diff --git a/charts/kyverno/templates/background-controller/role.yaml b/charts/kyverno/templates/background-controller/role.yaml
index c18d1186df..7b8c7cbc0e 100644
--- a/charts/kyverno/templates/background-controller/role.yaml
+++ b/charts/kyverno/templates/background-controller/role.yaml
@@ -44,5 +44,8 @@ rules:
       - get
       - list
       - watch
+    resourceNames:
+      - {{ template "kyverno.admission-controller.serviceName" . }}.{{ template "kyverno.namespace" . }}.svc.kyverno-tls-ca
+      - {{ template "kyverno.admission-controller.serviceName" . }}.{{ template "kyverno.namespace" . }}.svc.kyverno-tls-pair
 {{- end -}}
 {{- end -}}
diff --git a/config/install-latest-testing.yaml b/config/install-latest-testing.yaml
index f8f049ef0b..b4aa52c823 100644
--- a/config/install-latest-testing.yaml
+++ b/config/install-latest-testing.yaml
@@ -44422,6 +44422,9 @@ rules:
       - get
       - list
       - watch
+    resourceNames:
+      - kyverno-svc.kyverno.svc.kyverno-tls-ca
+      - kyverno-svc.kyverno.svc.kyverno-tls-pair
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role