diff --git a/roles/installer/templates/service_account.yaml.j2 b/roles/installer/templates/service_account.yaml.j2
index 6c9313f1..c0fedadb 100644
--- a/roles/installer/templates/service_account.yaml.j2
+++ b/roles/installer/templates/service_account.yaml.j2
@@ -26,6 +26,9 @@ rules:
 - apiGroups: [""]
   resources: ["pods/attach"]
   verbs: ["create"]
+- apiGroups: [""]
+  resources: ["secrets"]
+  verbs: ["get", "create", "delete"]
 
 ---
 kind: RoleBinding