diff --git a/deploy/kube/manifests/agent-sandbox.yaml b/deploy/kube/manifests/agent-sandbox.yaml
index c7d671bce0..63d7c6845d 100644
--- a/deploy/kube/manifests/agent-sandbox.yaml
+++ b/deploy/kube/manifests/agent-sandbox.yaml
@@ -4111,4 +4111,10 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - agents.x-k8s.io
+  resources:
+  - sandboxes/finalizers
+  verbs:
+  - update
 ---