diff --git a/frontend/desktop/deploy/manifests/configmap.yaml.tmpl b/frontend/desktop/deploy/manifests/configmap.yaml.tmpl
index ac9e9c33a5fe..dd6d744efd64 100644
--- a/frontend/desktop/deploy/manifests/configmap.yaml.tmpl
+++ b/frontend/desktop/deploy/manifests/configmap.yaml.tmpl
@@ -39,6 +39,7 @@ data:
         proxyAddress: ""
         callbackURL: "https://{{ .cloudDomain }}{{ if .cloudPort }}:{{ .cloudPort }}{{ end }}/callback"
         signUpEnabled: true
+        billingUrl: "http://account-service.account-system.svc:2333"
         baiduToken: ""
         invite:
           enabled: false
diff --git a/frontend/desktop/deploy/manifests/rbac.yaml b/frontend/desktop/deploy/manifests/rbac.yaml
index a42c1180a4f0..bbd86e7cea0c 100644
--- a/frontend/desktop/deploy/manifests/rbac.yaml
+++ b/frontend/desktop/deploy/manifests/rbac.yaml
@@ -89,6 +89,9 @@ rules:
   - apiGroups: ["notification.sealos.io"]
     resources: ["notifications"]
     verbs: ["list", "get", "create", "update", "patch", "watch"]
+	- apiGroups: [""]
+		resources: ["namespaces"]
+		verbs: ["patch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
diff --git a/frontend/providers/costcenter/deploy/Kubefile b/frontend/providers/costcenter/deploy/Kubefile
index 9c6af5ae51cb..139414db66a3 100644
--- a/frontend/providers/costcenter/deploy/Kubefile
+++ b/frontend/providers/costcenter/deploy/Kubefile
@@ -10,5 +10,6 @@ ENV cloudDomain="127.0.0.1.nip.io"
 ENV cloudPort=""
 ENV transferEnabled="true"
 ENV rechargeEnabled="true"
+ENV jwtInternal=""
 
 CMD ["kubectl apply -f manifests"]
diff --git a/frontend/providers/costcenter/deploy/manifests/configmap.yaml.tmpl b/frontend/providers/costcenter/deploy/manifests/configmap.yaml.tmpl
index 8e7dba149b3e..490f2207df2d 100644
--- a/frontend/providers/costcenter/deploy/manifests/configmap.yaml.tmpl
+++ b/frontend/providers/costcenter/deploy/manifests/configmap.yaml.tmpl
@@ -15,6 +15,10 @@ data:
     costCenter:
       transferEnabled: true
       currencyType: "shellCoin"
+      auth:
+        jwt:
+          internal: "{{ .jwtInternal }}"
+          billing: "{{ .jwtInternal }}"
       invoice:
         enabled: false
         feiShuBotURL: ""