c88b19a216
- ensure all service accounts are labelled with role/cluster - add additional api endpoints to cluster roles