diff --git a/charts/deployment-operator/Chart.yaml b/charts/deployment-operator/Chart.yaml
index 0517995e..2215ec3e 100644
--- a/charts/deployment-operator/Chart.yaml
+++ b/charts/deployment-operator/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: deployment-operator
 description: creates a new instance of the plural deployment operator
 type: application
-version: 0.2.2
+version: 0.2.3
 appVersion: "0.3.9"
 maintainers:
 - name: Plural
diff --git a/charts/deployment-operator/templates/rbac.yaml b/charts/deployment-operator/templates/rbac.yaml
index e176fe0e..832d3998 100644
--- a/charts/deployment-operator/templates/rbac.yaml
+++ b/charts/deployment-operator/templates/rbac.yaml
@@ -10,3 +10,28 @@ roleRef:
   kind: ClusterRole
   name: {{ .Values.rbac.clusterRole }}
   apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: plrl-console-reader
+rules:
+- apiGroups: ["*"]
+  resources: ["*"]
+  verbs: ["get", "list"]
+- apiGroups: [""]
+  resources: ["pods"]
+  verbs: ["delete"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: console-read-binding
+subjects:
+- kind: User
+  name: console@plural.sh
+  apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: ClusterRole
+  name: plrl-console-reader
+  apiGroup: rbac.authorization.k8s.io