diff --git a/pkg/controller/cluster/agent/shared.go b/pkg/controller/cluster/agent/shared.go
index 274c6d7b..138e2546 100644
--- a/pkg/controller/cluster/agent/shared.go
+++ b/pkg/controller/cluster/agent/shared.go
@@ -245,7 +245,7 @@ func (s *SharedAgent) role() *rbacv1.Role {
 			{
 				Verbs:     []string{"*"},
 				APIGroups: []string{""},
-				Resources: []string{"pods", "secrets", "configmaps", "services"},
+				Resources: []string{"pods", "pods/log", "pods/exec", "secrets", "configmaps", "services"},
 			},
 			{
 				Verbs:     []string{"get", "watch", "list"},