diff --git a/apps/gethomepage/base/kustomization.yaml b/apps/gethomepage/base/kustomization.yaml
index 735a2f5..2f6365f 100644
--- a/apps/gethomepage/base/kustomization.yaml
+++ b/apps/gethomepage/base/kustomization.yaml
@@ -6,4 +6,5 @@ resources:
   - ingress.yaml
   - rbac.yaml
   - sa.yaml
+  - secret.yaml
   - service.yaml
diff --git a/apps/gethomepage/base/secret.yaml b/apps/gethomepage/base/secret.yaml
new file mode 100644
index 0000000..c18f68e
--- /dev/null
+++ b/apps/gethomepage/base/secret.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/service-account-token
+metadata:
+  name: homepage
+  labels:
+    app.kubernetes.io/name: homepage
+  annotations:
+    kubernetes.io/service-account.name: homepage
diff --git a/apps/gethomepage/overlays/system/rbac-patch.yaml b/apps/gethomepage/overlays/system/rbac-patch.yaml
new file mode 100644
index 0000000..5ec79d7
--- /dev/null
+++ b/apps/gethomepage/overlays/system/rbac-patch.yaml
@@ -0,0 +1,6 @@
+- op: add
+  path: /subjects/-
+  value:
+    kind: ServiceAccount
+    name: homepage
+    namespace: homepage