diff --git a/deploy/1.clusterrole-and-binding.yaml b/deploy/1.clusterrole-and-binding.yaml
index 39b376a..85b311b 100644
--- a/deploy/1.clusterrole-and-binding.yaml
+++ b/deploy/1.clusterrole-and-binding.yaml
@@ -20,10 +20,10 @@ rules:
   resources: ["configmaps", "events", "ingresses/status", "services/status"]
   verbs: ["get", "list", "watch", "update", "create", "patch"]
 - apiGroups: ["gateway.networking.k8s.io"]
-  resources: ["gatewayclasses", "gateways", "httproutes"]
+  resources: ["gatewayclasses", "gateways", "httproutes", "referencegrants"]
   verbs: ["get", "list", "watch"]
 - apiGroups: ["gateway.networking.k8s.io"]
-  resources: ["gatewayclasses/status"]
+  resources: ["gatewayclasses/status", "gateways/status", "httproutes/status", "referencegrants/status"]
   verbs: ["get", "list", "watch", "update"]
 
 ---
diff --git a/deploy/3.deploy-bigip-kubernetes-gateway-controller.yaml b/deploy/3.deploy-bigip-kubernetes-gateway-controller.yaml
index 55ced80..6ee40eb 100644
--- a/deploy/3.deploy-bigip-kubernetes-gateway-controller.yaml
+++ b/deploy/3.deploy-bigip-kubernetes-gateway-controller.yaml
@@ -1,14 +1,5 @@
 ---
 
-apiVersion: v1
-kind: Secret
-metadata:
-  name: bigip-login
-  namespace: kube-system
-data:
-  password: UEBzc3cwcmQxMjM=   # base64 encoded
-type: Opaque
-
 apiVersion: v1
 type: kubernetes.io/tls
 kind: Secret
@@ -119,6 +110,17 @@ webhooks:
 
 ---
 
+apiVersion: v1
+kind: Secret
+metadata:
+  name: bigip-login
+  namespace: kube-system
+data:
+  password: UEBzc3cwcmQxMjM=   # base64 encoded
+type: Opaque
+
+---
+
 apiVersion: v1
 kind: ConfigMap
 metadata:
diff --git a/tests/systest/.gitignore b/tests/systest/.gitignore
new file mode 100644
index 0000000..ed5eecc
--- /dev/null
+++ b/tests/systest/.gitignore
@@ -0,0 +1 @@
+test-config.yaml
\ No newline at end of file
diff --git a/tests/systest/controllers_basics_test.go b/tests/systest/controllers_basics_test.go
index 3831da3..8970564 100644
--- a/tests/systest/controllers_basics_test.go
+++ b/tests/systest/controllers_basics_test.go
@@ -131,7 +131,7 @@ func checkResourcesAsExpected() {
 		Expect(err).To(Succeed())
 		// slog.Infof("members: %d", len(members))
 		return err == nil && len(members) == svcVars["replicas"].(int)
-	}).WithContext(ctx).ProbeEvery(time.Millisecond * 500).WithTimeout(time.Second * 50).Should(BeTrue())
+	}).WithContext(ctx).ProbeEvery(time.Millisecond * 500).WithTimeout(time.Second * 120).Should(BeTrue())
 
 	slog.Infof("pool is created as expected")
 	slog.Infof("finished bigip resources checking")
diff --git a/tests/systest/controllers_resource_order_test.go b/tests/systest/controllers_resource_order_test.go
index 95efe1b..8600912 100644
--- a/tests/systest/controllers_resource_order_test.go
+++ b/tests/systest/controllers_resource_order_test.go
@@ -9,7 +9,7 @@ import (
 	. "github.com/onsi/gomega"
 )
 
-var _ = Describe("Controllers random resource list", Ordered, func() {
+var _ = Describe("Controllers random resource list", func() {
 
 	BeforeEach(func() {
 		yamls := []string{
diff --git a/tests/systest/test-config.yaml b/tests/systest/test-config.yaml.tmpl
similarity index 100%
rename from tests/systest/test-config.yaml
rename to tests/systest/test-config.yaml.tmpl
diff --git a/tests/systest/webhooks_gatewayclass_test.go b/tests/systest/webhooks_gatewayclass_test.go
index 91417e8..da2a669 100644
--- a/tests/systest/webhooks_gatewayclass_test.go
+++ b/tests/systest/webhooks_gatewayclass_test.go
@@ -8,7 +8,7 @@ import (
 	. "github.com/onsi/gomega"
 )
 
-var _ = Describe("Webhhooks Validating GatewayClass", Ordered, func() {
+var _ = PDescribe("Webhhooks Validating GatewayClass", Ordered, func() {
 
 	BeforeAll(func() {
 		for _, yaml := range []string{