After you upgrade to Ocean Controller version 2 in AKS, EKS, or GKE, you might notice many SelfSubjectAccessReview requests hitting your API server. These often appear in SIEM alerts and can look suspicious at first. This behavior is normal and expected.
Why you see frequent SelfSubjectAccessReview requests
Ocean Controller version 2 validates access to the custom resources you allowed through the controller’s cluster role. These resources might include objects such as Argo Rollouts or VerticalPodAutoscaler objects for rightsizing.
The controller lists these resources and checks permissions when it starts up. It continues to repeat these checks regularly while running. This activity ensures the controller can read and operate on all the resources you configured it to manage.
Was this helpful?
Related Articles
Why you can't upgrade the Ocean Controller version 2 using Helm 10Number of Views Can you use a static endpoint with Ocean Controller version 2? 6Number of Views How long Ocean Controller logs are kept 4Number of Views Ensuring the Ocean Controller is always scheduled 4Number of Views Minimum permissions for a programmatic token used with an Ocean cluster controller 8Number of Views
Revenera Assistant
Online
Hi, I am Reva - Ask me anything.
Updates
No new updates
Chat
Home
Updates
/**/
Thanks for the feedback!
Your feedback has been saved.Rate this response:
1
2
3
4
5
Add Additional feedback ( Optional )
0/240
English
English
Language changed successfully
Something went wrong
Email sent successfully
Something went wrong
Case create successfully
Are you sure you want to cancel
the case creation?
Please select a product to submit the case.
Please select a product version to submit the case.
0/255
Upload Attachment
File Upload
Maximum file
size allowed is 3 MB.
File type
not supported.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files
(.csv) Speadsheets (.xlsx, .xls)
Are you sure you want to cancel the case creation?
Case closed successfully
File Upload
Maximum file size allowed is 3 MB.
File type not supported.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files
(.csv) Speadsheets (.xlsx, .xls)
Are you sure you want to close this case
| Products | Region | Phone Numbers |
|---|---|---|
| FlexNet Operations FlexNet Embedded FlexNet Publisher FlexNet Connect FlexNet Code Insight InstallAnywhere InstallShield |
North America * |
+1 630-332-2513 (toll) +1 877-279-2853 (toll-free in North America) |
| Europe * |
+44 1925 944367 (toll) +44 800 047 8642 (toll-free in Europe) |
|
| Japan * | +81 3-4540-5335 (select option 2) | |
| Australia * |
+61 3 9895 2177 +61 1800 560 603 (toll-free in Australia) |
|
|
Usage Intelligence (formerly
Revulytics) Compliance Intelligence |
Please use the Case Portal to submit your support ticket or reach out to your Revenera contact. | |
File Upload
Maximum file
size allowed is 3 MB.
File type
not supported.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files
(.csv) Speadsheets (.xlsx, .xls)
Revenera Assistant
© 2026 Flexera Software. All Rights Reserved.
Case id: 00001065
Activity: Status change: 2 hours ago