From 18c94da154a68b3cadb381214f5ffaf943d1e00a Mon Sep 17 00:00:00 2001 From: Gerrit Date: Tue, 11 Nov 2025 15:12:43 +0100 Subject: [PATCH] Reduce RBAC for event recorder. --- api/v2/helper/seed_access.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api/v2/helper/seed_access.go b/api/v2/helper/seed_access.go index ec17367..ab7fd8b 100644 --- a/api/v2/helper/seed_access.go +++ b/api/v2/helper/seed_access.go @@ -208,7 +208,7 @@ func ensureShootRBAC(ctx context.Context, shootConfig *rest.Config, shootNamespa { APIGroups: []string{""}, Resources: []string{"events"}, - Verbs: []string{"*"}, + Verbs: []string{"create", "patch"}, }, { APIGroups: []string{"apiextensions.k8s.io", ""},