diff --git a/src/main/resources/extensions/s3os-role-template.yaml b/src/main/resources/extensions/s3os-role-template.yaml
index 271f321..4a42103 100644
--- a/src/main/resources/extensions/s3os-role-template.yaml
+++ b/src/main/resources/extensions/s3os-role-template.yaml
@@ -46,9 +46,10 @@ metadata:
   name: role-template-s3os-policy-config-validation
   labels:
     halo.run/role-template: "true"
+    halo.run/hidden: "true"
     rbac.authorization.halo.run/aggregate-to-role-template-manage-configmaps: "true"
 rules:
   - apiGroups: ["s3os.halo.run"]
     resources: ["policies/validation"]
     resourceNames: ["s3"]
-    verbs: [ "create" ]
\ No newline at end of file
+    verbs: [ "create" ]