diff --git a/argo/miniflux/values.yaml b/argo/miniflux/values.yaml
index 0c393e2..d0b36a9 100644
--- a/argo/miniflux/values.yaml
+++ b/argo/miniflux/values.yaml
@@ -5,6 +5,7 @@ namespace: miniflux
 serviceAccountName: miniflux
 externalSecrets:
   secretStoreName: miniflux
+  vaultRole: miniflux
   secrets:
     - secretKey: miniflux_admin_pw
       key: miniflux
diff --git a/argo/pihole/values.yaml b/argo/pihole/values.yaml
index f0c9785..1365b9c 100644
--- a/argo/pihole/values.yaml
+++ b/argo/pihole/values.yaml
@@ -5,6 +5,7 @@ namespace: external-dns
 serviceAccountName: default
 externalSecrets:
   secretStoreName: default
+  vaultRole: external-dns
   secrets:
     - secretKey: pihole-password
       key: external-dns
diff --git a/argo/secrets/templates/external-secrets.yaml b/argo/secrets/templates/external-secrets.yaml
index f946325..c043782 100644
--- a/argo/secrets/templates/external-secrets.yaml
+++ b/argo/secrets/templates/external-secrets.yaml
@@ -55,7 +55,7 @@ spec:
       auth:
         kubernetes:
           mountPath: "k8s-teapot"
-          role: {{ .Values.externalSecrets.secretStoreName | quote }}
+          role: {{ .Values.externalSecrets.vaultRole | quote }}
           secretRef:
             name: "serviceaccounttoken"
 ...