diff --git a/cmd/k8s-operator/deploy/manifests/nameserver/rolebinding.yaml b/cmd/k8s-operator/deploy/manifests/nameserver/rolebinding.yaml
index e0482cc1ef615..54498462f8b64 100644
--- a/cmd/k8s-operator/deploy/manifests/nameserver/rolebinding.yaml
+++ b/cmd/k8s-operator/deploy/manifests/nameserver/rolebinding.yaml
@@ -8,5 +8,5 @@ subjects:
     namespace: tailscale 
 roleRef:
   kind: Role
-  name: configmap-watcher
+  name: dnsrecords-watcher
   apiGroup: rbac.authorization.k8s.io