diff --git a/deploy/addons/kong/kong-ingress-controller.yaml.tmpl b/deploy/addons/kong/kong-ingress-controller.yaml.tmpl
index 39180af7f4..499880b5c4 100644
--- a/deploy/addons/kong/kong-ingress-controller.yaml.tmpl
+++ b/deploy/addons/kong/kong-ingress-controller.yaml.tmpl
@@ -1385,6 +1385,12 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - list
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -1782,7 +1788,7 @@ spec:
           value: /dev/stderr
         - name: KONG_ROUTER_FLAVOR
           value: traditional
-        image: {{.CustomRegistries.Kong | default .ImageRepository | default .Registries.Kong}}{{.Images.Kong}}               
+        image: {{.CustomRegistries.Kong | default .ImageRepository | default .Registries.Kong}}{{.Images.Kong}}
         lifecycle:
           preStop:
             exec:
@@ -1846,4 +1852,4 @@ kind: IngressClass
 metadata:
   name: kong
 spec:
-  controller: ingress-controllers.konghq.com/kong
\ No newline at end of file
+  controller: ingress-controllers.konghq.com/kong