diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 31a6d5ca..8767cc4f 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -124,3 +124,9 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - ingresses/finalizers
+  verbs:
+  - update
diff --git a/internal/controller/ingress_controller.go b/internal/controller/ingress_controller.go
index ce582840..5830d9b9 100644
--- a/internal/controller/ingress_controller.go
+++ b/internal/controller/ingress_controller.go
@@ -42,6 +42,7 @@ type IngressReconciler struct {
 }
 
 // +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses,verbs=get;list;watch
+// +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses/finalizers,verbs=update
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.