diff --git a/kfdef/kfctl_istio_dex.yaml b/kfdef/kfctl_istio_dex.yaml
index 3904fa873..eeb47926f 100644
--- a/kfdef/kfctl_istio_dex.yaml
+++ b/kfdef/kfctl_istio_dex.yaml
@@ -43,7 +43,7 @@ spec:
   - kustomizeConfig:
       parameters:
       - name: clusterRbacConfig
-        value: 'ON'
+        value: 'ON_WITH_EXCLUSION'
       repoRef:
         name: manifests
         path: istio/istio