diff --git a/ansible/roles/traffic-engine/files/sudoers.d/00-kubconfig b/ansible/roles/traffic-engine/files/sudoers.d/00-kubconfig
new file mode 100644
index 00000000..48605fea
--- /dev/null
+++ b/ansible/roles/traffic-engine/files/sudoers.d/00-kubconfig
@@ -0,0 +1 @@
+Defaults    env_keep += "KUBECONFIG"
diff --git a/ansible/roles/traffic-engine/tasks/main.yml b/ansible/roles/traffic-engine/tasks/main.yml
index f3d9c6c4..dc95e331 100644
--- a/ansible/roles/traffic-engine/tasks/main.yml
+++ b/ansible/roles/traffic-engine/tasks/main.yml
@@ -39,3 +39,8 @@
   copy:
     src: "{{ role_path }}/files/tmpfiles.d/traffic-engine.conf"
     dest: /usr/lib/tmpfiles.d/
+
+- name: "install sudoers.d for sudo helm"
+  copy:
+    src: "{{ role_path }}/files/sudoers.d/00-kubconfig"
+    dest: /etc/sudoers.d/