diff --git a/core/installer/values-tmpl/appmanager.jsonschema b/core/installer/values-tmpl/appmanager.jsonschema
new file mode 100644
index 0000000..8a011ca
--- /dev/null
+++ b/core/installer/values-tmpl/appmanager.jsonschema
@@ -0,0 +1,8 @@
+{
+  "type": "object",
+  "properties": {
+    "RepoAddr": { "type": "string", "default": "ssh://192.168.0.11/example" },
+	"SSHPrivateKey": { "type": "string", "default": "foo bar" }
+  },
+  "additionalProperties": false
+}
diff --git a/core/installer/values-tmpl/appmanager.md b/core/installer/values-tmpl/appmanager.md
new file mode 100644
index 0000000..8fdc4ea
--- /dev/null
+++ b/core/installer/values-tmpl/appmanager.md
@@ -0,0 +1 @@
+Installs PCloud App Manager
diff --git a/core/installer/values-tmpl/appmanager.yaml b/core/installer/values-tmpl/appmanager.yaml
new file mode 100644
index 0000000..2ca79b9
--- /dev/null
+++ b/core/installer/values-tmpl/appmanager.yaml
@@ -0,0 +1,22 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: appmanager
+  namespace: {{ .Release.Namespace }}
+spec:
+  chart:
+    spec:
+      chart: charts/appmanager
+      sourceRef:
+        kind: GitRepository
+        name: pcloud
+        namespace: {{ .Global.Id }}
+  interval: 1m0s
+  values:
+    repoAddr: {{ .Values.RepoAddr }}
+    sshPrivateKey: {{ .Values.SSHPrivateKey | b64enc }}
+    ingress:
+      className: {{ .Global.Id }}-ingress-public
+      domain: apps.{{ .Global.PrivateDomain }}
+      certificateIssuer: ""
+    clusterRoleName: {{ .Global.Id }}-appmanager
diff --git a/core/installer/values-tmpl/env-manager.yaml b/core/installer/values-tmpl/env-manager.yaml
index b64ce09..a2ba684 100644
--- a/core/installer/values-tmpl/env-manager.yaml
+++ b/core/installer/values-tmpl/env-manager.yaml
@@ -15,3 +15,4 @@
   values:
     repoIP: {{ .Values.RepoIP }}
     sshPrivateKey: {{ .Values.SSHPrivateKey | b64enc }}
+    clusterRoleName: {{ .Global.PCloudEnvName }}-env-manager
diff --git a/core/installer/values-tmpl/welcome.yaml b/core/installer/values-tmpl/welcome.yaml
index 93556e3..145a735 100644
--- a/core/installer/values-tmpl/welcome.yaml
+++ b/core/installer/values-tmpl/welcome.yaml
@@ -19,3 +19,4 @@
       className: {{ .Global.PCloudEnvName }}-ingress-public
       domain: welcome.{{ .Global.Domain }}
       certificateIssuer: {{ .Global.Id }}-public
+    clusterRoleName: {{ .Global.Id }}-welcome