diff --git a/secrets/provision-rbac.sh b/secrets/provision-rbac.sh
new file mode 100644
index 0000000..665cfa7
--- /dev/null
+++ b/secrets/provision-rbac.sh
@@ -0,0 +1,2 @@
+oc adm policy add-cluster-role-to-user cluster-admin -z pipeline
+oc adm policy add-scc-to-user anyuid -z pipeline