diff --git a/k8s/stage/app/service-account.yaml b/k8s/stage/app/service-account.yaml
new file mode 100644
index 0000000..84ffcac
--- /dev/null
+++ b/k8s/stage/app/service-account.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/name: osh
+    app.kubernetes.io/version: 1.0.0-SNAPSHOT
+    app.openshift.io/runtime: quarkus
+    env: stage
+  name: osh
+  namespace: pct-security-tooling
+imagePullSecrets:
+- name: pct-security-osh-wrapper-client-pull-secret
+- name: osh-dockercfg-tfhlr
+secrets:
+- name: osh-dockercfg-tfhlr