Good spot!

I mention in the readme that the cluster is created with owner and that is not recommended.

The reason for having owner is that this example will work for most people, regardless of how they desire to expand it.

However, least privilege role should always be applied, so in retrospect maybe thats what should have been done here as well. Usually the jobs carry their own SA as well, so yeah.

Thank you :)