- fix the comment for ldap_admin_password - add policy to read default_user_password
- add kubernetes auth role for identity namespace - add policy to access openldap bootstrap credentials