diff --git a/bootstrap/templates/kubernetes/apps/network/external-dns/app/dnsendpoint-crd.yaml.j2 b/bootstrap/templates/kubernetes/apps/network/external-dns/app/dnsendpoint-crd.yaml.j2
deleted file mode 100644
index 9254f89d1..000000000
--- a/bootstrap/templates/kubernetes/apps/network/external-dns/app/dnsendpoint-crd.yaml.j2
+++ /dev/null
@@ -1,93 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.5.0
-    api-approved.kubernetes.io: "https://github.com/kubernetes-sigs/external-dns/pull/2007"
-  creationTimestamp: null
-  name: dnsendpoints.externaldns.k8s.io
-spec:
-  group: externaldns.k8s.io
-  names:
-    kind: DNSEndpoint
-    listKind: DNSEndpointList
-    plural: dnsendpoints
-    singular: dnsendpoint
-  scope: Namespaced
-  versions:
-  - name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: DNSEndpointSpec defines the desired state of DNSEndpoint
-            properties:
-              endpoints:
-                items:
-                  description: Endpoint is a high-level way of a connection between a service and an IP
-                  properties:
-                    dnsName:
-                      description: The hostname of the DNS record
-                      type: string
-                    labels:
-                      additionalProperties:
-                        type: string
-                      description: Labels stores labels defined for the Endpoint
-                      type: object
-                    providerSpecific:
-                      description: ProviderSpecific stores provider specific config
-                      items:
-                        description: ProviderSpecificProperty holds the name and value of a configuration which is specific to individual DNS providers
-                        properties:
-                          name:
-                            type: string
-                          value:
-                            type: string
-                        type: object
-                      type: array
-                    recordTTL:
-                      description: TTL for the record
-                      format: int64
-                      type: integer
-                    recordType:
-                      description: RecordType type of record, e.g. CNAME, A, SRV, TXT etc
-                      type: string
-                    setIdentifier:
-                      description: Identifier to distinguish multiple records with the same name and type (e.g. Route53 records with routing policies other than 'simple')
-                      type: string
-                    targets:
-                      description: The targets the DNS record points to
-                      items:
-                        type: string
-                      type: array
-                  type: object
-                type: array
-            type: object
-          status:
-            description: DNSEndpointStatus defines the observed state of DNSEndpoint
-            properties:
-              observedGeneration:
-                description: The generation observed by the external-dns controller.
-                format: int64
-                type: integer
-            type: object
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
diff --git a/bootstrap/templates/kubernetes/apps/network/external-dns/app/helmrelease.yaml.j2 b/bootstrap/templates/kubernetes/apps/network/external-dns/app/helmrelease.yaml.j2
index 336798120..80c31d184 100644
--- a/bootstrap/templates/kubernetes/apps/network/external-dns/app/helmrelease.yaml.j2
+++ b/bootstrap/templates/kubernetes/apps/network/external-dns/app/helmrelease.yaml.j2
@@ -8,17 +8,20 @@ spec:
   chart:
     spec:
       chart: external-dns
-      version: 1.14.3
+      version: 1.14.4
       sourceRef:
         kind: HelmRepository
         name: external-dns
         namespace: flux-system
   install:
+    crds: CreateReplace
     remediation:
       retries: 3
   upgrade:
     cleanupOnFail: true
+    crds: CreateReplace
     remediation:
+      strategy: rollback
       retries: 3
   values:
     fullnameOverride: *app
diff --git a/bootstrap/templates/kubernetes/apps/network/external-dns/app/kustomization.yaml.j2 b/bootstrap/templates/kubernetes/apps/network/external-dns/app/kustomization.yaml.j2
index 069449ada..95bf4747f 100644
--- a/bootstrap/templates/kubernetes/apps/network/external-dns/app/kustomization.yaml.j2
+++ b/bootstrap/templates/kubernetes/apps/network/external-dns/app/kustomization.yaml.j2
@@ -2,6 +2,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./dnsendpoint-crd.yaml
   - ./secret.sops.yaml
   - ./helmrelease.yaml