diff --git a/groups/restrictions.yaml b/groups/restrictions.yaml
index 1c3ea053468..08896247c2f 100644
--- a/groups/restrictions.yaml
+++ b/groups/restrictions.yaml
@@ -117,6 +117,7 @@ restrictions:
       - "^sig-cluster-lifecycle-kubespray-alerts@kubernetes.io$"
       - "^k8s-infra-staging-scl-image-builder@kubernetes.io$"
       - "^sig-cluster-lifecycle-cluster-api-vsphere-alerts@kubernetes.io$"
+      - "^karpenter-cluster-api-leads@kubernetes.io$"
   - path: "sig-contributor-experience/groups.yaml"
     allowedGroups:
       - "^community@kubernetes.io$"
diff --git a/groups/sig-cluster-lifecycle/groups.yaml b/groups/sig-cluster-lifecycle/groups.yaml
index e6fb354da81..bc78de1087d 100644
--- a/groups/sig-cluster-lifecycle/groups.yaml
+++ b/groups/sig-cluster-lifecycle/groups.yaml
@@ -500,6 +500,16 @@ groups:
       - tico88612@gmail.com
       - 2t.antoine@gmail.com
 
+  - email-id: karpenter-cluster-api-leads@kubernetes.io
+    name: karpenter-cluster-api-leads
+    description: |-
+      ACL for staging karpenter provider cluster api artifacts.
+    settings:
+      ReconcileMembers: "true"
+    members:
+      - msm@opbstudios.com
+      - macao@redhat.com
+
   #
   # k8s-infra gcs write access
   #