diff --git a/kubernetes/system/external-dns/base/external-dns.yaml b/kubernetes/system/external-dns/base/external-dns.yaml
index e81a4e8..581fe85 100644
--- a/kubernetes/system/external-dns/base/external-dns.yaml
+++ b/kubernetes/system/external-dns/base/external-dns.yaml
@@ -11,14 +11,20 @@ metadata:
   namespace: external-dns
 rules:
 - apiGroups: [""]
-  resources: ["services","endpoints","pods"]
+  resources: ["services"]
   verbs: ["get","watch","list"]
-- apiGroups: ["extensions","networking.k8s.io"]
+- apiGroups: [""]
+  resources: ["pods"]
+  verbs: ["get","watch","list"]
+- apiGroups: ["networking","networking.k8s.io"]
   resources: ["ingresses"]
   verbs: ["get","watch","list"]
 - apiGroups: [""]
   resources: ["nodes"]
-  verbs: ["list", "watch"]
+  verbs: ["get","watch","list"]
+- apiGroups: [""]
+  resources: ["endpoints"]
+  verbs: ["get","watch","list"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding