diff --git a/apps/whoami/base/ingress.yaml b/apps/whoami/base/ingress.yaml
index 5307638..05daa80 100644
--- a/apps/whoami/base/ingress.yaml
+++ b/apps/whoami/base/ingress.yaml
@@ -5,7 +5,6 @@ metadata:
   name: whoami-ingressroute
   annotations:
     external-dns.alpha.kubernetes.io/hostname: whoami2.moll.re
-    kubernetes.io/ingress.class: traefik
 spec:
   entryPoints:
     - websecure
diff --git a/infrastructure/external-dns/rbac.yaml b/infrastructure/external-dns/rbac.yaml
index a8ae114..d862bb5 100644
--- a/infrastructure/external-dns/rbac.yaml
+++ b/infrastructure/external-dns/rbac.yaml
@@ -11,12 +11,12 @@ rules:
 - apiGroups: [""]
   resources: ["services","endpoints","pods"]
   verbs: ["get","watch","list"]
-- apiGroups: ["extensions","networking.k8s.io"]
-  resources: ["ingresses"]
-  verbs: ["get","watch","list"]
 - apiGroups: [""]
   resources: ["nodes"]
-  verbs: ["list", "watch"]
+  verbs: ["list","watch"]
+- apiGroups: ["traefik.containo.us","traefik.io"]
+  resources: ["ingressroutes", "ingressroutetcps", "ingressrouteudps"]
+  verbs: ["get","watch","list"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding