From 6ab9cdc086ef8009263dc415923a08d89720b28c Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 19 Mar 2026 02:18:37 +1100
Subject: [PATCH] fix: add NodeFeatureRule and Intel device plugin permissions
 to platform project

- Add nfd.k8s-sigs.io/NodeFeatureRule for node-feature-discovery
- Add deviceplugin.intel.com/* for Intel device plugins (GpuDevicePlugin, etc.)
- Add cert-manager.io resources (Certificate, Issuer) for Intel device plugins
---
 argocd/projects/platform.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/argocd/projects/platform.yaml b/argocd/projects/platform.yaml
index b8d9a93..c537d30 100644
--- a/argocd/projects/platform.yaml
+++ b/argocd/projects/platform.yaml
@@ -50,6 +50,14 @@ spec:
       kind: ValidatingWebhookConfiguration
     - group: 'scheduling.k8s.io'
       kind: PriorityClass
+    - group: 'nfd.k8s-sigs.io'
+      kind: NodeFeatureRule
+    - group: 'deviceplugin.intel.com'
+      kind: '*'
+    - group: 'cert-manager.io'
+      kind: Certificate
+    - group: 'cert-manager.io'
+      kind: Issuer
   namespaceResourceWhitelist:
     - group: '*'
       kind: '*'