diff --git a/devstack/plugin.sh b/devstack/plugin.sh
index 8846ac22d..adb7d8411 100644
--- a/devstack/plugin.sh
+++ b/devstack/plugin.sh
@@ -143,6 +143,11 @@ function run_containerized_kuryr_resources {
     /usr/local/bin/kubectl create -f \
         "${k8s_data_dir}/service_account.yml" \
         || die $LINENO "Failed to create kuryr-kubernetes ServiceAccount."
+
+    if is_service_enabled openshift-master; then
+        # NOTE(dulek): For OpenShift add privileged SCC to serviceaccount.
+        /usr/local/bin/oadm policy add-scc-to-user privileged -n kube-system -z kuryr-controller
+    fi
     /usr/local/bin/kubectl create -f \
         "${k8s_data_dir}/controller_deployment.yml" \
         || die $LINENO "Failed to create kuryr-kubernetes Deployment."