About clusterrole for kubernetes operator (mysql for exemple) ! Security

General Discussions
1

Kubernetes version: 1.23
Vmware tanzu (not cloud)

Hello
Developers ask to make me install mysql operator in a production cluster. I am afraid about the necessity to create a clusterrole that seems to be necessary to the operator

When you see this part of definition, it seems to be a little furious , isnt it ?
Is anybody here use thsi kind of operator in a an enterprise context?
kind: ClusterRole
metadata:
name: mysql-operator
rules:

  • apiGroups: [“”]
    resources: [“pods”]
    verbs: [“get”, “list”, “watch”, “patch”]
  • apiGroups: [“”]
    resources: [“pods/status”]
    verbs: [“get”, “patch”, “update”, “watch”]
  • apiGroups: [“”]
    resources: [“secrets”]
    verbs: [“get”, “create”, “list”, “watch”, “patch”]
  • apiGroups: [“”]
    resources: [“configmaps”]
    verbs: [“get”, “create”, “list”, “watch”, “patch”]
  • apiGroups: [“”]
    resources: [“services”]
    verbs: [“get”, “create”]
    …

Thanks for all
ps : sorry for my english :frowning: