diff --git a/infrastructure/07-certmanager/additional-roles.yaml b/infrastructure/07-certmanager/additional-roles.yaml
index 42fdf54..bc92dc7 100644
--- a/infrastructure/07-certmanager/additional-roles.yaml
+++ b/infrastructure/07-certmanager/additional-roles.yaml
@@ -5,6 +5,8 @@ metadata:
 rules:
 - apiGroups:
     - "cert-manager.io"
+    - "acme.cert-manager.io/v1"
+    - "acme.cert-manager.io"
   resources: ["ionos"]
   verbs: ["*"]
 ---
diff --git a/infrastructure/07-certmanager/dns-issuer.yaml b/infrastructure/07-certmanager/dns-issuer.yaml
index ee5e95c..61e0a6a 100644
--- a/infrastructure/07-certmanager/dns-issuer.yaml
+++ b/infrastructure/07-certmanager/dns-issuer.yaml
@@ -15,7 +15,7 @@ spec:
     solvers:
       - dns01:
           webhook:
-            groupName: cert-manager.io
+            groupName: acme.cert-manager.io/v1
             solverName: ionos
             config:
               apiUrl: https://api.hosting.ionos.com/dns/v1
@@ -43,7 +43,7 @@ spec:
     solvers:
       - dns01:
           webhook:
-            groupName: cert-manager.io
+            groupName: acme.cert-manager.io/v1
             solverName: ionos
             config:
               apiUrl: https://api.hosting.ionos.com/dns/v1
diff --git a/infrastructure/07-certmanager/wildcard-cert.yaml b/infrastructure/07-certmanager/wildcard-cert.yaml
index c252bac..65520cc 100644
--- a/infrastructure/07-certmanager/wildcard-cert.yaml
+++ b/infrastructure/07-certmanager/wildcard-cert.yaml
@@ -11,7 +11,6 @@ spec:
   issuerRef:
     name: letsencrypt-staging
     kind: ClusterIssuer
-    group: cert-manager.io
 ---
 apiVersion: traefik.io/v1alpha1
 kind: TLSStore