[11:03:09] I left a comment on the task [14:12:52] thank ever so much akosiaris [14:18:25] TBH I expected that RBAC section to be an issue. btullis and I were already discussing toggling the RBAC section off, and shipping our custom RBAC with reduced permissions in helmfile_rbac.yaml, meaning we do share your concerns [14:19:35] glad we are on the same page :-) [14:20:00] overall the operator seems well though out btw [14:20:21] and very well documented [14:21:52] but please don't ship more rbac via helmfile_rbac 😇 [14:22:20] if possible, create a chart for it or add the rules to the psql chart in an extra file [14:24:37] helmfile_rbac is more like a place for rules that have no natural home (and it's pretty shitty IMHO). Alternatively we could also come up with a more clever replacement for helmfile_rbac. But I think it makes more sense to try to bundle rules with deployments that require them [16:26:09] gotcha, thanks for the nudge