diff --git a/jsonnet/kube-prometheus/components/grafana.libsonnet b/jsonnet/kube-prometheus/components/grafana.libsonnet
index a89e170e..beca7a0c 100644
--- a/jsonnet/kube-prometheus/components/grafana.libsonnet
+++ b/jsonnet/kube-prometheus/components/grafana.libsonnet
@@ -100,7 +100,16 @@ function(params)
                 readOnlyRootFilesystem: true,
                 capabilities: { drop: ['ALL'] },
               },
+              volumeMounts+: [{
+                mountPath: '/tmp',
+                name: 'tmp-plugins',
+                readOnly: false,
+              }],
             }, super.containers),
+            volumes+: [{
+              name: 'tmp-plugins',
+              emptyDir: {},
+            }],
           },
         },
       },
diff --git a/manifests/grafana-deployment.yaml b/manifests/grafana-deployment.yaml
index 0a1bbbd2..c44de981 100644
--- a/manifests/grafana-deployment.yaml
+++ b/manifests/grafana-deployment.yaml
@@ -137,6 +137,9 @@ spec:
         - mountPath: /etc/grafana
           name: grafana-config
           readOnly: false
+        - mountPath: /tmp
+          name: tmp-plugins
+          readOnly: false
       nodeSelector:
         kubernetes.io/os: linux
       securityContext:
@@ -228,3 +231,5 @@ spec:
       - name: grafana-config
         secret:
           secretName: grafana-config
+      - emptyDir: {}
+        name: tmp-plugins