For the Kubernetes service account that Commvault requires to perform application discovery, backup, and recovery, you can use an existing service account, or create a new service account. The service account must have a ClusterRoleBinding to a custom ClusterRole, or the service account must use the default cluster-admin (superuser) role.
Important: Commvault does not support the creation of a restricted ClusterRole that has limited access to namespaces and/or specific API resources.
Related Topics
See the following topics in the Kubernetes documentation:
For information about service accounts, see Managing Service Accounts.
For information about ClusterRoleBinding, see RoleBinding and ClusterRoleBinding.
For information about cluster-admin, see User-facing roles.