From aa17c342a6c8552eb23872eb4becf9ca12f6a44d Mon Sep 17 00:00:00 2001 From: Martin Linkhorst Date: Thu, 27 Jul 2017 23:25:43 +0200 Subject: [PATCH] docs(faq): add answer for how to run ExternalDNS under service account (#293) --- docs/faq.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/faq.md b/docs/faq.md index 71ee3b8f4..e577942f6 100644 --- a/docs/faq.md +++ b/docs/faq.md @@ -96,3 +96,7 @@ TODO (https://github.com/kubernetes-incubator/external-dns/issues/262) ### Which permissions do I need when running ExternalDNS on a GCE or GKE node. You need to add either https://www.googleapis.com/auth/ndev.clouddns.readwrite or https://www.googleapis.com/auth/cloud-platform on your instance group's scope. + +### How can I run ExternalDNS under a specific GCP Service Account, e.g. to access DNS records in other projects? + +Have a look at https://github.com/linki/mate/blob/v0.6.2/examples/google/README.md#permissions