diff --git a/metadata/service/control/roles/cluster-admin.yml b/metadata/service/control/roles/cluster-admin.yml
new file mode 100644
index 0000000..f35b6a5
--- /dev/null
+++ b/metadata/service/control/roles/cluster-admin.yml
@@ -0,0 +1,12 @@
+parameters:
+  kubernetes:
+    control:
+      role:
+        cluster-admin:
+          enabled: true
+          kind: ClusterRole
+          binding:
+            root-cluster-admin-binding:
+              subject:
+                admin:
+                  kind: User
diff --git a/metadata/service/control/roles/fluentd-view.yml b/metadata/service/control/roles/fluentd-view.yml
new file mode 100644
index 0000000..18ef3f0
--- /dev/null
+++ b/metadata/service/control/roles/fluentd-view.yml
@@ -0,0 +1,12 @@
+parameters:
+  kubernetes:
+    control:
+      role:
+        view:
+          enabled: true
+          kind: ClusterRole
+          binding:
+            fluentd-cluster-watch:
+              subject:
+                system:nodes:
+                  kind: Group