Yes, it would be great to have examples to understand the config access needs and plugin use needs for this kind of k8 add-ons.
Either system-/personal-files or even a dedicated interface for k8 add-ons would be tenable. But it’s hard to decide which direction to go without just falling back to classic without more information about the needed accesses.
@jdstrand I think this topic Classic confinement for fluxctl has also similar issues?