diff --git a/charts/env-manager/templates/install.yaml b/charts/env-manager/templates/install.yaml
index 37198fc..dd14caf 100644
--- a/charts/env-manager/templates/install.yaml
+++ b/charts/env-manager/templates/install.yaml
@@ -2,13 +2,19 @@
 kind: ClusterRole
 metadata:
   name: {{ .Values.clusterRoleName }}
-rules:
+rules: # TODO(gio): restrict to ns create and dnszone get
 - apiGroups:
-  - ""
+  - "*"
   resources:
-  - namespaces
+  - "*"
   verbs:
-  - create
+  - "*"
+# - apiGroups:
+#   - ""
+#   resources:
+#   - namespaces
+#   verbs:
+#   - create
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding