diff --git a/kubernetes/apps/capacitor/capacitor/app/helmrelease.yaml b/kubernetes/apps/capacitor/capacitor/app/helmrelease.yaml
index 5353da9d..2962f69a 100644
--- a/kubernetes/apps/capacitor/capacitor/app/helmrelease.yaml
+++ b/kubernetes/apps/capacitor/capacitor/app/helmrelease.yaml
@@ -78,7 +78,7 @@ spec:
                 memory: 127Mi
 
     serviceAccount:
-      create: true
+      create: false
       name: capacitor
 
     service:
diff --git a/kubernetes/apps/capacitor/capacitor/app/kustomization.yaml b/kubernetes/apps/capacitor/capacitor/app/kustomization.yaml
index aeffdac2..8a67b66d 100644
--- a/kubernetes/apps/capacitor/capacitor/app/kustomization.yaml
+++ b/kubernetes/apps/capacitor/capacitor/app/kustomization.yaml
@@ -4,4 +4,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./helmrelease.yaml
-  # - ./rbac.yaml
+  - ./rbac.yaml
diff --git a/kubernetes/apps/capacitor/capacitor/app/rbac.yaml b/kubernetes/apps/capacitor/capacitor/app/rbac.yaml
index a7896e6b..bdd11fba 100644
--- a/kubernetes/apps/capacitor/capacitor/app/rbac.yaml
+++ b/kubernetes/apps/capacitor/capacitor/app/rbac.yaml
@@ -1,48 +1,50 @@
----
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: capacitor
+  namespace: flux-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: capacitor
 rules:
-  - apiGroups:
-      - networking.k8s.io
-      - apps
-      - ""
-    resources:
-      - pods
-      - pods/log
-      - ingresses
-      - deployments
-      - services
-      - secrets
-      - events
-      - configmaps
-    verbs:
-      - get
-      - watch
-      - list
-  - apiGroups:
-      - source.toolkit.fluxcd.io
-      - kustomize.toolkit.fluxcd.io
-      - helm.toolkit.fluxcd.io
-    resources:
-      - gitrepositories
-      - ocirepositories
-      - buckets
-      - helmrepositories
-      - helmcharts
-      - kustomizations
-      - helmreleases
-    verbs:
-      - get
-      - watch
-      - list
-      - patch # to allow force reconciling by adding an annotation
+- apiGroups:
+    - networking.k8s.io
+    - apps
+    - ""
+  resources:
+    - pods
+    - pods/log
+    - ingresses
+    - deployments
+    - services
+    - secrets
+    - events
+    - configmaps
+  verbs:
+    - get
+    - watch
+    - list
+- apiGroups:
+    - source.toolkit.fluxcd.io
+    - kustomize.toolkit.fluxcd.io
+    - helm.toolkit.fluxcd.io
+    - infra.contrib.fluxcd.io
+  resources:
+    - gitrepositories
+    - ocirepositories
+    - buckets
+    - helmrepositories
+    - helmcharts
+    - kustomizations
+    - helmreleases
+    - terraforms
+  verbs:
+    - get
+    - watch
+    - list
+    - patch # to allow force reconciling by adding an annotation
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
diff --git a/kubernetes/apps/downloads/sabnzbd/app/externalsecret.yaml b/kubernetes/apps/downloads/sabnzbd/app/externalsecret.yaml
index fa276d6a..731f9238 100644
--- a/kubernetes/apps/downloads/sabnzbd/app/externalsecret.yaml
+++ b/kubernetes/apps/downloads/sabnzbd/app/externalsecret.yaml
@@ -3,7 +3,7 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: &name radarr
+  name: &name sabnzbd
 spec:
   target:
     name: *name