diff --git a/jsonnetfile.lock.json b/jsonnetfile.lock.json
index 9dd9dce63d20d8b83eb8e7387dec063acea5c583..ffc71f1c416b8ae3e3e3f949dc3f73e3ae438f50 100644
--- a/jsonnetfile.lock.json
+++ b/jsonnetfile.lock.json
@@ -8,7 +8,7 @@
                     "subdir": "jsonnet/kube-prometheus"
                 }
             },
-            "version": "0bc30832d0c7fce4cab6b91eb986cd7c0805f66c"
+            "version": "daf2e76bc6615ca264d424203ca1584da7cad36e"
         },
         {
             "name": "ksonnet",
diff --git a/manifests/kube-state-metrics-clusterRole.yaml b/manifests/kube-state-metrics-clusterRole.yaml
index b939df6843ac424b2adfb3863d9f1227a41c1003..9b96af3cc2b6c6013c52b825bd092845f6279571 100644
--- a/manifests/kube-state-metrics-clusterRole.yaml
+++ b/manifests/kube-state-metrics-clusterRole.yaml
@@ -27,6 +27,7 @@ rules:
   - daemonsets
   - deployments
   - replicasets
+  - ingresses
   verbs:
   - list
   - watch
@@ -74,3 +75,10 @@ rules:
   verbs:
   - list
   - watch
+- apiGroups:
+  - certificates.k8s.io
+  resources:
+  - certificatesigningrequests
+  verbs:
+  - list
+  - watch