diff --git a/kube/deploy/core/db/emqx/cluster/emqx.yaml b/kube/deploy/core/db/emqx/cluster/emqx.yaml
index ad4d4171..387f42fc 100644
--- a/kube/deploy/core/db/emqx/cluster/emqx.yaml
+++ b/kube/deploy/core/db/emqx/cluster/emqx.yaml
@@ -24,11 +24,17 @@ spec:
       authorization {
         no_match = "deny"
         deny_action = "ignore"
-        sources = [{
-          enable = true
-          type = file
-          path = "/secrets/acl.conf"
-        }]
+        sources = [
+          {
+            enable = true
+            type = file
+            path = "/secrets/acl.conf"
+          },
+          {
+            enable = true
+            type = built_in_database
+          }
+        ]
       }
       listeners.ssl.default {
         bind = "0.0.0.0:8883"