diff --git a/base/download/app-resign-role.yaml b/base/download/app-resign-role.yaml
index c5f3fa9..638a3ea 100644
--- a/base/download/app-resign-role.yaml
+++ b/base/download/app-resign-role.yaml
@@ -3,6 +3,6 @@ kind: Role
 metadata:
   name: app-resign-role
 rules:
-  - apiGroups: [ "batch" ]
-    resources: [ "jobs" ]
-    verbs: [ "create" ]
\ No newline at end of file
+  - apiGroups: [ "batch", "extensions", "apps" ]
+    resources: [ "jobs", "deployments", "pods", "pods/log" ]
+    verbs: [ "create", "get", "list", "watch", "create", "delete", "update", "patch" ]
\ No newline at end of file