diff --git a/cluster/charts/rook-ceph/templates/clusterrole.yaml b/cluster/charts/rook-ceph/templates/clusterrole.yaml
index 2c7533082..e2d99d40e 100644
--- a/cluster/charts/rook-ceph/templates/clusterrole.yaml
+++ b/cluster/charts/rook-ceph/templates/clusterrole.yaml
@@ -281,7 +281,8 @@ rules:
   verbs:
   - get
   - list
-{{- if ((.Values.agent) and .Values.agent.mountSecurityMode) and ne .Values.agent.mountSecurityMode "Any" }}
+# Use a default dict to avoid 'can't give argument to non-function' errors from text/template
+{{- if ne ((.Values.agent | default (dict "mountSecurityMode" "")).mountSecurityMode) "Any" }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1
 kind: ClusterRole