- ensure the new service accounts can read cephrbd/cephfs - ensure correct namespace is allowed
- add policies to sign/issue certificates - manage auth roles for ceph-csi, certmanager, externaldns, huntarr
- update kubernetes_host to match value in jwt - regenerate jwt token and store in vault - add policy to enable access to jwt token - update tf_deploy user with access to token
