diff --git a/templates/dns-externaldns.yaml b/templates/dns-externaldns.yaml
index f713c50..51abc9f 100644
--- a/templates/dns-externaldns.yaml
+++ b/templates/dns-externaldns.yaml
@@ -13,6 +13,9 @@ rules:
   - apiGroups: [""]
     resources: ["nodes"]
     verbs: ["list","watch"]
+  - apiGroups: ["discovery.k8s.io"]
+    resources: ["endpointslices"]
+    verbs: ["get", "watch", "list"]
   # Add DNS provider specific rules here if needed (e.g., for AWS IAM, GCP etc.)
 ---
 apiVersion: rbac.authorization.k8s.io/v1