diff --git a/charts/internal/control-plane/templates/firewall-controller-manager.yaml b/charts/internal/control-plane/templates/firewall-controller-manager.yaml
index b63f70e9..734c3cb7 100644
--- a/charts/internal/control-plane/templates/firewall-controller-manager.yaml
+++ b/charts/internal/control-plane/templates/firewall-controller-manager.yaml
@@ -68,6 +68,25 @@ rules:
   - update
   - patch
   - create
+- apiGroups:
+  - extensions.gardener.cloud
+  resources:
+  - infrastructures
+  - extensions
+  verbs:
+  - get
+- apiGroups:
+  - extensions.gardener.cloud
+  resources:
+  - infrastructures/status
+  verbs:
+  - patch
+- apiGroups:
+  - extensions.gardener.cloud
+  resources:
+  - extensions
+  verbs:
+  - update
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1