diff --git a/deployments/dns/externaldns.yaml b/deployments/dns/externaldns.yaml
index b940155..c3a9736 100644
--- a/deployments/dns/externaldns.yaml
+++ b/deployments/dns/externaldns.yaml
@@ -13,6 +13,9 @@ rules:
   - apiGroups: [""]
     resources: ["nodes"]
     verbs: ["list","watch"]
+  - apiGroups: ["discovery.k8s.io"]
+    resources: ["endpointslices"]
+    verbs: ["get", "watch", "list"]
   # Add DNS provider specific rules here if needed (e.g., for AWS IAM, GCP etc.)
 ---
 apiVersion: rbac.authorization.k8s.io/v1