Do you really need cluster level privileges?

[larsks]

This repository creates a ClusterRole and ClusterRoleBinding, but it doesn't look like you actually require cluster level privileges. Can you replace these with a Role and RoleBinding? This would reduce the privileges necessary to install the application.

[IsaiahStapleton]

@larsks I will take a look at it again since I haven't looked at this tool in a long while. I thought it needed cluster level privileges because I wanted the tool to be able to check every namespace and see if there was an InferenceService (ai model) deployed, and then if it had the gather_llm_metrics: "true" label, the benchmark would be run against that model.

[IsaiahStapleton]

I find that cluster level privileges are required, since the tool is required to make these api calls: v1.list_pod_for_all_namespaces() and v1.read_namespaced_secret(). But I did create a commit to restrict ClusterRole to list pods and get secrets only.