diff --git a/basic-dotnet-core/.openshift/templates/deployment.yml b/basic-dotnet-core/.openshift/templates/deployment.yml
index d7431a90..e1170888 100644
--- a/basic-dotnet-core/.openshift/templates/deployment.yml
+++ b/basic-dotnet-core/.openshift/templates/deployment.yml
@@ -108,6 +108,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/basic-nginx/.openshift/deployment/template.yml b/basic-nginx/.openshift/deployment/template.yml
index 254d50f3..82782808 100644
--- a/basic-nginx/.openshift/deployment/template.yml
+++ b/basic-nginx/.openshift/deployment/template.yml
@@ -102,6 +102,8 @@ objects:
     namespace: ${APPLICATION_NAME}${ENV}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/basic-spring-boot-tekton/.openshift/templates/deployment.yml b/basic-spring-boot-tekton/.openshift/templates/deployment.yml
index 6c20e7bc..6a1e152a 100644
--- a/basic-spring-boot-tekton/.openshift/templates/deployment.yml
+++ b/basic-spring-boot-tekton/.openshift/templates/deployment.yml
@@ -109,6 +109,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/basic-spring-boot/.openshift/templates/deployment.yml b/basic-spring-boot/.openshift/templates/deployment.yml
index 5600d030..d54e20fd 100644
--- a/basic-spring-boot/.openshift/templates/deployment.yml
+++ b/basic-spring-boot/.openshift/templates/deployment.yml
@@ -134,6 +134,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/basic-tomcat/.openshift/deployment/template.yml b/basic-tomcat/.openshift/deployment/template.yml
index 4f22d230..b0bcc63a 100644
--- a/basic-tomcat/.openshift/deployment/template.yml
+++ b/basic-tomcat/.openshift/deployment/template.yml
@@ -128,6 +128,8 @@ objects:
     namespace: ${APPLICATION_NAME}${ENV}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/blue-green-spring/.openshift/deployment/template-bg.yml b/blue-green-spring/.openshift/deployment/template-bg.yml
index 7b4c9983..41b0d77e 100644
--- a/blue-green-spring/.openshift/deployment/template-bg.yml
+++ b/blue-green-spring/.openshift/deployment/template-bg.yml
@@ -205,6 +205,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/blue-green-spring/.openshift/deployment/template.yml b/blue-green-spring/.openshift/deployment/template.yml
index e82a8c47..c192d29a 100644
--- a/blue-green-spring/.openshift/deployment/template.yml
+++ b/blue-green-spring/.openshift/deployment/template.yml
@@ -101,6 +101,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/cucumber-selenium-grid/applier/templates/deployment.yml b/cucumber-selenium-grid/applier/templates/deployment.yml
index d199a467..ee7427a5 100644
--- a/cucumber-selenium-grid/applier/templates/deployment.yml
+++ b/cucumber-selenium-grid/applier/templates/deployment.yml
@@ -94,6 +94,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/multi-cluster-spring-boot/image-mirror-example/.applier/templates/deployment.yml b/multi-cluster-spring-boot/image-mirror-example/.applier/templates/deployment.yml
index 9aa7f066..49dd3b5e 100644
--- a/multi-cluster-spring-boot/image-mirror-example/.applier/templates/deployment.yml
+++ b/multi-cluster-spring-boot/image-mirror-example/.applier/templates/deployment.yml
@@ -109,6 +109,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/multi-cluster-spring-boot/image-mirror-example/.applier/templates/image-mirror-sa.yml b/multi-cluster-spring-boot/image-mirror-example/.applier/templates/image-mirror-sa.yml
index 8de683e9..c8a321d5 100644
--- a/multi-cluster-spring-boot/image-mirror-example/.applier/templates/image-mirror-sa.yml
+++ b/multi-cluster-spring-boot/image-mirror-example/.applier/templates/image-mirror-sa.yml
@@ -17,6 +17,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/multi-cluster-spring-boot/skopeo-example/.applier/projects/promoter-sa.yml b/multi-cluster-spring-boot/skopeo-example/.applier/projects/promoter-sa.yml
index 453ea45a..3ca97d5a 100644
--- a/multi-cluster-spring-boot/skopeo-example/.applier/projects/promoter-sa.yml
+++ b/multi-cluster-spring-boot/skopeo-example/.applier/projects/promoter-sa.yml
@@ -15,6 +15,8 @@ items:
     namespace: multicluster-spring-boot-prod
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/multi-cluster-spring-boot/skopeo-example/.applier/templates/deployment.yml b/multi-cluster-spring-boot/skopeo-example/.applier/templates/deployment.yml
index 9aa7f066..49dd3b5e 100644
--- a/multi-cluster-spring-boot/skopeo-example/.applier/templates/deployment.yml
+++ b/multi-cluster-spring-boot/skopeo-example/.applier/templates/deployment.yml
@@ -109,6 +109,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount
diff --git a/secure-spring-boot/.openshift-applier/templates/deployment.yml b/secure-spring-boot/.openshift-applier/templates/deployment.yml
index 069f1ceb..6e2c0ca9 100644
--- a/secure-spring-boot/.openshift-applier/templates/deployment.yml
+++ b/secure-spring-boot/.openshift-applier/templates/deployment.yml
@@ -109,6 +109,8 @@ objects:
     namespace: ${NAMESPACE}
   groupNames: null
   roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
     name: edit
   subjects:
   - kind: ServiceAccount