diff --git a/_chart_installers.sh b/_chart_installers.sh
index e84353ef..8736c63f 100755
--- a/_chart_installers.sh
+++ b/_chart_installers.sh
@@ -288,7 +288,8 @@ function install_chart_arc {
     if kubectl get crds virtualmachines.kubevirt.io >/dev/null; then
         kubectl apply -f resources/kubevirt-runner/rbac.yml -n "$namespace"
         kubectl create rolebinding kubevirt-actions-runner -n "$namespace" --serviceaccount "${namespace}:kubevirt-actions-runner" --role=kubevirt-actions-runner || :
-        kubectl create rolebinding "${namespace}-cdi-cloner" --serviceaccount "${namespace}:default" --clusterrole=cdi-cloner || :
+        kubectl create rolebinding "${namespace}-default-cdi-cloner" --serviceaccount "${namespace}:default" --clusterrole=cdi-cloner || :
+        kubectl create rolebinding "${namespace}-kubevirt-actions-runner-cdi-cloner" --serviceaccount "${namespace}:kubevirt-actions-runner" --clusterrole=cdi-cloner || :
         kubectl apply -f resources/kubevirt-runner/vm.yml -n "$namespace"
         KRD_CHART_FILE="helm/arc/ubuntu-jammy-values.yml" _install_chart vm-self-hosted oci://ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set "$namespace" "false"
     fi
diff --git a/helm/arc/ubuntu-jammy-values.yml b/helm/arc/ubuntu-jammy-values.yml
index f8b58a0f..c6792797 100644
--- a/helm/arc/ubuntu-jammy-values.yml
+++ b/helm/arc/ubuntu-jammy-values.yml
@@ -12,7 +12,7 @@ template:
     serviceAccountName: kubevirt-actions-runner
     containers:
       - name: runner
-        image: ghcr.io/zhaofengli/kubevirt-actions-runner:latest
+        image: electrocucaracha/kubevirt-actions-runner:latest
         command: []
         env:
           - name: KUBEVIRT_VM_TEMPLATE
diff --git a/resources/kubevirt-runner/rbac.yml b/resources/kubevirt-runner/rbac.yml
index 1f487223..c3ed4ee0 100644
--- a/resources/kubevirt-runner/rbac.yml
+++ b/resources/kubevirt-runner/rbac.yml
@@ -23,6 +23,9 @@ rules:
   - apiGroups: ["kubevirt.io"]
     resources: ["virtualmachineinstances"]
     verbs: ["get", "watch", "list", "create", "delete"]
+  - apiGroups: ["cdi.kubevirt.io"]
+    resources: ["datavolumes"]
+    verbs: ["get", "watch", "list", "create", "delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole