diff --git a/hack/install-e2e-dependencies.sh b/hack/install-e2e-dependencies.sh
index 6ddd3cf86..8cc41249d 100755
--- a/hack/install-e2e-dependencies.sh
+++ b/hack/install-e2e-dependencies.sh
@@ -37,3 +37,12 @@ if ! retry TIMEOUT=300 kubectl get nodes; then
     echo "ERROR: Timeout waiting for Minikube to be ready"
     exit 1
 fi
+
+# Fix kube-dns RBAC issues.
+# Allow kube-dns and other kube-system services full access to the API.
+# See:
+# * https://github.com/kubernetes/minikube/issues/1734
+# * https://github.com/kubernetes/minikube/issues/1722
+kubectl create clusterrolebinding cluster-admin:kube-system \
+        --clusterrole=cluster-admin \
+        --serviceaccount=kube-system:default
diff --git a/hack/prepare-e2e.sh b/hack/prepare-e2e.sh
index 4397ddb03..276db445c 100755
--- a/hack/prepare-e2e.sh
+++ b/hack/prepare-e2e.sh
@@ -11,26 +11,6 @@ apiVersion: v1
 kind: List
 items:
 
-### Fix kube-dns RBAC issues ###
-# Create a ServiceAccount for kube-dns to use
-- apiVersion: v1
-  kind: ServiceAccount
-  metadata:
-    name: kube-dns
-    namespace: kube-system
-- apiVersion: rbac.authorization.k8s.io/v1beta1
-  kind: ClusterRoleBinding
-  metadata:
-    name: system:kube-dns
-  roleRef:
-    apiGroup: rbac.authorization.k8s.io
-    kind: ClusterRole
-    name: system:kube-dns
-  subjects:
-  - kind: ServiceAccount
-    name: default
-    namespace: kube-system
-
 ### Tiller ###
 # Create a ServiceAccount for tiller to use
 - apiVersion: v1