From 494754d8ea4eccd6d02318c25a4f22d1605cc0a8 Mon Sep 17 00:00:00 2001
From: mreiger <michael@rauschpfeife.net>
Date: Thu, 27 Feb 2025 12:19:28 +0100
Subject: [PATCH] allow access to shoot configmaps for FQDN status

---
 .gitignore                   | 1 +
 api/v2/helper/seed_access.go | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/.gitignore b/.gitignore
index 4071b56..cf6ff81 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 bin/
 .vscode
 cover.out
+*~
diff --git a/api/v2/helper/seed_access.go b/api/v2/helper/seed_access.go
index 822b7ae..adb2831 100644
--- a/api/v2/helper/seed_access.go
+++ b/api/v2/helper/seed_access.go
@@ -206,6 +206,11 @@ func ensureShootRBAC(ctx context.Context, shootConfig *rest.Config, shootNamespa
 				Resources: []string{"pods", "secrets", "services"},
 				Verbs:     []string{"get", "list", "watch"},
 			},
+			{
+				APIGroups: []string{""},
+				Resources: []string{"configmaps"},
+				Verbs:     []string{"get", "create", "update", "list", "watch"},
+			},
 			{
 				APIGroups: []string{""},
 				Resources: []string{"events"},