diff --git a/charts/tidb-operator/templates/admission/admission-webhook-rbac.yaml b/charts/tidb-operator/templates/admission/admission-webhook-rbac.yaml
index 748be3a295..43d3082a8c 100644
--- a/charts/tidb-operator/templates/admission/admission-webhook-rbac.yaml
+++ b/charts/tidb-operator/templates/admission/admission-webhook-rbac.yaml
@@ -27,6 +27,9 @@ rules:
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get", "list", "watch", "update"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "list"]
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["create","patch","update"]