diff --git a/charts/kube-ovn/templates/ovn-CR.yaml b/charts/kube-ovn/templates/ovn-CR.yaml
index 03670d7c947..54e69a5b6e3 100644
--- a/charts/kube-ovn/templates/ovn-CR.yaml
+++ b/charts/kube-ovn/templates/ovn-CR.yaml
@@ -195,11 +195,9 @@ metadata:
 rules:
   - apiGroups:
       - "kubeovn.io"
-      - ""
     resources:
       - subnets
       - provider-networks
-      - pods
     verbs:
       - get
       - list
@@ -211,6 +209,7 @@ rules:
       - ovn-eips
       - ovn-eips/status
       - nodes
+      - pods
     verbs:
       - get
       - list
diff --git a/dist/images/install.sh b/dist/images/install.sh
index 92be82aec28..40ccf769b0c 100755
--- a/dist/images/install.sh
+++ b/dist/images/install.sh
@@ -3065,11 +3065,9 @@ metadata:
 rules:
   - apiGroups:
       - "kubeovn.io"
-      - ""
     resources:
       - subnets
       - provider-networks
-      - pods
     verbs:
       - get
       - list
@@ -3081,6 +3079,7 @@ rules:
       - ovn-eips
       - ovn-eips/status
       - nodes
+      - pods
     verbs:
       - get
       - list
diff --git a/yamls/sa.yaml b/yamls/sa.yaml
index c2332385382..ec95b500926 100644
--- a/yamls/sa.yaml
+++ b/yamls/sa.yaml
@@ -238,11 +238,9 @@ metadata:
 rules:
   - apiGroups:
       - "kubeovn.io"
-      - ""
     resources:
       - subnets
       - provider-networks
-      - pods
     verbs:
       - get
       - list
@@ -254,6 +252,7 @@ rules:
       - ovn-eips
       - ovn-eips/status
       - nodes
+      - pods
     verbs:
       - get
       - list