[21:06] <evhan> lucidone: Note the default-backend service is optional, so you may be able to skip it for now and the controller will still work.
[23:47] <lucidone> evhan: I've charmified the backend service alright. controller itself needs ClusterRole _and_ Role .. although I wonder if it can live with just the ClusterRole rules
[23:49] <evhan> Right, it might be that it creates both but only needs one depending on how you decide to deploy the controller.
[23:53] <evhan> Looks like it creates both when RBAC is enabled.
[23:54] <evhan> It only* creates both.
[23:55] <evhan> And when the controller isn't scoped.
[23:56] <evhan> So I'd guess you can do just the Role if you restrict the controller, and vice versa. But, totally guessing.