Add pods/exec permissions to the service account role

[dfangl]

Motivation

With the effort to improve kubernetes support, we try to use kubernetes pods to run database containers.

However, our implementations of these databases requires to exec into the pod / container.

Changes

• Add permission to exec in a pod to the service account role

TODO

• A still open question for these database services is how to map them to the service port range, and how to ensure the returned address (by LS) is reachable from outside (or also inside) the cluster. This is independently of this PR though.

[alexrashed]

The change is looking good, and the additional permissions for the service account are reasonable! Thanks for the contribution! 🥳