Hi, is there a reason you are using oc apply instead of kubectl apply?
Did you build your site.yaml by using kustomize build -o site.yaml ?
I would try that then running from the directory where the site.yaml lives
kubectl apply --selector="sas.com/admin=cluster-api" --server-side --force-conflicts -f site.yaml
and lets see if the result is different.