diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 111cca4c..53e3559b 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -167,6 +167,18 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - services
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - ""
   resources:
@@ -243,3 +255,15 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - ingresses
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
diff --git a/controllers/flux/minicluster_controller.go b/controllers/flux/minicluster_controller.go
index 4c533f73..f72a34cc 100644
--- a/controllers/flux/minicluster_controller.go
+++ b/controllers/flux/minicluster_controller.go
@@ -76,6 +76,8 @@ func NewMiniClusterReconciler(client client.Client, scheme *runtime.Scheme, rest
 //+kubebuilder:rbac:groups=core,resources=batch,verbs=get;list;watch;create;update;patch;delete;exec
 //+kubebuilder:rbac:groups=core,resources=events,verbs=create;patch
 //+kubebuilder:rbac:groups=core,resources=networks,verbs=create;patch
+//+kubebuilder:rbac:groups=core,resources="services",verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=networking.k8s.io,resources="ingresses",verbs=get;list;watch;create;update;patch;delete
 
 //+kubebuilder:rbac:groups="",resources=events,verbs=create;watch;update
 //+kubebuilder:rbac:groups=batch,resources=jobs,verbs=get;list;watch;create;update;patch;delete;exec