diff --git a/components/monitoring/controllers/base/rbac.yaml b/components/monitoring/controllers/base/rbac.yaml
index 5e79f7c..973111f 100644
--- a/components/monitoring/controllers/base/rbac.yaml
+++ b/components/monitoring/controllers/base/rbac.yaml
@@ -22,4 +22,21 @@ metadata:
   namespace: monitoring
   labels:
     app.kubernetes.io/component: monitoring
-    toolkit.fluxcd.io/tenant: platform-team
\ No newline at end of file
+    toolkit.fluxcd.io/tenant: platform-team
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/component: monitoring
+    toolkit.fluxcd.io/tenant: platform-team
+  name: metrics-server-auth-reader
+  namespace: monitoring
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: extension-apiserver-authentication-reader
+subjects:
+- kind: ServiceAccount
+  name: metrics-server
+  namespace: monitoring