diff --git a/bootstrap/system-upgrades/clusterrole.yaml b/bootstrap/system-upgrades/clusterrole.yaml
index c0fe59506992deba57ca70c70f1b6ecb7cae1411..82f40784f4240d3e0600ac5b32f7b159f37c9834 100644
--- a/bootstrap/system-upgrades/clusterrole.yaml
+++ b/bootstrap/system-upgrades/clusterrole.yaml
@@ -16,6 +16,13 @@ rules:
   resources:
   - namespaces
   - nodes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - "apiextensions.k8s.io"
+  resources:
   - customresourcedefinitions
   verbs:
   - get