title: Access GCP Cloud DNS from pods on GKE
body: <p>I’m investigating this letsencrypt controller (<a href="https://github.com/tazjin/kubernetes-letsencrypt" rel="noreferrer">https://github.com/tazjin/kubernetes-letsencrypt</a>).</p>
  
  <p>It requires pods have permission to make changes to records in Cloud DNS. I thought with the pods running on GKE I’d get that access with the default service account, but the requests are failing. What do I need to do do to allow the pods access to Cloud DNS?</p>