diff --git a/CHANGELOG.md b/CHANGELOG.md
index fe215a72..9cca7a71 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@ All notable changes to this project will be documented in this file.
 ### Added
 
 - The associated configuration is now logged for each issued secret ([#413]).
+- Chore: Upgrade csi-provisioner to 5.0.1 and csi-node-driver-registrar to 2.11.1 ([#455])
 
 ### Changed
 
@@ -38,6 +39,7 @@ All notable changes to this project will be documented in this file.
 [#403]: https://github.com/stackabletech/secret-operator/pull/403
 [#413]: https://github.com/stackabletech/secret-operator/pull/413
 [#440]: https://github.com/stackabletech/secret-operator/pull/440
+[#455]: https://github.com/stackabletech/secret-operator/pull/455
 [#467]: https://github.com/stackabletech/secret-operator/pull/467
 [#468]: https://github.com/stackabletech/secret-operator/pull/468
 [#470]: https://github.com/stackabletech/secret-operator/pull/470
diff --git a/deploy/helm/secret-operator/templates/roles.yaml b/deploy/helm/secret-operator/templates/roles.yaml
index edb6ef01..379c90ed 100644
--- a/deploy/helm/secret-operator/templates/roles.yaml
+++ b/deploy/helm/secret-operator/templates/roles.yaml
@@ -26,6 +26,7 @@ rules:
       - get
       - list
       - watch
+      - patch
       - create
       - delete
   - apiGroups:
diff --git a/deploy/helm/secret-operator/values.yaml b/deploy/helm/secret-operator/values.yaml
index e723249c..452b69ff 100644
--- a/deploy/helm/secret-operator/values.yaml
+++ b/deploy/helm/secret-operator/values.yaml
@@ -20,7 +20,7 @@ secretMigrationJob:
 csiProvisioner:
   image:
     repository: docker.stackable.tech/k8s/sig-storage/csi-provisioner
-    tag: v4.0.1
+    tag: v5.0.1
     pullPolicy: IfNotPresent
   resources:
     requests:
@@ -32,7 +32,7 @@ csiProvisioner:
 csiNodeDriverRegistrar:
   image:
     repository: docker.stackable.tech/k8s/sig-storage/csi-node-driver-registrar
-    tag: v2.10.1
+    tag: v2.11.1
     pullPolicy: IfNotPresent
   resources:
     requests: