# External DNS with DigitalOcean - help wanted?

**URL:** <https://forums.suse.com/t/external-dns-with-digitalocean-help-wanted/12444>\
**Category:** SUSE Rancher Prime\
**Created:** [November 20, 2018, 11:03pm UTC](https://forums.suse.com/t/external-dns-with-digitalocean-help-wanted/12444 "2018-11-20T23:03:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Andrew\_Peacock](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/andrew_peacock/32/3724_2.png) [@Andrew\_Peacock](https://forums.suse.com/u/Andrew_Peacock)\
**Post date:** [November 20, 2018, 11:03pm UTC](https://forums.suse.com/t/external-dns-with-digitalocean-help-wanted/12444/1 "2018-11-20T23:03:47Z")

</div>

Hi all,  
I’m looking for a little help getting external DNS working on Rancher 2. I’ve used it before on Rancher 1, with no issues, and now I’m looking to deploy on 2.0.

Here’s my YAML:

```
apiVersion: apps/v1beta2

```

kind: Deployment  
metadata:  
annotations:  
[deployment.kubernetes.io/revision:](http://deployment.kubernetes.io/revision:) “2”  
creationTimestamp: 2018-11-20T22:31:31Z  
generation: 2  
labels:  
app: external-dns  
chart: external-dns-1.0.2  
heritage: Tiller  
io.cattle.field/appId: external-dns  
release: external-dns  
name: external-dns  
namespace: external-dns  
resourceVersion: “2859”  
selfLink: /apis/apps/v1beta2/namespaces/external-dns/deployments/external-dns  
uid: 07378f71-ed14-11e8-9eef-4afb01c9c056  
spec:  
progressDeadlineSeconds: 600  
replicas: 1  
revisionHistoryLimit: 10  
selector:  
matchLabels:  
app: external-dns  
heritage: Tiller  
release: external-dns  
strategy:  
rollingUpdate:  
maxSurge: 1  
maxUnavailable: 1  
type: RollingUpdate  
template:  
metadata:  
annotations:  
[cattle.io/timestamp:](http://cattle.io/timestamp:) 2018-11-20T22:34:02Z  
[field.cattle.io/ports:](http://field.cattle.io/ports:) ‘[[{“containerPort”:7979,“dnsName”:“external-dns-”,“name”:“7979tcp00”,“protocol”:“TCP”,“sourcePort”:0}]]’  
creationTimestamp: null  
labels:  
app: external-dns  
heritage: Tiller  
release: external-dns  
spec:  
containers:  
- args:  
- --log-level=debug  
- --policy=upsert-only  
- --provider=digitalocean  
- --registry=txt  
- --source=service  
- --source=ingress  
env:  
- name: DO\_TOKEN  
value: 123123123123123123123  
image: registry.opensource.zalan.do/teapot/external-dns:v0.5.7  
imagePullPolicy: IfNotPresent  
livenessProbe:  
failureThreshold: 3  
httpGet:  
path: /healthz  
port: 7979  
scheme: HTTP  
periodSeconds: 10  
successThreshold: 1  
timeoutSeconds: 1  
name: external-dns  
ports:  
- containerPort: 7979  
name: 7979tcp00  
protocol: TCP  
resources: {}  
securityContext:  
capabilities: {}  
terminationMessagePath: /dev/termination-log  
terminationMessagePolicy: File  
dnsPolicy: ClusterFirst  
restartPolicy: Always  
schedulerName: default-scheduler  
securityContext: {}  
serviceAccount: default  
serviceAccountName: default  
terminationGracePeriodSeconds: 30  
status:  
availableReplicas: 1  
conditions:

- lastTransitionTime: 2018-11-20T22:31:31Z  
lastUpdateTime: 2018-11-20T22:31:31Z  
message: Deployment has minimum availability.  
reason: MinimumReplicasAvailable  
status: “True”  
type: Available
- lastTransitionTime: 2018-11-20T22:31:31Z  
lastUpdateTime: 2018-11-20T22:32:42Z  
message: ReplicaSet “external-dns-7559c65d74” has successfully progressed.  
reason: NewReplicaSetAvailable  
status: “True”  
type: Progressing  
observedGeneration: 2  
readyReplicas: 1  
replicas: 1  
updatedReplicas: 1

But this doesn’t seem up to update DigitalOcean DNS.

In the pod logs, i’m getting "time=“2018-11-20T23:01:42Z” level=error msg=“services is forbidden: User “system:serviceaccount:external-dns:default” cannot list services at the cluster scope” filling the errorlog.

Any thoughts you can offier would be great appreciated.

---

<div class="post-metadata">

**Author:** ![Paveltarno](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/paveltarno/32/4784_2.png) [@Paveltarno](https://forums.suse.com/u/Paveltarno)\
**Post date:** [January 23, 2019, 2:21pm UTC](https://forums.suse.com/t/external-dns-with-digitalocean-help-wanted/12444/2 "2019-01-23T14:21:26Z")

</div>

Hey Andrew,  
if it’s still relevant, I had the same issue.  
The setting: rbac.create=true did the trick (looks like k8s is now using rbac by default)

---

<div class="post-metadata">

**Author:** ![Andrew\_Peacock](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/andrew_peacock/32/3724_2.png) [@Andrew\_Peacock](https://forums.suse.com/u/Andrew_Peacock)\
**Post date:** [January 30, 2019, 10:55am UTC](https://forums.suse.com/t/external-dns-with-digitalocean-help-wanted/12444/3 "2019-01-30T10:55:46Z")

</div>

Hi Pavel,  
Thanks for getting back to me, and apologies for my delay.

I did end up getting this working OK, but it’s been so long I can’t remember how, unfortunately. If anyone else reads this later, let me know and I’ll share the config details.

Regards,  
Andy