diff --git a/dkron/templates/agent-deployment.yaml b/dkron/templates/agent-deployment.yaml
index 59d8cbd..f943b34 100644
--- a/dkron/templates/agent-deployment.yaml
+++ b/dkron/templates/agent-deployment.yaml
@@ -48,6 +48,9 @@ spec:
               - "--retry-join=\"provider=k8s label_selector=\"\"app.kubernetes.io/instance={{ .Release.Name }}\"\" namespace=\"\"{{ .Release.Namespace }}\"\"\""
               - "--log-level={{ .Values.agent.log.level }}"
               - "--tag=\"agent=true\""
+              {{- range .Values.agent.tags }}
+              - "--tag=\"{{ . }}\""
+              {{- end }}
           ports:
             -   name: serf
                 containerPort: 8946
diff --git a/dkron/templates/cluster-role-binding.yaml b/dkron/templates/cluster-role-binding.yaml
new file mode 100644
index 0000000..033ce21
--- /dev/null
+++ b/dkron/templates/cluster-role-binding.yaml
@@ -0,0 +1,13 @@
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ include "dkron.fullname" . }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "dkron.serviceAccountName" . }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ include "dkron.fullname" . }}
+  apiGroup: rbac.authorization.k8s.io
diff --git a/dkron/templates/clusterrole.yaml b/dkron/templates/clusterrole.yaml
new file mode 100644
index 0000000..17919d7
--- /dev/null
+++ b/dkron/templates/clusterrole.yaml
@@ -0,0 +1,12 @@
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ include "dkron.fullname" . }}
+rules:
+  - apiGroups: [""]
+    resources: ["pods", "pods/log"]
+    verbs: ["list", "patch", "get"]
+  - apiGroups: [""]
+    resources: ["pods/exec"]
+    verbs: ["create"]
diff --git a/dkron/values.yaml b/dkron/values.yaml
index 8993ce6..0f18eb4 100644
--- a/dkron/values.yaml
+++ b/dkron/values.yaml
@@ -81,6 +81,8 @@ agent:
 
   log:
     level: "info"
+    
+  tags:
 
   deploymentAnnotations: {}