Why does Authentik need a ClusterRole? about helm HOT 2 CLOSED

The remote cluster variant has a (namespace-scoped) Role (not ClusterRole), so the same should be possible with the regular Authentik chart: https://github.com/goauthentik/helm/blob/main/charts/authentik-remote-cluster/templates/role.yaml

from helm.

This isn't required and can be disabled without impacting anything. The reason the chart uses a ClusterRole by default is that authentik can create outposts in any namespace (since the namespace is configured within authentik)

The other reason is that for things like customresourcedefinitions as they are non-namespaced, a Cluster Role is required (and yeah of course that doesn't justify the ClusterRole being for everything)

I started work a while ago to remove this RBAC from this helm chart and instead use the remote-cluster chart as a subchart in this, but I haven't gotten around to finishing that

from helm.