diff --git a/class/defaults.yml b/class/defaults.yml
index 91e0ce1..301f99f 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -5,7 +5,7 @@ parameters:
       operator:
         registry: quay.io
         repository: projectsyn/lieutenant-operator
-        version: '1.3.0'
+        version: '1.4.0'
       api:
         registry: docker.io
         repository: projectsyn/lieutenant-api
diff --git a/tests/golden/defaults/lieutenant/lieutenant/10_operator/clusterrole.yaml b/tests/golden/defaults/lieutenant/lieutenant/10_operator/clusterrole.yaml
index 704e39a..e5b7191 100644
--- a/tests/golden/defaults/lieutenant/lieutenant/10_operator/clusterrole.yaml
+++ b/tests/golden/defaults/lieutenant/lieutenant/10_operator/clusterrole.yaml
@@ -8,6 +8,19 @@ metadata:
   name: lieutenant-operator-manager-role
   namespace: lieutenant
 rules:
+  - apiGroups:
+      - ''
+    resources:
+      - secrets
+      - serviceaccounts
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
       - coordination.k8s.io
     resources:
diff --git a/tests/golden/defaults/lieutenant/lieutenant/10_operator/deployment.yaml b/tests/golden/defaults/lieutenant/lieutenant/10_operator/deployment.yaml
index 4f9af84..aeb2e96 100644
--- a/tests/golden/defaults/lieutenant/lieutenant/10_operator/deployment.yaml
+++ b/tests/golden/defaults/lieutenant/lieutenant/10_operator/deployment.yaml
@@ -47,7 +47,7 @@ spec:
               value: foo
             - name: VAULT_SECRET_ENGINE_PATH
               value: kv
-          image: quay.io/projectsyn/lieutenant-operator:1.3.0
+          image: quay.io/projectsyn/lieutenant-operator:1.4.0
           livenessProbe:
             httpGet:
               path: /healthz