Stratos documentation needs to include list of required privileges for deployment.

[HartS]

In the long term, Stratos should include CRB (and potentially ServiceAccount) termplates in the chart to create necessary bindings to the appropriate ClusterRole when an SCF is already deployed and Stratos is deployed with a reference to that SCF deployment.

In the short term, managing bindings for the Stratos default ServiceAccount will be the Kubernetes administrator's responsibility, so at the very least, we should document what privileges are required to deploy Stratos

[cjschroder]

Cool, we can do that. Are there any existing references for this? Or someone who knows?

[HartS]

Hopefully the Stratos team has the answers here (@nwmac ?) . I just create a CRB to bind the default ServiceAccount from the stratos namespace to a role associated with the privileged PSP