diff --git a/apps/base/kanidm/vaultauth.yaml b/apps/base/kanidm/vaultauth.yaml
index de33b5c..f89dbed 100644
--- a/apps/base/kanidm/vaultauth.yaml
+++ b/apps/base/kanidm/vaultauth.yaml
@@ -4,18 +4,15 @@ kind: VaultAuth
 metadata:
   name: default
   namespace: kanidm
-  labels:
-    app.kubernetes.io/name: kanidm
-    app.kubernetes.io/instance: kanidm
 spec:
-  method: kubernetes
-  mount: k8s/au/syd1
-  vaultConnectionRef: vso-system/default
   allowedNamespaces:
     - kanidm
   kubernetes:
-    role: default
-    serviceAccount: kanidm
     audiences:
       - vault
+    role: default
+    serviceAccount: default
     tokenExpirationSeconds: 600
+  method: kubernetes
+  mount: k8s/au/syd1
+  vaultConnectionRef: vso-system/default