diff --git a/cluster/kube/cluster.libsonnet b/cluster/kube/cluster.libsonnet
index 816a8aa..8305033 100644
--- a/cluster/kube/cluster.libsonnet
+++ b/cluster/kube/cluster.libsonnet
@@ -126,6 +126,11 @@
                     resources: ["ingresses"],
                     verbs: ["*"],
                 },
+                {
+                    apiGroups: ["certmanager.k8s.io"],
+                    resources: ["certificates"],
+                    verbs: ["*"],
+                },
             ],
         },
         // This ClusterRoleBindings allows root access to cluster admins.