Allow firewall-controller-manager to patch infrastructure egressCIDRs. (

#421)
metal-stack · Sep 11, 2024 · 72051ce · 72051ce
1 parent e812b58
commit 72051ce
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/charts/internal/control-plane/templates/firewall-controller-manager.yaml b/charts/internal/control-plane/templates/firewall-controller-manager.yaml
@@ -68,6 +68,25 @@ rules:
   - update
   - patch
   - create
+- apiGroups:
+  - extensions.gardener.cloud
+  resources:
+  - infrastructures
+  - extensions
+  verbs:
+  - get
+- apiGroups:
+  - extensions.gardener.cloud
+  resources:
+  - infrastructures/status
+  verbs:
+  - patch
+- apiGroups:
+  - extensions.gardener.cloud
+  resources:
+  - extensions
+  verbs:
+  - update
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1