diff --git a/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml
index 26e6afcde..c36e7625d 100644
--- a/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml
+++ b/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml
@@ -99,3 +99,14 @@ spec:
           memory: 96Mi
         limits:
           memory: 2Gi
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: rbac.authorization.k8s.io
+              version: v1
+              kind: ClusterRole
+              name: ingress-nginx-external
+            patch: |
+              - op: remove
+                path: /rules/0/resources/4
diff --git a/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml
index 6dee227d7..16d731fb6 100644
--- a/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml
+++ b/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml
@@ -94,3 +94,14 @@ spec:
           memory: 96Mi
         limits:
           memory: 2Gi
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: rbac.authorization.k8s.io
+              version: v1
+              kind: ClusterRole
+              name: ingress-nginx-internal
+            patch: |
+              - op: remove
+                path: /rules/0/resources/4