diff --git a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2 b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
index 57cc7b4cd61859606cf2cbcc5097b3540fdf669b..3677ec660a8b6cf7a089d1f7b4cbd1251ecf123d 100644
--- a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
+++ b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
@@ -45,6 +45,8 @@ rules:
     resources:
       - pods
     verbs:
+      - watch
+      - list
       - get
   # IPAM resources are manipulated when nodes are deleted.
   - apiGroups: ["crd.projectcalico.org"]