diff --git a/deployments/dns/bind.yaml b/deployments/dns/bind.yaml
index 23eab06..99f9482 100644
--- a/deployments/dns/bind.yaml
+++ b/deployments/dns/bind.yaml
@@ -1,5 +1,10 @@
 ---
 apiVersion: v1
+kind: Namespace
+metadata:
+  name: dns
+---
+apiVersion: v1
 kind: ConfigMap
 metadata:
   name: bind-master-config
diff --git a/deployments/dns/externaldns.yaml b/deployments/dns/externaldns.yaml
index 523dab2..638f403 100644
--- a/deployments/dns/externaldns.yaml
+++ b/deployments/dns/externaldns.yaml
@@ -1,4 +1,9 @@
 ---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-dns
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -26,19 +31,19 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: external-dns
-    namespace: dns
+    namespace: external-dns
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: external-dns
-  namespace: dns
+  namespace: external-dns
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: external-dns
-  namespace: dns
+  namespace: external-dns
 spec:
   replicas: 1
   selector:
@@ -71,6 +76,6 @@ spec:
             - name: RFC2136_TSIG_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: dns-secrets
-                  key: externaldns-secret
+                  name: rfc2136-tsig-secret
+                  key: tsig-secret
 
diff --git a/deployments/dns/namespace.yaml b/deployments/dns/namespace.yaml
deleted file mode 100644
index 52c7228..0000000
--- a/deployments/dns/namespace.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: dns
diff --git a/deployments/kustomization.yaml b/deployments/kustomization.yaml
index f22190e..1e71acc 100644
--- a/deployments/kustomization.yaml
+++ b/deployments/kustomization.yaml
@@ -7,6 +7,5 @@ resources:
   - monitoring/loki.yaml
   - monitoring/prometheus.yaml
   - operators/mariadb.yaml
-  - dns/namespace.yaml
   - dns/bind.yaml
   - dns/externaldns.yaml