fix: add bind and escalate verbs to RBAC for Helm chart installation

[vrdc-sap]

Description

Changes proposed in this pull request:

• ...
• ...
• ...

Related issue(s)

[hyperspace-insights]

Summary

The following content is AI-generated and provides a summary of the pull request:

⚠️ Warnings:

• Could not get issue kyma-project/gpu#123. Status: 404 - UnknownObjectException

---

Fix: Add bind and escalate Verbs to RBAC for Helm Chart Installation

Bug Fix

🐛 Added missing bind and escalate RBAC verbs required for the controller to properly manage roles and role bindings during Helm chart installation. Without these verbs, the controller cannot grant or delegate permissions it holds, which is necessary when installing Helm charts that create RBAC resources.

Changes

• config/rbac/role.yaml: Added bind and escalate verbs to the rbac.authorization.k8s.io resource group entry covering clusterroles, clusterrolebindings, roles, and rolebindings.
• internal/controller/gpu_controller.go: Updated the +kubebuilder:rbac marker annotation for rbac.authorization.k8s.io resources to include bind and escalate verbs, ensuring the generated RBAC manifest stays in sync with the controller's permission requirements.

---

• 🔄 Regenerate and Update Summary
• ✏️ Insert as PR Description (deletes this comment)
• 🗑️ Delete comment

PR Bot Information

Version: 1.21.0

• GithubContextProvider: fix: remove namespace field from cluster-scoped Gpu sample CR #43
• File Content Strategy: Full file content
• LLM: anthropic--claude-4.6-sonnet
• GithubContextProvider: feat: add helm sdk installer with install, upgrade, and uninstall #33
• Correlation ID: 5989e80c-e091-4f75-82a7-fdcd647590a9
• Event Trigger: pull_request.opened
• Summary Prompt: Default Prompt
• Output Template: Default Template

[hyperspace-insights]

⚠️ Warnings:

• Could not get issue kyma-project/gpu#123. Status: 404 - UnknownObjectException

---

The PR adds bind and escalate verbs to the RBAC ClusterRole for rbac.authorization.k8s.io resources, but the existing comment in gpu_controller.go (lines 84–89) explicitly and at length justifies not granting these verbs — making the comment directly contradictory to the change. That stale/misleading documentation must be updated before this can be merged cleanly.

PR Bot Information

Version: 1.21.0

• File Content Strategy: Full file content
• LLM: anthropic--claude-4.6-sonnet
• Correlation ID: 5989e80c-e091-4f75-82a7-fdcd647590a9
• Event Trigger: pull_request.opened
• Agent Instructions:
  • CLAUDE.md