diff --git a/installer/pkg/components/ws-manager/deployment.go b/installer/pkg/components/ws-manager/deployment.go
index c2cd8dbb6a2bfb..573b15cc40de7c 100644
--- a/installer/pkg/components/ws-manager/deployment.go
+++ b/installer/pkg/components/ws-manager/deployment.go
@@ -72,7 +72,9 @@ func deployment(ctx *common.RenderContext) ([]runtime.Object, error) {
 				MountPath: "/certs",
 				ReadOnly:  true,
 			}},
-		}},
+		},
+			*common.KubeRBACProxyContainer(ctx),
+		},
 		Volumes: []corev1.Volume{
 			{
 				Name: VolumeConfig,