- add kubernetes auth role for identity namespace - add policy to access openldap bootstrap credentials