diff --git a/packages/backstage/dev/sa-backstage.yaml b/packages/backstage/dev/sa-backstage.yaml
index 02dc3270..63fbfe7e 100644
--- a/packages/backstage/dev/sa-backstage.yaml
+++ b/packages/backstage/dev/sa-backstage.yaml
@@ -36,6 +36,9 @@ rules:
 - apiGroups: ["argoproj.io"]
   resources: ["workflows"]
   verbs: ["create"]
+- apiGroups: [""]
+  resources: ["configmaps"]
+  verbs: ["create"]  
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
diff --git a/terraform/scripts/backstage/install.sh b/terraform/scripts/backstage/install.sh
index 49b23f38..65ae0d3c 100755
--- a/terraform/scripts/backstage/install.sh
+++ b/terraform/scripts/backstage/install.sh
@@ -7,7 +7,7 @@ export POSTGRES_PASSWORD=${1}
 export BACKSTAGE_DOMAIN_NAME=${2}
 export KEYCLOAK_DOMAIN_NAME=${3}
 export ARGO_WORKFLOWS_DOMAIN_NAME=${4}
-export GITHUB_APP_YAML=$(cat ${REPO_ROOT}/private/github-integration.yaml | base64)
+export GITHUB_APP_YAML_INDENTED=$(cat ${REPO_ROOT}/private/github-integration.yaml | base64 | sed 's/^/    /')
 
 kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd application/keycloak
 kubectl wait --for=condition=ready pod -l app=keycloak -n keycloak  --timeout=30s
diff --git a/terraform/scripts/backstage/output.yaml b/terraform/scripts/backstage/output.yaml
new file mode 100644
index 00000000..e69de29b
diff --git a/terraform/scripts/backstage/secret-integrations.yaml b/terraform/scripts/backstage/secret-integrations.yaml
index cff53847..d192f1f9 100644
--- a/terraform/scripts/backstage/secret-integrations.yaml
+++ b/terraform/scripts/backstage/secret-integrations.yaml
@@ -4,4 +4,5 @@ metadata:
   name: integrations
   namespace: backstage
 data:
-  github-integration.yaml: ${GITHUB_APP_YAML}
+  github-integration.yaml: |
+${GITHUB_APP_YAML_INDENTED}