diff --git a/pkg/config/default.go b/pkg/config/default.go
index d8e20032..1931faa1 100644
--- a/pkg/config/default.go
+++ b/pkg/config/default.go
@@ -108,7 +108,7 @@ func AllinoneCfg(user *user.User, all bool) *kubekeyapi.Cluster {
 
 	if all {
 		allinoneCfg.Spec.Storage = kubekeyapi.Storage{
-			DefaultStorageClass: "local",
+			DefaultStorageClass: "localVolume",
 			LocalVolume:         kubekeyapi.LocalVolume{StorageClassName: "local"},
 		}
 		allinoneCfg.Spec.KubeSphere = kubekeyapi.KubeSphere{
diff --git a/pkg/kubesphere/tmpl.go b/pkg/kubesphere/tmpl.go
index c490664e..6a767f33 100644
--- a/pkg/kubesphere/tmpl.go
+++ b/pkg/kubesphere/tmpl.go
@@ -210,6 +210,36 @@ rules:
   - '*'
   verbs:
   - '*'
+- apiGroups:
+  - policy
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - autoscaling
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - networking.istio.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - config.istio.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- apiGroups:
+  - iam.kubesphere.io
+  resources:
+  - '*'
+  verbs:
+  - '*'
 
 ---
 kind: ClusterRoleBinding
@@ -246,7 +276,7 @@ spec:
       serviceAccountName: ks-installer
       containers:
       - name: installer
-        image: kubespheredev/ks-installer:dev-helm3
+        image: kubespheredev/ks-install:v3.0.0-dev
         imagePullPolicy: IfNotPresent
     `)))
 )