diff --git a/voltha-infra/templates/clusterrole.yaml b/voltha-infra/templates/clusterrole.yaml
index 504fafc..ba7a0aa 100644
--- a/voltha-infra/templates/clusterrole.yaml
+++ b/voltha-infra/templates/clusterrole.yaml
@@ -19,5 +19,5 @@
   namespace: {{ .Release.Namespace | quote }}
 rules:
   - apiGroups: [""]
-    resources: ["pods"]
-    verbs: ["get", "list", "watch"]
+    resources: ["pods", "pods/exec"]
+    verbs: ["get", "list", "watch", "create"]
diff --git a/voltha-infra/templates/etcd-periodic-defrag.yaml b/voltha-infra/templates/etcd-periodic-defrag.yaml
new file mode 100644
index 0000000..29b8083
--- /dev/null
+++ b/voltha-infra/templates/etcd-periodic-defrag.yaml
@@ -0,0 +1,44 @@
+---
+
+# Copyright 2021-present Open Networking Foundation
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+{{- if .Values.etcd.defrag.enabled }}
+apiVersion: batch/v1beta1
+kind: CronJob
+metadata:
+  name: etcd-db-defrag
+spec:
+  schedule: {{ .Values.etcd.defrag.schedule | quote }}
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          restartPolicy: OnFailure
+          serviceAccountName: "{{ .Release.Name }}-onos-config-loader-service-account"
+          containers:
+            - name: etcd-db-defrag
+              image: '{{ tpl .Values.images.onos_config_loader.registry . }}{{ tpl .Values.images.onos_config_loader.repository . }}:{{ tpl .Values.images.onos_config_loader.tag . }}'
+              imagePullPolicy: {{ tpl .Values.images.onos_config_loader.pullPolicy . }}
+              command:
+                - /bin/sh
+                - -c
+                - kubectl exec -n  {{ .Release.Namespace }} {{ .Release.Name }}-etcd-0 -- etcdctl defrag --cluster
+              volumeMounts:
+                - name: kube-config-volume
+                  mountPath: /etc/kube
+          volumes:
+            - name: kube-config-volume
+              configMap:
+                name: kube-config
+{{- end -}}