From ae6953d950761426c63b42d1244bf99b09ae2a0c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Amand?= <jeremy.amand@digits.schwarz>
Date: Fri, 22 May 2026 10:11:24 +0200
Subject: [PATCH] fix: Add nlb.admin for exposure integration test

---
 test/project-wrapper/sdk/util.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/test/project-wrapper/sdk/util.go b/test/project-wrapper/sdk/util.go
index 796e3aeb..5db3a38b 100644
--- a/test/project-wrapper/sdk/util.go
+++ b/test/project-wrapper/sdk/util.go
@@ -8,6 +8,7 @@ import (
 var ServiceAccountRoles = []string{
 	"iaas.isolated-network.admin", // required by the infra controller
 	"iaas.network.admin",          // required by the infra controller
+	"nlb.admin",                   // required by the SelfHostedShootExposure controller
 }
 
 func GetMembersForRoles(subject string, roles set.Set[string]) []authorization.Member {