diff --git a/deployment.yaml b/deployment.yaml
index e66c7ee..ec3cae1 100644
--- a/deployment.yaml
+++ b/deployment.yaml
@@ -1,4 +1,27 @@
 
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: cart-discovery
+rules:
+  - apiGroups: [""] # "" indicates the core API group
+    resources: ["pods","services"]
+    verbs: ["get", "watch", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: cart-discovery-binding
+subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: cart
+  apiGroup: ""
+roleRef:
+  kind: Role
+  name: cart-discovery
+  apiGroup: ""
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata: