diff --git a/jsonnetfile.lock.json b/jsonnetfile.lock.json
index 45c309914cb..5c76eb92a2b 100644
--- a/jsonnetfile.lock.json
+++ b/jsonnetfile.lock.json
@@ -316,8 +316,8 @@
           "subdir": "jsonnet/lib"
         }
       },
-      "version": "17c3d4f4da79c22a4caf752601010ab2ffcf6f35",
-      "sum": "oQRPgrGDsD1m3JDjrcUFuceXhDY8zmQ9rsvc7ECiHm8="
+      "version": "819b95df1e7be5c0c86978076850ac70bf527db2",
+      "sum": "z6EsX6r3DvqkKa0SgJ6ef2YKgD6yqt4uqsImkKvLJnE="
     },
     {
       "source": {
diff --git a/resources/services/observatorium-template.yaml b/resources/services/observatorium-template.yaml
index 8c381737c20..4ec6e9aa923 100644
--- a/resources/services/observatorium-template.yaml
+++ b/resources/services/observatorium-template.yaml
@@ -247,6 +247,15 @@ objects:
     - get
     - list
     - watch
+  - apiGroups:
+    - loki.grafana.com
+    resources:
+    - alertingrules
+    - recordingrules
+    verbs:
+    - get
+    - list
+    - watch
 - apiVersion: rbac.authorization.k8s.io/v1
   kind: RoleBinding
   metadata:
@@ -1588,7 +1597,7 @@ parameters:
 - name: OBSCTL_RELOADER_IMAGE
   value: quay.io/app-sre/obsctl-reloader
 - name: OBSCTL_RELOADER_IMAGE_TAG
-  value: 17c3d4f
+  value: f021479
 - name: METRICS_WRITE_SERVICE_NAME
   value: observatorium-thanos-receive
 - name: METRICS_WRITE_SERVICE_PORT
diff --git a/services/observatorium-template.jsonnet b/services/observatorium-template.jsonnet
index e230ea00964..027feab8d8e 100644
--- a/services/observatorium-template.jsonnet
+++ b/services/observatorium-template.jsonnet
@@ -93,7 +93,7 @@ local obs = import 'observatorium.libsonnet';
     { name: 'RHOBS_RELOADER_SECRET_NAME', value: 'rhobs-tenant' },
     { name: 'OSD_RELOADER_SECRET_NAME', value: 'observatorium-observatorium-mst-api' },
     { name: 'OBSCTL_RELOADER_IMAGE', value: 'quay.io/app-sre/obsctl-reloader' },
-    { name: 'OBSCTL_RELOADER_IMAGE_TAG', value: '17c3d4f' },
+    { name: 'OBSCTL_RELOADER_IMAGE_TAG', value: 'f021479' },
     { name: 'METRICS_WRITE_SERVICE_NAME', value: obs.thanos.receiversService.metadata.name },
     { name: 'METRICS_WRITE_SERVICE_PORT', value: std.toString(obs.thanos.receiversService.spec.ports[2].port) },
   ],