Hi, I have a question about the fluent-operator's helm chart. The service account fluent-operator has permissions to manipulate secrets. It's totally find as it stores the fluentbit config in secrets. But the permissions for it is located in ClusterRole , so that it can read/write any secret in any namespace. That violate the minimal privileges principle. Is there any reason for that?

Hmm maybe it has something to do with what happens if you create an Output in an namespace and reference e.g a token as a secret from that namespace. Then the operator would need permission to read the secret in that namespace with the Output?