diff --git a/hack/example-service-monitoring/deploy b/hack/example-service-monitoring/deploy
index 7691047c45d337f61680f78dc126032b159f38c2..ba922b841228cb5926d07908f5770bceb031bc2c 100755
--- a/hack/example-service-monitoring/deploy
+++ b/hack/example-service-monitoring/deploy
@@ -8,6 +8,9 @@ if [ -z "${NAMESPACE}" ]; then
     NAMESPACE=default
 fi
 
+kubectl --namespace "$NAMESPACE" --kubeconfig="$KUBECONFIG" apply -f manifests/examples/example-app/prometheus-frontend-service-account.yaml
+kubectl --namespace "$NAMESPACE" --kubeconfig="$KUBECONFIG" apply -f manifests/examples/example-app/prometheus-frontend-role.yaml
+kubectl --namespace "$NAMESPACE" --kubeconfig="$KUBECONFIG" apply -f manifests/examples/example-app/prometheus-frontend-role-binding.yaml
 kubectl --namespace "$NAMESPACE" --kubeconfig="$KUBECONFIG" apply -f manifests/examples/example-app/prometheus-frontend-svc.yaml
 kubectl --namespace "$NAMESPACE" --kubeconfig="$KUBECONFIG" apply -f manifests/examples/example-app/example-app.yaml
 kubectl --namespace "$NAMESPACE" --kubeconfig="$KUBECONFIG" apply -f manifests/examples/example-app/prometheus-frontend.yaml
diff --git a/manifests/examples/example-app/prometheus-frontend-role-binding.yaml b/manifests/examples/example-app/prometheus-frontend-role-binding.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..1d6bea2cfe055c21c25756e27cf81bc06eade291
--- /dev/null
+++ b/manifests/examples/example-app/prometheus-frontend-role-binding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: RoleBinding
+metadata:
+  name: prometheus-frontend
+  namespace: default
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: prometheus-frontend
+subjects:
+- kind: ServiceAccount
+  name: prometheus-frontend
+  namespace: default
diff --git a/manifests/examples/example-app/prometheus-frontend-role.yaml b/manifests/examples/example-app/prometheus-frontend-role.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..79d505011afa95f13ab4b919d04dcefee94743f4
--- /dev/null
+++ b/manifests/examples/example-app/prometheus-frontend-role.yaml
@@ -0,0 +1,17 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: Role
+metadata:
+  name: prometheus-frontend
+  namespace: default
+rules:
+- apiGroups: [""]
+  resources:
+  - nodes
+  - services
+  - endpoints
+  - pods
+  verbs: ["get", "list", "watch"]
+- apiGroups: [""]
+  resources:
+  - configmaps
+  verbs: ["get"]
diff --git a/manifests/examples/example-app/prometheus-frontend-service-account.yaml b/manifests/examples/example-app/prometheus-frontend-service-account.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..abd3e0df4074ebeb0f2d34dcaa9c6e39dea5e060
--- /dev/null
+++ b/manifests/examples/example-app/prometheus-frontend-service-account.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: prometheus-frontend
diff --git a/manifests/examples/example-app/prometheus-frontend.yaml b/manifests/examples/example-app/prometheus-frontend.yaml
index b55b58dba3f97d58db5a7568604da59acd0c3634..d56515293e6db54fe99cbf91015ee596b3c04877 100644
--- a/manifests/examples/example-app/prometheus-frontend.yaml
+++ b/manifests/examples/example-app/prometheus-frontend.yaml
@@ -6,6 +6,7 @@ metadata:
   labels:
     prometheus: frontend
 spec:
+  serviceAccountName: prometheus-frontend
   version: v1.7.1
   serviceMonitorSelector:
     matchLabels: