diff --git a/upup/models/bindata.go b/upup/models/bindata.go
index 19c7dc415afa3..7587d7d0e6698 100644
--- a/upup/models/bindata.go
+++ b/upup/models/bindata.go
@@ -29416,7 +29416,7 @@ metadata:
   labels:
     k8s-addon: external-dns.addons.k8s.io
     k8s-app: external-dns
-    version: v0.4.4
+    version: v0.7.6
 spec:
   replicas: 1
   selector:
@@ -29427,7 +29427,7 @@ spec:
       labels:
         k8s-addon: external-dns.addons.k8s.io
         k8s-app: external-dns
-        version: v0.4.4
+        version: v0.7.6
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
@@ -29442,7 +29442,7 @@ spec:
       hostNetwork: true
       containers:
       - name: external-dns
-        image: registry.opensource.zalan.do/teapot/external-dns:v0.4.4
+        image: k8s.gcr.io/external-dns/external-dns:v0.7.6
         args:
 {{ range $arg := ExternalDnsArgv }}
         - "{{ $arg }}"
@@ -29470,18 +29470,15 @@ metadata:
     k8s-addon: external-dns.addons.k8s.io
   name: kops:external-dns
 rules:
-- apiGroups:
-  - ""
-  resources:
-  - services
-  verbs:
-  - list
-- apiGroups:
-  - extensions
-  resources:
-  - ingresses
-  verbs:
-  - list
+- apiGroups: [""]
+  resources: ["services","endpoints","pods"]
+  verbs: ["get","watch","list"]
+- apiGroups: ["extensions","networking.k8s.io"]
+  resources: ["ingresses"]
+  verbs: ["get","watch","list"]
+- apiGroups: [""]
+  resources: ["nodes"]
+  verbs: ["list","watch"]
 
 ---
 
diff --git a/upup/models/cloudup/resources/addons/external-dns.addons.k8s.io/k8s-1.12.yaml.template b/upup/models/cloudup/resources/addons/external-dns.addons.k8s.io/k8s-1.12.yaml.template
index 9bb99c82e9fd9..e000a4c32a6b1 100644
--- a/upup/models/cloudup/resources/addons/external-dns.addons.k8s.io/k8s-1.12.yaml.template
+++ b/upup/models/cloudup/resources/addons/external-dns.addons.k8s.io/k8s-1.12.yaml.template
@@ -6,7 +6,7 @@ metadata:
   labels:
     k8s-addon: external-dns.addons.k8s.io
     k8s-app: external-dns
-    version: v0.4.4
+    version: v0.7.6
 spec:
   replicas: 1
   selector:
@@ -17,7 +17,7 @@ spec:
       labels:
         k8s-addon: external-dns.addons.k8s.io
         k8s-app: external-dns
-        version: v0.4.4
+        version: v0.7.6
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
@@ -32,7 +32,7 @@ spec:
       hostNetwork: true
       containers:
       - name: external-dns
-        image: registry.opensource.zalan.do/teapot/external-dns:v0.4.4
+        image: k8s.gcr.io/external-dns/external-dns:v0.7.6
         args:
 {{ range $arg := ExternalDnsArgv }}
         - "{{ $arg }}"
@@ -60,18 +60,15 @@ metadata:
     k8s-addon: external-dns.addons.k8s.io
   name: kops:external-dns
 rules:
-- apiGroups:
-  - ""
-  resources:
-  - services
-  verbs:
-  - list
-- apiGroups:
-  - extensions
-  resources:
-  - ingresses
-  verbs:
-  - list
+- apiGroups: [""]
+  resources: ["services","endpoints","pods"]
+  verbs: ["get","watch","list"]
+- apiGroups: ["extensions","networking.k8s.io"]
+  resources: ["ingresses"]
+  verbs: ["get","watch","list"]
+- apiGroups: [""]
+  resources: ["nodes"]
+  verbs: ["list","watch"]
 
 ---
 
diff --git a/upup/pkg/fi/cloudup/bootstrapchannelbuilder/bootstrapchannelbuilder.go b/upup/pkg/fi/cloudup/bootstrapchannelbuilder/bootstrapchannelbuilder.go
index dac6f375ba0fc..692b4632af762 100644
--- a/upup/pkg/fi/cloudup/bootstrapchannelbuilder/bootstrapchannelbuilder.go
+++ b/upup/pkg/fi/cloudup/bootstrapchannelbuilder/bootstrapchannelbuilder.go
@@ -435,7 +435,7 @@ func (b *BootstrapChannelBuilder) buildAddons(c *fi.ModelBuilderContext) (*chann
 	if featureflag.EnableExternalDNS.Enabled() {
 		{
 			key := "external-dns.addons.k8s.io"
-			version := "0.4.5-kops.1"
+			version := "0.7.6-kops.1"
 
 			{
 				location := key + "/k8s-1.12.yaml"