diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index dd0c4ad..2336f8d 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -46,7 +46,7 @@ jobs:
     - build
     - test
     timeout-minutes: 30
-    # if: github.ref == 'refs/heads/main'
+    if: github.ref == 'refs/heads/main'
     steps:
     - uses: actions/checkout@v4
     - name: GCP auth
diff --git a/manifest/rbac.yaml b/manifest/rbac.yaml
index f0bb01b..6abc752 100644
--- a/manifest/rbac.yaml
+++ b/manifest/rbac.yaml
@@ -8,6 +8,7 @@ metadata:
 rules:
 - apiGroups: [""]
   resources:
+    - secrets
     - services
   verbs:
     - get
diff --git a/manifest/secrets.yaml b/manifest/secrets.yaml
index e032963..aa05df3 100644
--- a/manifest/secrets.yaml
+++ b/manifest/secrets.yaml
@@ -2,6 +2,7 @@ apiVersion: v1
 kind: Secret
 metadata:
     name: netlib
+    namespace: netlib
 type: Opaque
 data:
     DATABASE_URL: ENC[AES256_GCM,data:EzXrkgS8BELub+ABWGD9PM+JoyRnsMkRBMFkeXSbgh+xRzn7/KZmXHwRnWXw5LWnoQfXQQ9wTySo5nqNRQNCDTdbqgsyT+X0aOnUfq5YngC858i1,iv:1Hu/EXqU77qxW0Et2N73OzO6e0AO/nIcTf/YKile07s=,tag:zA70VRtIQjuAN39Ce5CrpQ==,type:str]
@@ -17,8 +18,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2024-07-29T14:25:15Z"
-    mac: ENC[AES256_GCM,data:Tau418hZWnctbIN3XMLw/G86xb1+79cK0GkxdirjZGTlDvLloUdICdBUisJpaGeM8br2sVnfegbh6fc1FrXqD4a1VpL9Kwn78/hqWenKI9+Ll+fzbSTi9IxDTag4ajwhVaATsRD6UF3ue2ev0jmdlVIQYzPij2eXOhjSbasQt6g=,iv:mPiv7CBE6VvfQbuF8nWX6s+3UFUYbdQj+EDyjg8hx60=,tag:hpUZykrRD0n1jYL6+3f6AA==,type:str]
+    lastmodified: "2024-08-29T09:48:21Z"
+    mac: ENC[AES256_GCM,data:M2m0XS6hsH+NU5qiYqXpZhntUCGOCYrNxa4YSiNDEwZIJkjPBIEfbJ+ZaD9mqEvxpk7fC/MwYf4bS46IEJ6V4tHZwK8fKzvL2t52vfJiYkHLIKtKmRJLCxlYdbn/ruQPIvv/ESuF+myLo3LbbrokqdyhQVIgXexPah/7oYKaYAA=,iv:GLY3z5/GZhuyPenyIOjaHErAJx+8viLrwQRxVYjufUU=,tag:L+Yu3B5By6umHqLzVC5NcQ==,type:str]
     pgp:
         - created_at: "2024-03-26T10:58:44Z"
           enc: |-