--- charts-original/templates/tigera-operator/02-role-tigera-operator.yaml
+++ charts/templates/tigera-operator/02-role-tigera-operator.yaml
@@ -1,4 +1,3 @@
-# Permissions required when running the operator for a Calico cluster.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -51,11 +50,11 @@
       - nodes
     verbs:
       # Need to update node labels when migrating nodes.
-      - get
-      - patch
-      - list
+      - 'get'
+      - 'patch'
+      - 'list'
       # We need this for Typha autoscaling
-      - watch
+      - 'watch'
   - apiGroups:
       - rbac.authorization.k8s.io
     resources:
@@ -148,6 +147,13 @@
       - delete
       - watch
   - apiGroups:
+      - monitoring.coreos.com
+    resources:
+      - servicemonitors
+    verbs:
+      - get
+      - create
+  - apiGroups:
       - policy
     resources:
       - poddisruptionbudgets