diff --git a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2 b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
index 0e8abfcfb17c79e97b9a83a8aae8d95da5cd76c9..c6c57b180faa726c4a92657974fafc0706f99abd 100644
--- a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
+++ b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2
@@ -18,6 +18,7 @@ rules:
     verbs:
       - watch
       - list
+      - get
   - apiGroups:
     - ""
     resources: