diff --git a/test/extended/authorization/rbac/groups_default_rules.go b/test/extended/authorization/rbac/groups_default_rules.go
index <HASH>..<HASH> 100644
--- a/test/extended/authorization/rbac/groups_default_rules.go
+++ b/test/extended/authorization/rbac/groups_default_rules.go
@@ -93,7 +93,7 @@ var (
 
 		// this is from upstream kube
 		rbacv1helpers.NewRule("get").URLs(
-			"/healthz",
+			"/healthz", "/livez",
 			"/version",
 			"/version/",
 		).RuleOrDie(),
extended: add /livez endpoint to RBAC coverage test