diff --git a/values/atlantis/kustomize/prod/rbac.yaml b/values/atlantis/kustomize/prod/rbac.yaml
index 772c7a95..6d13b929 100644
--- a/values/atlantis/kustomize/prod/rbac.yaml
+++ b/values/atlantis/kustomize/prod/rbac.yaml
@@ -18,6 +18,7 @@ rules:
   resourceNames:
   - azure-keyvault
   - prod-atlantis-redis
+  - slurm-access-token
   resources:
   - secrets
   verbs:
diff --git a/values/atlantis/kustomize/staging/rbac.yaml b/values/atlantis/kustomize/staging/rbac.yaml
index 665b0a7e..953181c6 100644
--- a/values/atlantis/kustomize/staging/rbac.yaml
+++ b/values/atlantis/kustomize/staging/rbac.yaml
@@ -18,6 +18,7 @@ rules:
   resourceNames:
   - azure-keyvault
   - staging-atlantis-redis
+  - slurm-access-token
   resources:
   - secrets
   verbs:
diff --git a/values/headscale/values/values.yaml b/values/headscale/values/values.yaml
index 1f0a3c31..bf67baab 100644
--- a/values/headscale/values/values.yaml
+++ b/values/headscale/values/values.yaml
@@ -175,8 +175,6 @@ configMaps:
               "action": "accept",
               "src": [ "group:hpc-clusters" ],
               "dst": [
-                "ekman-manage:*",
-                "rossby-manage:*",
                 "net.dc.tos:*",
                 "net.mgmt.tos:*",
                 "net.ceph.tos:*",
@@ -184,6 +182,8 @@ configMaps:
                 "net.rossby:*",
                 "net.mgmt.rossby:*",
                 "net.dc.tos:*",
+                "ekman-manage:*",
+                "rossby-manage:*",
               ]
             },
             {