diff --git a/deploy/charts/external-secrets/templates/cert-controller-rbac.yaml b/deploy/charts/external-secrets/templates/cert-controller-rbac.yaml
index 83e49f0ae..84a0c110b 100644
--- a/deploy/charts/external-secrets/templates/cert-controller-rbac.yaml
+++ b/deploy/charts/external-secrets/templates/cert-controller-rbac.yaml
@@ -22,6 +22,8 @@ rules:
     - "validatingwebhookconfigurations"
     verbs:
     - "list"
+    - "watch"
+    - "get"
   - apiGroups:
     - "admissionregistration.k8s.io"
     resources:
@@ -30,8 +32,6 @@ rules:
     - "secretstore-validate"
     - "externalsecret-validate"
     verbs:
-    - "get"
-    - "watch"
     - "update"
     - "patch"
   - apiGroups: