use correct apiGroup for rayclsuters in rbac annotation for appwrappers.

Author: dgrove-oss

config/rbac/role.yaml

@@ -99,18 +99,6 @@ rules:
   - patch
   - update
   - watch
-- apiGroups:
-  - cluster.ray.io
-  resources:
-  - rayclusters
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - config.openshift.io
   resources:

pkg/controllers/appwrapper_controller.go

@@ -30,7 +30,7 @@ package controllers
 //+kubebuilder:rbac:groups=scheduling.sigs.k8s.io,resources=podgroups,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=scheduling.x-k8s.io,resources=podgroups,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=kubeflow.org,resources=pytorchjobs,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=cluster.ray.io,resources=rayclusters,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=ray.io,resources=rayclusters,verbs=get;list;watch;create;update;patch;delete
 
 // permissions needed by Kueue's generic reconciller
 // +kubebuilder:rbac:groups=scheduling.k8s.io,resources=priorityclasses,verbs=list;get;watch