diff --git a/kustomize-nfs/dkube/base/dkube.yaml b/kustomize-nfs/dkube/base/dkube.yaml
index a68afa8..cdffc1c 100644
--- a/kustomize-nfs/dkube/base/dkube.yaml
+++ b/kustomize-nfs/dkube/base/dkube.yaml
@@ -405,6 +405,8 @@ spec:
       nodeSelector: NODE_SELECTOR
       restartPolicy: Always
       schedulerName: default-scheduler
+      serviceAccount: dkube
+      serviceAccountName: dkube
       terminationGracePeriodSeconds: 30
 ---
 apiVersion: apps/v1
diff --git a/kustomize/dkube/base/dkube.yaml b/kustomize/dkube/base/dkube.yaml
index 3a0a2a8..305f695 100644
--- a/kustomize/dkube/base/dkube.yaml
+++ b/kustomize/dkube/base/dkube.yaml
@@ -414,6 +414,8 @@ spec:
       nodeSelector: NODE_SELECTOR
       restartPolicy: Always
       schedulerName: default-scheduler
+      serviceAccount: dkube
+      serviceAccountName: dkube
       terminationGracePeriodSeconds: 30
 ---
 apiVersion: apps/v1
diff --git a/kustomize/service/base/service.yaml b/kustomize/service/base/service.yaml
index f9a4dd7..1580126 100644
--- a/kustomize/service/base/service.yaml
+++ b/kustomize/service/base/service.yaml
@@ -537,6 +537,7 @@ spec:
             - exact: d3-uname
             - exact: d3-role
             - exact: x-cluster-id
+            - exact: Authorization
         serverUri:
           cluster: outbound|3001||dkube-auth-server.dkube.svc.cluster.local
           failureModeAllow: false