fix: karpenter permission issue

Author: Code2Life

charts/tensor-fusion/templates/rbac.yaml

@@ -177,22 +177,9 @@ rules:
 - apiGroups:
   - karpenter.sh
   resources:
-  - nodeclaims
-  verbs:
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - karpenter.*
-  resources:
   - '*'
   verbs:
-  - get
-  - list
-  - watch
+  - '*'
 - apiGroups:
     - authentication.k8s.io
   resources:

config/rbac/role.yaml

@@ -125,6 +125,12 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - karpenter.sh
+  resources:
+  - '*'
+  verbs:
+  - '*'
 - apiGroups:
   - tensor-fusion.ai
   resources:

internal/controller/gpunode_controller.go

@@ -58,6 +58,7 @@ type GPUNodeReconciler struct {
 // +kubebuilder:rbac:groups=tensor-fusion.ai,resources=gpunodes/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups=tensor-fusion.ai,resources=gpunodes/finalizers,verbs=update
 // +kubebuilder:rbac:groups=coordination.k8s.io,resources=leases,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=karpenter.sh,resources=*,verbs=*
 
 // Reconcile GPU nodes
 func (r *GPUNodeReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {