diff --git a/ansible/rbac.yaml b/ansible/rbac.yaml
index 7cc3e46..63d5148 100644
--- a/ansible/rbac.yaml
+++ b/ansible/rbac.yaml
@@ -54,6 +54,7 @@ rules:
   - get
   resourceNames:
   - cluster-info
+  - kube-root-ca.crt
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1