diff --git a/src/main/java/de/ozgcloud/operator/keycloak/client/OzgKeycloakClientSpec.java b/src/main/java/de/ozgcloud/operator/keycloak/client/OzgKeycloakClientSpec.java
index 6815ce09b0a88c185e0227281e0d0826de95ac12..e7b8353d9e5eece563ac397ec4a991514b4cb70c 100644
--- a/src/main/java/de/ozgcloud/operator/keycloak/client/OzgKeycloakClientSpec.java
+++ b/src/main/java/de/ozgcloud/operator/keycloak/client/OzgKeycloakClientSpec.java
@@ -23,6 +23,7 @@
  */
 package de.ozgcloud.operator.keycloak.client;
 
+import java.util.ArrayList;
 import java.util.List;
 import java.util.Map;
 
@@ -56,10 +57,12 @@ class OzgKeycloakClientSpec {
 	private List<String> webOrigins;
 
 	@JsonProperty("client_roles")
-	private List<ClientRole> clientRoles;
+	@Builder.Default
+	private List<ClientRole> clientRoles = new ArrayList<>();
 
 	@JsonProperty("protocol_mappers")
-	private List<ProtocolMapper> protocolMappers;
+	@Builder.Default
+	private List<ProtocolMapper> protocolMappers = new ArrayList<>();
 
 	@Getter
 	@Setter