k8s operator runs the crm as a pod inside the cluster it managers with rbac perms to be able to run kubectl in the pod.

Working dir corresponds to the persistent volume claim in the cloudlet operator.