diff --git a/deploy/operator.yaml b/deploy/operator.yaml
index e7f9db4f..c5ca5b8d 100644
--- a/deploy/operator.yaml
+++ b/deploy/operator.yaml
@@ -63,6 +63,14 @@ rules:
   - starrockswarehouses
   verbs:
   - '*'
+# when deploying to OpenShift, the following permission is also necessary
+- apiGroups:
+  - starrocks.com
+  resources:
+  - starrocksclusters/finalizers
+  - starrockswarehouses/finalizers
+  verbs:
+  - update
 - apiGroups:
   - starrocks.com
   resources:
diff --git a/helm-charts/charts/kube-starrocks/charts/operator/templates/clusterrole.yaml b/helm-charts/charts/kube-starrocks/charts/operator/templates/clusterrole.yaml
index f1597751..ecc782c7 100644
--- a/helm-charts/charts/kube-starrocks/charts/operator/templates/clusterrole.yaml
+++ b/helm-charts/charts/kube-starrocks/charts/operator/templates/clusterrole.yaml
@@ -51,6 +51,14 @@ rules:
   - starrockswarehouses
   verbs:
   - '*'
+# when deploying to OpenShift, the following permission is also necessary
+- apiGroups:
+  - starrocks.com
+  resources:
+  - starrocksclusters/finalizers
+  - starrockswarehouses/finalizers
+  verbs:
+  - update
 - apiGroups:
   - starrocks.com
   resources:
diff --git a/helm-charts/charts/kube-starrocks/charts/operator/templates/role.yaml b/helm-charts/charts/kube-starrocks/charts/operator/templates/role.yaml
index fd1e39d5..a1455cb7 100644
--- a/helm-charts/charts/kube-starrocks/charts/operator/templates/role.yaml
+++ b/helm-charts/charts/kube-starrocks/charts/operator/templates/role.yaml
@@ -52,6 +52,14 @@ rules:
   - starrockswarehouses
   verbs:
   - '*'
+# when deploying to OpenShift, the following permission is also necessary
+- apiGroups:
+  - starrocks.com
+  resources:
+  - starrocksclusters/finalizers
+  - starrockswarehouses/finalizers
+  verbs:
+  - update
 - apiGroups:
   - starrocks.com
   resources: