- add policies to sign/issue certificates - manage auth roles for ceph-csi, certmanager, externaldns, huntarr
- import pki, ssh, kv, rundeck engines - deploy all roles from terraform - deploy all policies from terraform - deploy all approles from terraform