diff --git a/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml b/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml
index 77eb6dad..40cea952 100644
--- a/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml
+++ b/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml
@@ -5,7 +5,7 @@ metadata:
   name: "fluentbit"
 rules:
   - apiGroups: [""]
-    resources: ["pods", "namespaces"]
+    resources: ["pods", "namespaces", "nodes", "nodes/proxy"]
     verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -20,6 +20,9 @@ subjects:
   - kind: ServiceAccount
     name: *app
     namespace: *app
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: system:serviceaccounts
 ---
 apiVersion: v1
 kind: ServiceAccount