diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 6f6fd483f19..7e01d5404cd 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -35,11 +35,9 @@ aliases:
     - deads2k
     - dims
     - enj
-    - erictune
     - lavalamp
     - liggitt
     - mikedanese
-    - mml
     - ncdc
     - smarterclayton
     - sttts
@@ -51,7 +49,6 @@ aliases:
     - mikedanese
     - smarterclayton
   sig-auth-certificates-reviewers:
-    - awly
     - caesarxuchao
     - deads2k
     - dims
@@ -67,11 +64,9 @@ aliases:
     - wojtek-t
 
   sig-auth-encryption-at-rest-approvers:
-    - immutableT
     - smarterclayton
   sig-auth-encryption-at-rest-reviewers:
     - enj
-    - immutableT
     - lavalamp
     - liggitt
     - smarterclayton
@@ -103,7 +98,6 @@ aliases:
     - liggitt
     - mikedanese
   sig-auth-serviceaccounts-reviewers:
-    - awly
     - deads2k
     - enj
     - liggitt
diff --git a/pkg/api/podsecuritypolicy/OWNERS b/pkg/api/podsecuritypolicy/OWNERS
index cb59b2cfa31..0eae8c82808 100644
--- a/pkg/api/podsecuritypolicy/OWNERS
+++ b/pkg/api/podsecuritypolicy/OWNERS
@@ -1,5 +1,8 @@
 # See the OWNERS docs at https://go.k8s.io/owners
 
+# approval on api packages bubbles to api-approvers
 reviewers:
-- smarterclayton
-- jessfraz
+- sig-auth-policy-approvers
+- sig-auth-policy-reviewers
+labels:
+- sig/auth
diff --git a/pkg/apis/abac/OWNERS b/pkg/apis/abac/OWNERS
index 019e78aa090..e1ff76bb6ff 100644
--- a/pkg/apis/abac/OWNERS
+++ b/pkg/apis/abac/OWNERS
@@ -1,7 +1,8 @@
 # See the OWNERS docs at https://go.k8s.io/owners
 
+# approval on api packages bubbles to api-approvers
 reviewers:
-- lavalamp
-- smarterclayton
-- deads2k
-- liggitt
+- sig-auth-authorizers-approvers
+- sig-auth-authorizers-reviewers
+labels:
+- sig/auth
diff --git a/pkg/auth/OWNERS b/pkg/auth/OWNERS
index 3574e453dda..4fca8eedc9c 100644
--- a/pkg/auth/OWNERS
+++ b/pkg/auth/OWNERS
@@ -1,10 +1,8 @@
 # See the OWNERS docs at https://go.k8s.io/owners
 
 approvers:
-- erictune
-- liggitt
-- deads2k
-- mikedanese
+- sig-auth-api-approvers
 reviewers:
-- mikedanese
-- enj
+- sig-auth-api-reviewers
+labels:
+- sig/auth
diff --git a/pkg/controller/certificates/approver/OWNERS b/pkg/controller/certificates/approver/OWNERS
new file mode 100644
index 00000000000..3cf03643835
--- /dev/null
+++ b/pkg/controller/certificates/approver/OWNERS
@@ -0,0 +1,9 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+approvers:
+- sig-auth-certificates-approvers
+reviewers:
+- sig-auth-certificates-reviewers
+labels:
+- sig/auth
+
diff --git a/pkg/controller/serviceaccount/config/OWNERS b/pkg/controller/serviceaccount/config/OWNERS
deleted file mode 100644
index e3149dc3c06..00000000000
--- a/pkg/controller/serviceaccount/config/OWNERS
+++ /dev/null
@@ -1,14 +0,0 @@
-approvers:
-- api-approvers
-- deads2k
-- luxas
-- mtaufen
-- sttts
-- stewart-yu
-reviewers:
-- api-reviewers
-- deads2k
-- luxas
-- mtaufen
-- sttts
-- stewart-yu
diff --git a/pkg/registry/core/serviceaccount/OWNERS b/pkg/registry/core/serviceaccount/OWNERS
index d41c6a96bd1..351533310e0 100644
--- a/pkg/registry/core/serviceaccount/OWNERS
+++ b/pkg/registry/core/serviceaccount/OWNERS
@@ -1,8 +1,8 @@
 # See the OWNERS docs at https://go.k8s.io/owners
 
-reviewers:
-- mikedanese
-- liggitt
 approvers:
-- mikedanese
-- liggitt
+- sig-auth-serviceaccounts-approvers
+reviewers:
+- sig-auth-serviceaccounts-reviewers
+labels:
+- sig/auth
diff --git a/plugin/pkg/admission/imagepolicy/OWNERS b/plugin/pkg/admission/imagepolicy/OWNERS
new file mode 100644
index 00000000000..1844a856bdb
--- /dev/null
+++ b/plugin/pkg/admission/imagepolicy/OWNERS
@@ -0,0 +1,8 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+approvers:
+- sig-auth-policy-approvers
+reviewers:
+- sig-auth-policy-reviewers
+labels:
+- sig/auth
diff --git a/plugin/pkg/auth/OWNERS b/plugin/pkg/auth/OWNERS
index 4c81dde8eaa..4fca8eedc9c 100644
--- a/plugin/pkg/auth/OWNERS
+++ b/plugin/pkg/auth/OWNERS
@@ -1,13 +1,8 @@
 # See the OWNERS docs at https://go.k8s.io/owners
 
 approvers:
-- erictune
-- liggitt
-- deads2k
-- mikedanese
+- sig-auth-api-approvers
 reviewers:
-- erictune
-- liggitt
-- deads2k
-- enj
-- mikedanese
+- sig-auth-api-reviewers
+labels:
+- sig/auth
diff --git a/staging/src/k8s.io/api/certificates/OWNERS b/staging/src/k8s.io/api/certificates/OWNERS
index 2601bdf7a83..0d20fa3d780 100644
--- a/staging/src/k8s.io/api/certificates/OWNERS
+++ b/staging/src/k8s.io/api/certificates/OWNERS
@@ -1,13 +1,8 @@
 # See the OWNERS docs at https://go.k8s.io/owners
 
+# approval on api packages bubbles to api-approvers
 reviewers:
-- thockin
-- lavalamp
-- smarterclayton
-- deads2k
-- caesarxuchao
-- liggitt
-- sttts
-- dims
-- errordeveloper
-- enj
+- sig-auth-certificates-approvers
+- sig-auth-certificates-reviewers
+labels:
+- sig/auth
diff --git a/staging/src/k8s.io/apiserver/pkg/authorization/authorizerfactory/OWNERS b/staging/src/k8s.io/apiserver/pkg/authorization/authorizerfactory/OWNERS
deleted file mode 100644
index a5ccdcbd1b0..00000000000
--- a/staging/src/k8s.io/apiserver/pkg/authorization/authorizerfactory/OWNERS
+++ /dev/null
@@ -1,5 +0,0 @@
-# See the OWNERS docs at https://go.k8s.io/owners
-
-reviewers:
-- deads2k
-- dims
diff --git a/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc/OWNERS b/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc/OWNERS
deleted file mode 100644
index 03fb44ea24b..00000000000
--- a/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc/OWNERS
+++ /dev/null
@@ -1,7 +0,0 @@
-# See the OWNERS docs at https://go.k8s.io/owners
-
-approvers:
-- ericchiang
-reviewers:
-- ericchiang
-- rithujohn191
diff --git a/staging/src/k8s.io/client-go/plugin/pkg/client/auth/oidc/OWNERS b/staging/src/k8s.io/client-go/plugin/pkg/client/auth/oidc/OWNERS
deleted file mode 100644
index 03fb44ea24b..00000000000
--- a/staging/src/k8s.io/client-go/plugin/pkg/client/auth/oidc/OWNERS
+++ /dev/null
@@ -1,7 +0,0 @@
-# See the OWNERS docs at https://go.k8s.io/owners
-
-approvers:
-- ericchiang
-reviewers:
-- ericchiang
-- rithujohn191