diff --git a/config/deploy/base.yml b/config/deploy/base.yml
index f7d77f7..5ba014e 100644
--- a/config/deploy/base.yml
+++ b/config/deploy/base.yml
@@ -106,6 +106,7 @@ rules:
   resources:
   - namespaces
   verbs:
+  - delete
   - get
   - list
   - watch
diff --git a/config/deploy/manifests.yaml b/config/deploy/manifests.yaml
index e03dd4b..0cee692 100644
--- a/config/deploy/manifests.yaml
+++ b/config/deploy/manifests.yaml
@@ -395,6 +395,7 @@ rules:
   resources:
   - namespaces
   verbs:
+  - delete
   - get
   - list
   - watch
diff --git a/config/operator/rbac/role.yaml b/config/operator/rbac/role.yaml
index 7057434..2f7476d 100644
--- a/config/operator/rbac/role.yaml
+++ b/config/operator/rbac/role.yaml
@@ -11,6 +11,7 @@ rules:
   resources:
   - namespaces
   verbs:
+  - delete
   - get
   - list
   - watch
diff --git a/pkg/controllers/cleanup/cleanup_controller.go b/pkg/controllers/cleanup/cleanup_controller.go
index af04631..af91bc8 100644
--- a/pkg/controllers/cleanup/cleanup_controller.go
+++ b/pkg/controllers/cleanup/cleanup_controller.go
@@ -95,6 +95,7 @@ func parseDuration(expiry string) (*time.Duration, error) {
 }
 
 // +kubebuilder:rbac:groups="",resources=namespaces,verbs=get;list;watch;delete
+
 func (r *ReconcileCleanup) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error) {
 	namespace := corev1.Namespace{}
 	if err := r.Get(ctx, request.NamespacedName, &namespace); err != nil {