bundle builder: How can the bundle builder access the ConfigMaps if API access requires authentication?

[fhennig]

The bundle builder reads ConfigMaps from the API server to gather the RegoRules for the bundles.
In a k8s cluster with API access control it is necessary to authenticate against the API server.

Open questions

• Is this really the case? Currently just speculation
• If authentication is necessary, can we do this with docs or do we need to implement something?