diff --git a/helm/teleport-kube-agent/ci/ci-values.yaml b/helm/teleport-kube-agent/ci/ci-values.yaml
index 2579ac1..2a0f040 100644
--- a/helm/teleport-kube-agent/ci/ci-values.yaml
+++ b/helm/teleport-kube-agent/ci/ci-values.yaml
@@ -1,4 +1,4 @@
 proxyAddr: "teleport.demo.gaws.gigantic.io:443"
 authToken: "test"
 kubeClusterName: "test"
-roles: "kube"
+roles: "kube,app"
diff --git a/helm/teleport-kube-agent/values.yaml b/helm/teleport-kube-agent/values.yaml
index a4dee85..4d156de 100644
--- a/helm/teleport-kube-agent/values.yaml
+++ b/helm/teleport-kube-agent/values.yaml
@@ -22,7 +22,7 @@ global:
 # ```yaml
 # roles: kube,app,discovery
 # ```
-roles: "kube, app"
+roles: "kube,app"
 
 # proxyAddr(string) -- provides the public-facing Teleport Proxy Service endpoint
 # which should be used to join the cluster. This is the same URL used to access