diff --git a/k8s/gitea-runner.yaml b/k8s/gitea-runner.yaml
index fbf272f..21c78cd 100644
--- a/k8s/gitea-runner.yaml
+++ b/k8s/gitea-runner.yaml
@@ -1,3 +1,25 @@
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: runner-role
+rules:
+- apiGroups: ["*"]
+  resources: ["*"]
+  verbs: ["*"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: runner-role-binding
+subjects:
+- kind: ServiceAccount
+  name: default
+roleRef:
+  kind: Role
+  name: runner-role
+  apiGroup: rbac.authorization.k8s.io
+---
 kind: PersistentVolumeClaim
 apiVersion: v1
 metadata: