deployments/dns/bind.yaml

@@ -1,5 +1,10 @@
 ---
 apiVersion: v1
+kind: Namespace
+metadata:
+  name: dns
+---
+apiVersion: v1
 kind: ConfigMap
 metadata:
   name: bind-master-config

deployments/dns/externaldns.yaml

@@ -1,4 +1,9 @@
 ---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-dns
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -26,19 +31,19 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: external-dns
-    namespace: dns
+    namespace: external-dns
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: external-dns
-  namespace: dns
+  namespace: external-dns
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: external-dns
-  namespace: dns
+  namespace: external-dns
 spec:
   replicas: 1
   selector:
@@ -71,6 +76,6 @@ spec:
             - name: RFC2136_TSIG_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: dns-secrets
+                  name: rfc2136-tsig-secret
-                  key: externaldns-secret
+                  key: tsig-secret
 

deployments/dns/namespace.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: dns

deployments/kustomization.yaml

@@ -7,6 +7,5 @@ resources:
   - monitoring/loki.yaml
   - monitoring/prometheus.yaml
   - operators/mariadb.yaml
-  - dns/namespace.yaml
   - dns/bind.yaml
   - dns/externaldns.yaml