diff --git a/apps/appsets/understack.yaml b/apps/appsets/understack.yaml
index 062d8009c..f028421a6 100644
--- a/apps/appsets/understack.yaml
+++ b/apps/appsets/understack.yaml
@@ -92,6 +92,8 @@ spec:
     server: '*'
   - namespace: 'global-secrets-sync'
     server: '*'
+  - namespace: 'kube-system'
+    server: '*'
   clusterResourceWhitelist:
   - group: '*'
     kind: '*'