Separate ClusterRole rules in external-dns RBAC (#11129)

* Separate Istio CRD rules in external-dns RBAC

Signed-off-by: Chris O'Brien <chrisob91@gmail.com>

* Separate ingress rule resource to extensions apiGroup in external-dns RBAC

Signed-off-by: Chris O'Brien <chrisob91@gmail.com>

* Bump external-dns chart version

Signed-off-by: Chris O'Brien <chrisob91@gmail.com>

stable/external-dns/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v1
-description:
+description: |
   Configure external DNS servers (AWS Route53, Google CloudDNS and others)
   for Kubernetes Ingresses and Services
 name: external-dns
-version: 1.6.0
+version: 1.6.1
 appVersion: 0.5.9
 home: https://github.com/kubernetes-incubator/external-dns
 sources:

stable/external-dns/templates/clusterrole.yaml

@@ -8,13 +8,25 @@ metadata:
 rules:
   - apiGroups:
       - ""
-      - extensions
-      - networking.istio.io
     resources:
-      - ingresses
       - services
       - pods
       - nodes
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - extensions
+    resources:
+      - ingresses
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - networking.istio.io
+    resources:
       - gateways
     verbs:
       - get