diff --git a/kubernetes/master/kube-addons.sls b/kubernetes/master/kube-addons.sls
index e7454a5..3682b43 100644
--- a/kubernetes/master/kube-addons.sls
+++ b/kubernetes/master/kube-addons.sls
@@ -84,7 +84,15 @@
 
 {%- if common.addons.get('netchecker', {'enabled': False}).enabled %}
 
-{%- for resource in ['svc', 'server', 'agent'] %}
+{%- set netchecker_resources = ['svc', 'server', 'agent'] %}
+
+{%- if 'RBAC' in master.auth.get('mode', "") %}
+
+{%- set netchecker_resources = netchecker_resources + ['roles'] %}
+
+{%- endif %}
+
+{%- for resource in netchecker_resources %}
 
 /etc/kubernetes/addons/netchecker/netchecker-{{ resource }}.yml:
   file.managed: