diff --git a/charts/netbird-operator-config/templates/kubernetes-nbresource.yaml b/charts/netbird-operator-config/templates/kubernetes-nbresource.yaml
index 5241185..fac6a90 100644
--- a/charts/netbird-operator-config/templates/kubernetes-nbresource.yaml
+++ b/charts/netbird-operator-config/templates/kubernetes-nbresource.yaml
@@ -24,7 +24,8 @@ spec:
     spec:
       initContainers:
       - name: wait-network-ready
-        image: "netbirdio/kubectl:latest"
+        image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
         command:
         - sh
         - -c
@@ -32,7 +33,8 @@ spec:
         - kubectl wait --for 'jsonpath={.status.networkID}' -n {{ $routerNS }} nbroutingpeer router;
       containers:
       - name: apply-nbresource
-        image: "netbirdio/kubectl:latest"
+        image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
         env:
         - name: NBRESOURCE_VALUE
           value: |
diff --git a/charts/netbird-operator-config/templates/rbac.yaml b/charts/netbird-operator-config/templates/rbac.yaml
index 56f2ea6..ade413b 100644
--- a/charts/netbird-operator-config/templates/rbac.yaml
+++ b/charts/netbird-operator-config/templates/rbac.yaml
@@ -16,12 +16,15 @@ rules:
   - watch
   - create
   - delete
+  - get
 - apiGroups:
   - netbird.io
   resources:
   - nbroutingpeers
   verbs:
   - get
+  - list
+  - watch
 - apiGroups:
   - netbird.io
   resources:
diff --git a/charts/netbird-operator-config/values.yaml b/charts/netbird-operator-config/values.yaml
index b9c187a..a95747d 100644
--- a/charts/netbird-operator-config/values.yaml
+++ b/charts/netbird-operator-config/values.yaml
@@ -5,6 +5,16 @@ cluster:
 # Create router per namespace, useful for strict networking requirements
 namespacedNetworks: false
 
+image:
+  # Set kubectl image registry
+  registry: docker.io
+  # Set kubectl image repository
+  repository: netbirdio/kubectl
+  # This sets the pull policy for images
+  pullPolicy: IfNotPresent
+  # Sets kubectl image tag
+  tag: "latest"
+
 router:
   # Deploy routing peer(s)
   enabled: false