diff --git a/deploy/kubernetes/rbac.yaml b/deploy/kubernetes/rbac.yaml
index 707f73a2d..18f1eff45 100644
--- a/deploy/kubernetes/rbac.yaml
+++ b/deploy/kubernetes/rbac.yaml
@@ -79,3 +79,4 @@ subjects:
 roleRef:
   kind: Role
   name: external-attacher-cfg
+  apiGroup: rbac.authorization.k8s.io