What is `configmaps/status` subresource and why is it needed?

Hi!

I’m a Kubernetes admin and we have a team that wants to deploy the KubeRay operator in our cluster. When trying to do that, they were unable to install the leader election Role, because it includes get, update and patch privileges for the configmaps/status subresource (see Helm chart).

Being cluster admin, I am able to help them with that. But in the interest of granting minimal access, I want to understand this requirement. I was looking in the documentation, but I was unable to identify exactly why it is needed. And to be honest, I am not even sure exactly what it does considering there is no status field in the ConfigMap object and I find not documented subresources at all for ConfigMaps. :thinking:

Is there documentation anywhere where I can read about why the application requires these permissions?

Cheers!