The kubewarden-controller Helm chart installs a ClusterRole called kubewarden-controller-metrics-reader. This looks a SA used by Prometheus to scrap our metrics. However, there is no reference to this ClusterRole anywhere and there is no role binding to it as well. Therefore, we should double check if this role is necessary.
Originally posted by @jvanz in https://github.com/kubewarden/kubewarden-controller/pull/1520#discussion_r2873441735