diff --git a/examples/rbd/plugin-deploy.sh b/examples/rbd/plugin-deploy.sh
index 06f853e48..ea96f2b9d 100755
--- a/examples/rbd/plugin-deploy.sh
+++ b/examples/rbd/plugin-deploy.sh
@@ -1,15 +1,33 @@
 #!/bin/bash
 
 deployment_base="${1}"
+shift
+kms_base="${1}"
 
-if [[ -z $deployment_base ]]; then
+if [[ -z "${deployment_base}" ]]; then
 	deployment_base="../../deploy/rbd/kubernetes"
 fi
 
-cd "$deployment_base" || exit 1
+pushd "${deployment_base}" >/dev/null || exit 1
 
 objects=(csi-provisioner-rbac csi-nodeplugin-rbac csi-config-map csi-rbdplugin-provisioner csi-rbdplugin)
 
 for obj in "${objects[@]}"; do
-	kubectl create -f "./$obj.yaml"
+	kubectl create -f "./${obj}.yaml"
 done
+
+popd >/dev/null || exit 1
+
+if [[ -z "${kms_base}" ]]; then
+	kms_base="../kms/vault"
+fi
+
+pushd "${kms_base}" >/dev/null || exit 1
+
+objects=(vault csi-vaulttokenreview-rbac kms-config)
+
+for obj in "${objects[@]}"; do
+	kubectl create -f "./${obj}.yaml"
+done
+
+popd >/dev/null || exit 1