Hi!
I’m a Kubernetes admin and we have a team that wants to deploy the KubeRay operator in our cluster. When trying to do that, they were unable to install the leader election Role, because it includes get
, update
and patch
privileges for the configmaps/status
subresource (see Helm chart).
Being cluster admin, I am able to help them with that. But in the interest of granting minimal access, I want to understand this requirement. I was looking in the documentation, but I was unable to identify exactly why it is needed. And to be honest, I am not even sure exactly what it does considering there is no status field in the ConfigMap object and I find not documented subresources at all for ConfigMaps.
Is there documentation anywhere where I can read about why the application requires these permissions?
Cheers!