diff --git a/charts/icinga-stack/tests/icinga-kubernetes_clusterrolebinding_test.yaml b/charts/icinga-stack/tests/icinga-kubernetes_clusterrolebinding_test.yaml
new file mode 100644
index 0000000..4c64eb0
--- /dev/null
+++ b/charts/icinga-stack/tests/icinga-kubernetes_clusterrolebinding_test.yaml
@@ -0,0 +1,36 @@
+suite: "[Icinga Kubernetes] ClusterRoleBinding creation"
+templates:
+  - ../charts/icinga-kubernetes/templates/clusterrolebinding.yaml
+tests:
+  - it: creates a ClusterRoleBinding if enabled
+    values:
+      - required_values.yaml
+    set:
+      icinga-kubernetes:
+        rbac:
+          create: true
+    release:
+      name: my-icinga
+    asserts:
+      - containsDocument:
+          kind: ClusterRoleBinding
+          apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
+      - equal:
+          path: metadata.name
+          value: {{ include "icinga-kubernetes.serviceAccountName" . }}
+      - equal:
+          path: roleRef.apiGroup
+          value: rbac.authorization.k8s.io
+      - equal:
+          path: roleRef.Kind
+          value: ClusterRole
+      - equal:
+          path: roleRef.name
+          value: {{ include "common.names.fullname.namespace" . }}
+      - contains:
+          path: subjects
+          content:
+            kind: ServiceAccount
+            name: {{ include "icinga-kubernetes.serviceAccountName" . }}
+            namespace: {{ include "common.names.namespace" . | quote }}
+