- add pki for k8s - add policy to manage k8s/*/roles/*
- add approle for terraform, tf_vault - add policices to manage terraform access to vault - add policices for default access to vault from ldap users