Worked on the luoyuxia/fluss repository to implement Kubernetes ServiceAccount configurations for both TabletServer and CoordinatorServer using Helm templates. This effort focused on enhancing security by introducing least-privilege access controls, ensuring that each service operated with only the permissions required for its function. The approach leveraged YAML for declarative configuration and adhered to established DevOps practices, consolidating Helm conventions and documentation to streamline onboarding and deployment processes. By reducing the blast radius for cluster operations and supporting scalable resource management, the work contributed to a more secure and maintainable Kubernetes environment without introducing new bugs during the development period.