diff --git a/promenade/templates/genesis/etc/kubernetes/asset-loader/assets/tiller.yaml b/promenade/templates/genesis/etc/kubernetes/asset-loader/assets/tiller.yaml
index b48237d6..948a2b2b 100644
--- a/promenade/templates/genesis/etc/kubernetes/asset-loader/assets/tiller.yaml
+++ b/promenade/templates/genesis/etc/kubernetes/asset-loader/assets/tiller.yaml
@@ -1,4 +1,23 @@
 ---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: tiller
+  namespace: kube-system
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  name: tiller
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: tiller
+  namespace: kube-system
+---
 apiVersion: extensions/v1beta1
 kind: Deployment
 metadata:
@@ -24,6 +43,7 @@ spec:
         app: helm
         name: tiller
     spec:
+      serviceAccountName: tiller
       containers:
       - env:
         - name: TILLER_NAMESPACE