diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 00c1421..40f3427 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -8,6 +8,7 @@ rules:
   - ""
   resources:
   - configmaps
+  - namespaces
   verbs:
   - get
   - list
diff --git a/controllers/comments/githubcomment_controller.go b/controllers/comments/githubcomment_controller.go
index 5ccd193..cd5dac6 100644
--- a/controllers/comments/githubcomment_controller.go
+++ b/controllers/comments/githubcomment_controller.go
@@ -38,7 +38,7 @@ type GithubCommentReconciler struct {
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=githubcomments,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=githubcomments/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=githubcomments/finalizers,verbs=update
-//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch
+//+kubebuilder:rbac:groups="",resources=configmaps;namespaces,verbs=get;list;watch
 
 func (r *GithubCommentReconciler) Reconcile(ctx context.Context, req ctrl.Request) (result ctrl.Result, err error) {
 	logger := log.FromContext(ctx)
diff --git a/controllers/comments/gitlabcomment_controller.go b/controllers/comments/gitlabcomment_controller.go
index 156246f..755e87a 100644
--- a/controllers/comments/gitlabcomment_controller.go
+++ b/controllers/comments/gitlabcomment_controller.go
@@ -38,7 +38,7 @@ type GitlabCommentReconciler struct {
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=gitlabcomments,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=gitlabcomments/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=gitlabcomments/finalizers,verbs=update
-//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch
+//+kubebuilder:rbac:groups="",resources=configmaps;namespaces,verbs=get;list;watch
 
 func (r *GitlabCommentReconciler) Reconcile(ctx context.Context, req ctrl.Request) (result ctrl.Result, err error) {
 	logger := log.FromContext(ctx)
diff --git a/deploy/charts/template-controller/templates/rbac/ClusterRole-manager-role.yml b/deploy/charts/template-controller/templates/rbac/ClusterRole-manager-role.yml
index fdac03d..5d77b15 100644
--- a/deploy/charts/template-controller/templates/rbac/ClusterRole-manager-role.yml
+++ b/deploy/charts/template-controller/templates/rbac/ClusterRole-manager-role.yml
@@ -9,6 +9,7 @@ rules:
       - ""
     resources:
       - configmaps
+      - namespaces
     verbs:
       - get
       - list
diff --git a/deploy/manifests/template-controller.yaml b/deploy/manifests/template-controller.yaml
index 85d6288..c0dc988 100644
--- a/deploy/manifests/template-controller.yaml
+++ b/deploy/manifests/template-controller.yaml
@@ -1714,6 +1714,7 @@ rules:
       - ""
     resources:
       - configmaps
+      - namespaces
     verbs:
       - get
       - list