diff --git a/charts/re-label/templates/rbac.yaml b/charts/re-label/templates/rbac.yaml
index e69de29..4e67648 100644
--- a/charts/re-label/templates/rbac.yaml
+++ b/charts/re-label/templates/rbac.yaml
@@ -0,0 +1,21 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "app.name" . }}-clusterrole
+rules:
+- apiGroups: [""]
+  resources: ["nodes"]
+  verbs: ["get", "list", "patch", "update", "watch"]
+---
+apiVersion: "rbac.authorization.k8s.io/v1"
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "app.name" . }}-rolebinding
+subjects:
+- kind: ServiceAccount
+  name: {{ include "app.name" . }}
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ include "app.name" . }}-clusterrole
+  apiGroup: rbac.authorization.k8s.io