diff --git a/config/setup/yurt-tunnel-server.yaml b/config/setup/yurt-tunnel-server.yaml
index ffe15482f83..a87de757844 100644
--- a/config/setup/yurt-tunnel-server.yaml
+++ b/config/setup/yurt-tunnel-server.yaml
@@ -10,6 +10,7 @@ rules:
   resources:
     - certificatesigningrequests
   verbs:
+    - create
     - get
     - list
     - watch
diff --git a/config/yaml-template/yurt-tunnel-server.yaml b/config/yaml-template/yurt-tunnel-server.yaml
index 037ae9b596b..4615874d07a 100644
--- a/config/yaml-template/yurt-tunnel-server.yaml
+++ b/config/yaml-template/yurt-tunnel-server.yaml
@@ -10,6 +10,7 @@ rules:
   resources:
     - certificatesigningrequests
   verbs:
+    - create
     - get
     - list
     - watch
diff --git a/pkg/yurtctl/constants/yurt-tunnel-server-tmpl.go b/pkg/yurtctl/constants/yurt-tunnel-server-tmpl.go
index c7de0e4e249..3fc47783ff6 100644
--- a/pkg/yurtctl/constants/yurt-tunnel-server-tmpl.go
+++ b/pkg/yurtctl/constants/yurt-tunnel-server-tmpl.go
@@ -30,6 +30,7 @@ rules:
   resources:
     - certificatesigningrequests
   verbs:
+    - create
     - get
     - list
     - watch