diff --git a/config/internal/instascale/clusterrole.yaml.tmpl b/config/internal/instascale/clusterrole.yaml.tmpl
index 13eb1461d..8f27f57f0 100644
--- a/config/internal/instascale/clusterrole.yaml.tmpl
+++ b/config/internal/instascale/clusterrole.yaml.tmpl
@@ -21,6 +21,23 @@ rules:
   - delete
   - patch
 
+- apiGroups:
+  - ""
+  resourceNames:
+  - instascale-ocm-secret
+  resources:
+  - secrets
+  verbs:
+  - get
+
+- apiGroups:
+  - config.openshift.io
+  resources:
+  - clusterversions
+  verbs:
+  - get
+  - list
+
 - apiGroups:
   - apps
   resources:
diff --git a/controllers/testdata/instascale_test_results/case_1/clusterrole.yaml b/controllers/testdata/instascale_test_results/case_1/clusterrole.yaml
index 11a22d454..c4053cdb1 100644
--- a/controllers/testdata/instascale_test_results/case_1/clusterrole.yaml
+++ b/controllers/testdata/instascale_test_results/case_1/clusterrole.yaml
@@ -16,6 +16,24 @@ rules:
     resources:
       - nodes
       - configmaps
+
+  - verbs:
+      - get
+    apiGroups:
+      - ''
+    resourceNames:
+      - instascale-ocm-secret
+    resources:
+      - secrets
+
+  - verbs:
+      - get
+      - list
+    apiGroups:
+      - config.openshift.io
+    resources:
+      - clusterversions
+
   - verbs:
       - list
       - watch