diff --git a/certmanager-netcup/main.yaml b/certmanager-netcup/main.yaml
index 0def102..f9bdc4e 100644
--- a/certmanager-netcup/main.yaml
+++ b/certmanager-netcup/main.yaml
@@ -75,26 +75,6 @@ subjects:
   namespace: cert-manager
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  labels:
-    app: cert-manager-webhook-netcup
-    chart: cert-manager-webhook-netcup-1.0.29
-    heritage: Helm
-    release: cert-manager-webhook-netcup
-  name: cert-manager-webhook-netcup:webhook-authentication-reader
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: extension-apiserver-authentication-reader
-subjects:
-- apiGroup: ""
-  kind: ServiceAccount
-  name: cert-manager-webhook-netcup
-  namespace: cert-manager
----
-apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   labels:
diff --git a/certmanager-netcup/rb.yaml b/certmanager-netcup/rb.yaml
new file mode 100644
index 0000000..606b0a5
--- /dev/null
+++ b/certmanager-netcup/rb.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  labels:
+    app: cert-manager-webhook-netcup
+    chart: cert-manager-webhook-netcup-1.0.29
+    heritage: Helm
+    release: cert-manager-webhook-netcup
+  name: cert-manager-webhook-netcup:webhook-authentication-reader
+  namespace: kube-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: extension-apiserver-authentication-reader
+subjects:
+- apiGroup: ""
+  kind: ServiceAccount
+  name: cert-manager-webhook-netcup
+  namespace: cert-manager
\ No newline at end of file