diff --git a/components/monitoring/controllers/base/rbac.yaml b/components/monitoring/controllers/base/rbac.yaml
index 9441a4c..6b0f922 100644
--- a/components/monitoring/controllers/base/rbac.yaml
+++ b/components/monitoring/controllers/base/rbac.yaml
@@ -1,4 +1,13 @@
 ---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: flux
+  namespace: monitoring
+  labels:
+    app.kubernetes.io/component: monitoring
+    toolkit.fluxcd.io/tenant: platform-team
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
@@ -14,29 +23,3 @@ subjects:
   - kind: ServiceAccount
     name: flux
     namespace: monitoring
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: flux
-  namespace: monitoring
-  labels:
-    app.kubernetes.io/component: monitoring
-    toolkit.fluxcd.io/tenant: platform-team
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  labels:
-    app.kubernetes.io/component: monitoring
-    toolkit.fluxcd.io/tenant: platform-team
-  name: metrics-server-auth-reader
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: extension-apiserver-authentication-reader
-subjects:
-- kind: ServiceAccount
-  name: metrics-server
-  namespace: monitoring