diff --git a/cluster/addons/metrics-server/resource-reader.yaml b/cluster/addons/metrics-server/resource-reader.yaml
index a3788cb52f1..16592f14720 100644
--- a/cluster/addons/metrics-server/resource-reader.yaml
+++ b/cluster/addons/metrics-server/resource-reader.yaml
@@ -19,6 +19,18 @@ rules:
       - get
       - list
       - watch
+  - apiGroups: ["apps"]
+    resources:
+      - deployments
+    resourceNames:
+      - metrics-server-v0.6.3
+    verbs:
+      - get
+      - patch
+  - nonResourceURLs:
+    - /metrics
+    verbs:
+      - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding