diff --git a/deployments/dns/bind.yaml b/deployments/dns/bind.yaml
index 99f9482..23eab06 100644
--- a/deployments/dns/bind.yaml
+++ b/deployments/dns/bind.yaml
@@ -1,10 +1,5 @@
 ---
 apiVersion: v1
-kind: Namespace
-metadata:
-  name: dns
----
-apiVersion: v1
 kind: ConfigMap
 metadata:
   name: bind-master-config
diff --git a/deployments/dns/externaldns.yaml b/deployments/dns/externaldns.yaml
index 638f403..523dab2 100644
--- a/deployments/dns/externaldns.yaml
+++ b/deployments/dns/externaldns.yaml
@@ -1,9 +1,4 @@
 ---
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: external-dns
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -31,19 +26,19 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: external-dns
-    namespace: external-dns
+    namespace: dns
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: external-dns
-  namespace: external-dns
+  namespace: dns
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: external-dns
-  namespace: external-dns
+  namespace: dns
 spec:
   replicas: 1
   selector:
@@ -76,6 +71,6 @@ spec:
             - name: RFC2136_TSIG_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: rfc2136-tsig-secret
-                  key: tsig-secret
+                  name: dns-secrets
+                  key: externaldns-secret
 
diff --git a/deployments/dns/namespace.yaml b/deployments/dns/namespace.yaml
new file mode 100644
index 0000000..52c7228
--- /dev/null
+++ b/deployments/dns/namespace.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: dns