diff --git a/roles/network_plugin/calico/templates/calico-apiserver.yml.j2 b/roles/network_plugin/calico/templates/calico-apiserver.yml.j2
index 3af74c74acc..24293442eea 100644
--- a/roles/network_plugin/calico/templates/calico-apiserver.yml.j2
+++ b/roles/network_plugin/calico/templates/calico-apiserver.yml.j2
@@ -162,6 +162,7 @@ rules:
   - felixconfigurations
   - kubecontrollersconfigurations
   - ippools
+  - ipamconfigs
   - ipreservations
   - ipamblocks
   - blockaffinities