diff --git a/config/crd/bases/servicebinding.io_clusterworkloadresourcemappings.yaml b/config/crd/bases/servicebinding.io_clusterworkloadresourcemappings.yaml
index f9606e7..033109a 100644
--- a/config/crd/bases/servicebinding.io_clusterworkloadresourcemappings.yaml
+++ b/config/crd/bases/servicebinding.io_clusterworkloadresourcemappings.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.16.2
   name: clusterworkloadresourcemappings.servicebinding.io
 spec:
   group: servicebinding.io
diff --git a/config/crd/bases/servicebinding.io_servicebindings.yaml b/config/crd/bases/servicebinding.io_servicebindings.yaml
index 2a64417..19b55bd 100644
--- a/config/crd/bases/servicebinding.io_servicebindings.yaml
+++ b/config/crd/bases/servicebinding.io_servicebindings.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.16.2
   name: servicebindings.servicebinding.io
 spec:
   group: servicebinding.io
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 13199ee..85b3ece 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -5,24 +5,24 @@ metadata:
   name: manager-role
 rules:
 - apiGroups:
-  - admissionregistration.k8s.io
+  - ""
   resources:
-  - mutatingwebhookconfigurations
-  - validatingwebhookconfigurations
+  - events
   verbs:
   - create
+  - delete
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
-  - ""
+  - admissionregistration.k8s.io
   resources:
-  - events
+  - mutatingwebhookconfigurations
+  - validatingwebhookconfigurations
   verbs:
   - create
-  - delete
   - get
   - list
   - patch
diff --git a/config/servicebinding-runtime.yaml b/config/servicebinding-runtime.yaml
index 925fa1d..090cf91 100644
--- a/config/servicebinding-runtime.yaml
+++ b/config/servicebinding-runtime.yaml
@@ -22,7 +22,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.16.2
   name: clusterworkloadresourcemappings.servicebinding.io
 spec:
   group: servicebinding.io
@@ -344,7 +344,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.16.2
   name: servicebindings.servicebinding.io
 spec:
   group: servicebinding.io
@@ -1212,24 +1212,24 @@ metadata:
   name: servicebinding-manager-role
 rules:
 - apiGroups:
-  - admissionregistration.k8s.io
+  - ""
   resources:
-  - mutatingwebhookconfigurations
-  - validatingwebhookconfigurations
+  - events
   verbs:
   - create
+  - delete
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
-  - ""
+  - admissionregistration.k8s.io
   resources:
-  - events
+  - mutatingwebhookconfigurations
+  - validatingwebhookconfigurations
   verbs:
   - create
-  - delete
   - get
   - list
   - patch
diff --git a/hack/controller-gen/go.mod b/hack/controller-gen/go.mod
index c08c5af..094fd9d 100644
--- a/hack/controller-gen/go.mod
+++ b/hack/controller-gen/go.mod
@@ -2,7 +2,7 @@ module github.com/servicebinding/runtime/hack/controller-gen
 
 go 1.22.0
 
-require sigs.k8s.io/controller-tools v0.16.1
+require sigs.k8s.io/controller-tools v0.16.2
 
 require (
 	github.com/fatih/color v1.17.0 // indirect
diff --git a/hack/controller-gen/go.sum b/hack/controller-gen/go.sum
index 2356d59..6198ef3 100644
--- a/hack/controller-gen/go.sum
+++ b/hack/controller-gen/go.sum
@@ -134,8 +134,8 @@ k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
 k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
 k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 h1:pUdcCO1Lk/tbT5ztQWOBi5HBgbBP1J8+AsQnQCKsi8A=
 k8s.io/utils v0.0.0-20240711033017-18e509b52bc8/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-sigs.k8s.io/controller-tools v0.16.1 h1:gvIsZm+2aimFDIBiDKumR7EBkc+oLxljoUVfRbDI6RI=
-sigs.k8s.io/controller-tools v0.16.1/go.mod h1:0I0xqjR65YTfoO12iR+mZR6s6UAVcUARgXRlsu0ljB0=
+sigs.k8s.io/controller-tools v0.16.2 h1:uUFF/AW3phBWPiERvkSNOVct//L427bPS7xGfKi6Tz4=
+sigs.k8s.io/controller-tools v0.16.2/go.mod h1:0I0xqjR65YTfoO12iR+mZR6s6UAVcUARgXRlsu0ljB0=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
 sigs.k8s.io/structured-merge-diff/v4 v4.4.1 h1:150L+0vs/8DA78h1u02ooW1/fFq/Lwr+sGiqlzvrtq4=