diff --git a/chart/templates/elasticsearch-kibana/values.yaml b/chart/templates/elasticsearch-kibana/values.yaml
index 2aa0fdfe462c08f46518e4452b3b14120d7401d1..3d1af240ea7a3ca13a662d91acd69acd837c537c 100644
--- a/chart/templates/elasticsearch-kibana/values.yaml
+++ b/chart/templates/elasticsearch-kibana/values.yaml
@@ -15,7 +15,7 @@ imagePullPolicy: {{ .Values.imagePullPolicy }}
 istio:
   enabled: {{ .Values.istio.enabled }}
   hardened:
-    {{- if or (dig "istio" "hardened" "enabled" false .Values.loki.values) (dig "istio" "hardened" "enabled" false .Values.elasticsearchKibana.values) }}
+    {{- if or (dig "istio" "hardened" "enabled" false .Values.loki.values) (dig "hardened" "enabled" false .Values.istio.values) (dig "istio" "hardened" "enabled" false .Values.elasticsearchKibana.values) }}
     enabled: true
     {{- else }}
     enabled: false
@@ -79,7 +79,11 @@ kibana:
   podAnnotations:
     {{ include "istioAnnotation" . }}
 {{- end }}
-
+{{- if not .Values.elasticsearchKibana.serviceAccountAnnotations.kibana }}
+  serviceAccountAnnotations: {}
+{{- else }}
+  serviceAccountAnnotations: {{ toYaml .Values.elasticsearchKibana.serviceAccountAnnotations.kibana | nindent 4 }}
+{{- end }}
 monitoring:
   enabled: {{ .Values.monitoring.enabled }}
 
@@ -229,4 +233,9 @@ elasticsearch:
     podAnnotations:
       {{ include "istioAnnotation" . }}
     {{- end }}
+  {{- if not .Values.elasticsearchKibana.serviceAccountAnnotations.elasticsearch }}
+  serviceAccountAnnotations: {}
+  {{- else }}
+  serviceAccountAnnotations: {{ toYaml .Values.elasticsearchKibana.serviceAccountAnnotations.elasticsearch | nindent 4 }}
+  {{- end }}
 {{- end -}}
diff --git a/chart/values.schema.json b/chart/values.schema.json
index 48d3b510ba931d36a40079808e14042300e56d20..8e788d5216dd7de672e430f9a81300be49f6c5a4 100644
--- a/chart/values.schema.json
+++ b/chart/values.schema.json
@@ -451,6 +451,12 @@
             }
           },
           "additionalProperties": false
+        },
+        "serviceAccountAnnotations": {
+          "properties": {
+            "elasticsearch": true,
+            "kibana": true
+          }
         }
       },
       "allOf": [
diff --git a/chart/values.yaml b/chart/values.yaml
index 3a2c5ee3acd268fe6bbcaeaf044d321002593a3a..5d068e462fe88cba713ee6a78e2dd5d22db36c63 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -570,11 +570,11 @@ elasticsearchKibana:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/elasticsearch-kibana.git
     path: "./chart"
-    tag: "1.17.0-bb.1"
+    tag: "1.17.0-bb.2"
   helmRepo:
     repoName: "registry1"
     chartName: "elasticsearch-kibana"
-    tag: "1.17.0-bb.1"
+    tag: "1.17.0-bb.2"
 
   # -- Flux reconciliation overrides specifically for the Logging (EFK) Package
   flux:
@@ -594,6 +594,11 @@ elasticsearchKibana:
 
     # -- Elasticsearch/Kibana OIDC client secret
     client_secret: ""
+  
+  # -- Elasticsearch/Kibana Service Account Annotations
+  serviceAccountAnnotations:
+    elasticsearch: {}
+    kibana: {}
 
   license:
     # -- Toggle trial license installation of elasticsearch.  Note that enterprise (non trial) is required for SSO to work.