diff --git a/pkg/cluster/connection_pooler.go b/pkg/cluster/connection_pooler.go
index ac4ce67d8..0f4d231f1 100644
--- a/pkg/cluster/connection_pooler.go
+++ b/pkg/cluster/connection_pooler.go
@@ -320,6 +320,18 @@ func (c *Cluster) generateConnectionPoolerPodTemplate(role PostgresRole) (
 	}
 	envVars = append(envVars, c.getConnectionPoolerEnvVars()...)
 
+	infraRolesList := make([]string, 0)
+	for infraRoleName := range c.Config.InfrastructureRoles {
+		infraRolesList = append(infraRolesList, infraRoleName)
+	}
+
+	if len(infraRolesList) > 0 {
+		envVars = append(envVars, v1.EnvVar{
+			Name:  "INFRASTRUCTURE_ROLES_LIST",
+			Value: strings.Join(infraRolesList, ","),
+		})
+	}
+
 	poolerContainer := v1.Container{
 		Name:            connectionPoolerContainer,
 		Image:           effectiveDockerImage,
diff --git a/pooler/pgbouncer.ini.tmpl b/pooler/pgbouncer.ini.tmpl
index 5acf37016..9b3c509d8 100644
--- a/pooler/pgbouncer.ini.tmpl
+++ b/pooler/pgbouncer.ini.tmpl
@@ -8,11 +8,12 @@ postgres = host=$PGHOST port=$PGPORT auth_user=$PGUSER
 pool_mode = $CONNECTION_POOLER_MODE
 listen_port = $CONNECTION_POOLER_PORT
 listen_addr = *
-auth_type = md5
-auth_file = /etc/pgbouncer/auth_file.txt
-auth_dbname = postgres
 admin_users = $PGUSER
+stats_users = $INFRASTRUCTURE_ROLES
+auth_dbname = postgres
+auth_file = /etc/pgbouncer/auth_file.txt
 auth_query = SELECT * FROM $PGSCHEMA.user_lookup($1)
+auth_type = md5
 logfile = /var/log/pgbouncer/pgbouncer.log
 pidfile = /var/run/pgbouncer/pgbouncer.pid