diff --git a/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml b/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml
index 3a34f54d0f8f7..9ee72c29a81eb 100644
--- a/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml
+++ b/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml
@@ -204,3 +204,18 @@ items:
   - kind: ServiceAccount
     name: ci-operator
     namespace: ci-staging
+
+
+- kind: RoleBinding
+  apiVersion: rbac.authorization.k8s.io/v1
+  metadata:
+    name: secret-reader-to-ci-operator
+    namespace: test-credentials
+  roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: Role
+    name: secret-reader
+  subjects:
+  - kind: ServiceAccount
+    name: ci-operator
+    namespace: ci-staging