diff --git a/bootstrap/system-upgrades/clusterrolebinding.yaml b/bootstrap/system-upgrades/clusterrolebinding.yaml
index 2f32d4daaf184cc6e385032d38e530f7562977e6..84fd31ca09989ae99afe684891055321d976f8d9 100644
--- a/bootstrap/system-upgrades/clusterrolebinding.yaml
+++ b/bootstrap/system-upgrades/clusterrolebinding.yaml
@@ -10,6 +10,8 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: system-upgrade-executer
+- kind: ServiceAccount
+  name: system-upgrade
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding