diff --git a/rbac.yaml b/rbac.yaml
new file mode 100644
index 0000000..1ed3322
--- /dev/null
+++ b/rbac.yaml
@@ -0,0 +1,50 @@
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: pvmigrate
+rules:
+  - apiGroups: [ "" ]
+    resources:
+      - persistentvolumes
+    verbs:
+      - list
+      - get
+      - update
+      - delete
+  - apiGroups: [ "" ]
+    resources:
+      - persistentvolumeclaims
+    verbs:
+      - get
+      - create
+      - delete
+  - apiGroups: [ "" ]
+    resources:
+      - pods
+      - pods/log
+    verbs:
+      - list
+      - get
+      - delete
+      - create
+  - apiGroups: [ "storage.k8s.io" ]
+    resources:
+      - storageclasses
+    verbs:
+      - get
+      - list
+      - update
+      - delete
+  - apiGroups: [ "apps" ]
+    resources:
+      - deployments
+      - statefulsets
+    verbs:
+      - get
+      - list
+      - update
+  - apiGroups: [ "apps" ]
+    resources:
+      - replicasets
+    verbs:
+      - get