diff --git a/k8s/infra/crossplane-crds/config/keycloak/provider.yaml b/k8s/infra/crossplane-crds/config/keycloak/provider.yaml
index 6a008a3..8074e77 100644
--- a/k8s/infra/crossplane-crds/config/keycloak/provider.yaml
+++ b/k8s/infra/crossplane-crds/config/keycloak/provider.yaml
@@ -3,4 +3,4 @@ kind: Provider
 metadata:
   name: provider-keycloak
 spec:
-  package: xpkg.upbound.io/crossplane-contrib/provider-keycloak:v1.0.0
+  package: xpkg.upbound.io/crossplane-contrib/provider-keycloak:v1.9.2 # renovate: github-releases=crossplane-contrib/provider-keycloak
diff --git a/k8s/infra/crossplane-crds/config/keycloak/xrd.yaml b/k8s/infra/crossplane-crds/config/keycloak/xrd.yaml
index 9e03693..7f42c62 100644
--- a/k8s/infra/crossplane-crds/config/keycloak/xrd.yaml
+++ b/k8s/infra/crossplane-crds/config/keycloak/xrd.yaml
@@ -35,7 +35,13 @@ spec:
                       - uma_authorization
                       - admin
                       - create-realm
+                      - default-roles-master
                   description: List of realm roles to import from the realm
+                builtinAuthenticationFlows:
+                  type: array
+                  items:
+                    type: string
+                  description: List of authentication flows to import from the realm
                 providerConfigName:
                   type: string
                   description: Name of the provider config to attach to the imported clients/roles
diff --git a/k8s/infra/crossplane-crds/providers/keycloak/default-config.yaml b/k8s/infra/crossplane-crds/providers/keycloak/config.yaml
similarity index 100%
rename from k8s/infra/crossplane-crds/providers/keycloak/default-config.yaml
rename to k8s/infra/crossplane-crds/providers/keycloak/config.yaml
diff --git a/k8s/infra/crossplane-crds/providers/keycloak/kustomization.yaml b/k8s/infra/crossplane-crds/providers/keycloak/kustomization.yaml
index a24e484..6e55eda 100644
--- a/k8s/infra/crossplane-crds/providers/keycloak/kustomization.yaml
+++ b/k8s/infra/crossplane-crds/providers/keycloak/kustomization.yaml
@@ -3,4 +3,4 @@ kind: Kustomization
 
 resources:
   - keycloak-credentials.yaml
-  - default-config.yaml
+  - config.yaml