diff --git a/infrastructure/addons/cnpg/kustomization.yaml b/infrastructure/addons/cnpg/kustomization.yaml
index 12664c8..f676cfb 100644
--- a/infrastructure/addons/cnpg/kustomization.yaml
+++ b/infrastructure/addons/cnpg/kustomization.yaml
@@ -6,4 +6,5 @@ resources:
   - rancher-db-password-externalsecret.yaml
   - postgres-cluster.yaml
   - cnpg-cluster-rw-svc.yaml
+  - rolebinding-b2-reader.yaml
   - pgdump-cronjob.yaml
\ No newline at end of file
diff --git a/infrastructure/addons/cnpg/rolebinding-b2-reader.yaml b/infrastructure/addons/cnpg/rolebinding-b2-reader.yaml
new file mode 100644
index 0000000..d62901c
--- /dev/null
+++ b/infrastructure/addons/cnpg/rolebinding-b2-reader.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: rancher-db-b2-reader
+  namespace: cnpg-cluster
+subjects:
+  - kind: ServiceAccount
+    name: rancher-db
+    namespace: cnpg-cluster
+roleRef:
+  kind: Role
+  name: rancher-db-b2-reader
+  apiGroup: rbac.authorization.k8s.io
\ No newline at end of file