diff --git a/kubernetes/apps/production/drone/runner/rbac.yaml b/kubernetes/apps/production/drone/runner/rbac.yaml
index 83dee6c..e25aac7 100644
--- a/kubernetes/apps/production/drone/runner/rbac.yaml
+++ b/kubernetes/apps/production/drone/runner/rbac.yaml
@@ -2,7 +2,7 @@ kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: drone
-  namespace: default
+  namespace: drone-ci
 rules:
   - apiGroups:
       - ""
@@ -29,11 +29,11 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: drone
-  namespace: default
+  namespace: drone-ci
 subjects:
   - kind: ServiceAccount
     name: default
-    namespace: default
+    namespace: drone-ci
 roleRef:
   kind: Role
   name: drone
diff --git a/kubernetes/apps/production/drone/runner/runner-deployment.yaml b/kubernetes/apps/production/drone/runner/runner-deployment.yaml
index 43d70b5..7505089 100644
--- a/kubernetes/apps/production/drone/runner/runner-deployment.yaml
+++ b/kubernetes/apps/production/drone/runner/runner-deployment.yaml
@@ -32,6 +32,8 @@ spec:
               value: drone.fascinated.cc
             - name: DRONE_RPC_PROTO
               value: https
+            - name: DRONE_NAMESPACE_DEFAULT
+              value: drone-ci
             - name: DRONE_RPC_SECRET
               valueFrom:
                 secretKeyRef: