diff --git a/values/sorcerer/kustomize/beta-ekman/deployment_patch.yaml b/values/sorcerer/kustomize/beta-ekman/deployment_patch.yaml
index 3fdc7af2..2e012bb7 100644
--- a/values/sorcerer/kustomize/beta-ekman/deployment_patch.yaml
+++ b/values/sorcerer/kustomize/beta-ekman/deployment_patch.yaml
@@ -21,7 +21,7 @@
   path: /spec/template/spec/containers/0/envFrom/-
   value:
     secretRef:
-      name: prod-sorcerer-env
+      name: beta-sorcerer-env
 - op: add
   path: /spec/template/spec/containers/0/envFrom/-
   value:
diff --git a/values/sorcerer/kustomize/beta-ekman/rbac.yaml b/values/sorcerer/kustomize/beta-ekman/rbac.yaml
index 7337cf59..5e817319 100644
--- a/values/sorcerer/kustomize/beta-ekman/rbac.yaml
+++ b/values/sorcerer/kustomize/beta-ekman/rbac.yaml
@@ -56,3 +56,42 @@ subjects:
 - kind: ServiceAccount
   name: beta-sorcerer
   namespace: beta-sorcerer
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: beta-sorcerer-prod-queue
+  namespace: prod-queue
+rules:
+- apiGroups:
+  - jobset.x-k8s.io
+  resources:
+  - jobsets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - pods/log
+  verbs:
+  - get
+  - list
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: beta-sorcerer-prod-queue
+  namespace: prod-queue
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: beta-sorcerer-prod-queue
+subjects:
+- kind: ServiceAccount
+  name: beta-sorcerer
+  namespace: beta-sorcerer