diff --git a/infra/kyverno/values.yaml b/infra/kyverno/values.yaml
index 1150258..b114d75 100644
--- a/infra/kyverno/values.yaml
+++ b/infra/kyverno/values.yaml
@@ -9,12 +9,41 @@ admissionController:
             - "nodes"
           verbs:
             - get
+        - apiGroups:
+            - ""
+          resources:
+            - "secret"
+          verbs:
+            - get
+            - create
 backgroundController:
   replicas: 2
+  rbac:
+    clusterRole:
+      extraResources:
+        - apiGroups:
+            - ""
+          resources:
+            - "secrets"
+          verbs:
+            - get
+            - update
 cleanupController:
   replicas: 2
 reportsController:
   replicas: 2
+  rbac:
+    clusterRole:
+      extraResources:
+        - apiGroups:
+            - ""
+          resources:
+            - "secrets"
+            - "pods/binding"
+          verbs:
+            - get
+            - list
+            - watch
 
 config:
   webhooks: