diff --git a/install/kubernetes/helm/istio/templates/clusterrolebinding.yaml b/install/kubernetes/helm/istio/templates/clusterrolebinding.yaml
index 827601b3dd5e..9d9b37d21c0a 100644
--- a/install/kubernetes/helm/istio/templates/clusterrolebinding.yaml
+++ b/install/kubernetes/helm/istio/templates/clusterrolebinding.yaml
@@ -12,3 +12,18 @@ subjects:
 - kind: ServiceAccount
   name: istio-multi
   namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: istio-reader
+  labels:
+    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: istio-reader
+subjects:
+- kind: ServiceAccount
+  name: istio-reader
+  namespace: {{ .Release.Namespace }}
diff --git a/install/kubernetes/helm/istio/templates/serviceaccount.yaml b/install/kubernetes/helm/istio/templates/serviceaccount.yaml
index e52d9eb9c312..96b74d3c313e 100644
--- a/install/kubernetes/helm/istio/templates/serviceaccount.yaml
+++ b/install/kubernetes/helm/istio/templates/serviceaccount.yaml
@@ -3,3 +3,9 @@ kind: ServiceAccount
 metadata:
   name: istio-multi
   namespace: {{ .Release.Namespace }}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: istio-reader
+  namespace: {{ .Release.Namespace }}