From 301f8dcc1a1272c92d55df773cadf5d529e4891e Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 19 Mar 2026 02:20:32 +1100
Subject: [PATCH] fix: add NodeFeatureRule and Intel device plugin permissions
 to platform project (#49)

- Add nfd.k8s-sigs.io/NodeFeatureRule for node-feature-discovery
- Add deviceplugin.intel.com/* for Intel device plugins (GpuDevicePlugin, etc.)
- Add cert-manager.io resources (Certificate, Issuer) for Intel device plugins

Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/49
---
 argocd/projects/platform.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/argocd/projects/platform.yaml b/argocd/projects/platform.yaml
index b8d9a93..c537d30 100644
--- a/argocd/projects/platform.yaml
+++ b/argocd/projects/platform.yaml
@@ -50,6 +50,14 @@ spec:
       kind: ValidatingWebhookConfiguration
     - group: 'scheduling.k8s.io'
       kind: PriorityClass
+    - group: 'nfd.k8s-sigs.io'
+      kind: NodeFeatureRule
+    - group: 'deviceplugin.intel.com'
+      kind: '*'
+    - group: 'cert-manager.io'
+      kind: Certificate
+    - group: 'cert-manager.io'
+      kind: Issuer
   namespaceResourceWhitelist:
     - group: '*'
       kind: '*'