      serviceAccountName: external-dns
       containers:
       - name: external-dns
         image: registry.k8s.io/external-dns/external-dns:v0.14.2
@@ -65,8 +21,8 @@ spec:
         - --domain-filter=ninebasetwo.net # (optional) limit to only example.com domains; change to match the zone created above.
         - --provider=cloudflare
         - --cloudflare-proxied # (optional) enable the proxy feature of Cloudflare (DDOS protection, CDN...)
-        env:
-        - name: CF_API_KEY
-          value: "ce2277909a5917bc9655fbe1b84180efedceb" # this is supposed to be a secret
-        - name: CF_API_EMAIL
-          value: "[email protected]"
+      env:
+      - name: CF_API_KEY
+        value: "ce2277909a5917bc9655fbe1b84180efedceb" # this is supposed to be a secret
+      - name: CF_API_EMAIL
+        value: "[email protected]"