diff --git a/kubernetes/apps/cert-manager/webhook-dnsimple/app/kustomization.yaml b/kubernetes/apps/cert-manager/webhook-dnsimple/app/kustomization.yaml
index 869cf86..fcd67ef 100644
--- a/kubernetes/apps/cert-manager/webhook-dnsimple/app/kustomization.yaml
+++ b/kubernetes/apps/cert-manager/webhook-dnsimple/app/kustomization.yaml
@@ -2,7 +2,6 @@
 # yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: cert-manager
 resources:
   - ./apiservice.yaml
   - ./helmrelease.yaml
diff --git a/kubernetes/apps/cert-manager/webhook-dnsimple/app/rbac.yaml b/kubernetes/apps/cert-manager/webhook-dnsimple/app/rbac.yaml
index ea7712a..d9e791c 100644
--- a/kubernetes/apps/cert-manager/webhook-dnsimple/app/rbac.yaml
+++ b/kubernetes/apps/cert-manager/webhook-dnsimple/app/rbac.yaml
@@ -70,7 +70,7 @@ roleRef:
 subjects:
   - apiGroup: ""
     kind: ServiceAccount
-    name: cert-manager
+    name: webhook-dnsimple
     namespace: cert-manager
 ---
 # Grant the webhook permission to read the api-token Secret in the specified namespace.
diff --git a/kubernetes/apps/cert-manager/webhook-dnsimple/ks.yaml b/kubernetes/apps/cert-manager/webhook-dnsimple/ks.yaml
index 83d4c5c..ae4caf7 100644
--- a/kubernetes/apps/cert-manager/webhook-dnsimple/ks.yaml
+++ b/kubernetes/apps/cert-manager/webhook-dnsimple/ks.yaml
@@ -6,6 +6,7 @@ metadata:
   name: cert-manager-webhook-dnsimple
   namespace: flux-system
 spec:
+  targetNamespace: cert-manager
   interval: 10m
   path: "./kubernetes/apps/cert-manager/webhook-dnsimple/app"
   prune: true