Stackl Agent RBAC

[SamyCoenen]

Currently configuring RBAC is done manually, this should be included in the Helm chart.

ct_k8s_vault_1 | FAILED! => {
    "changed": false,
    "error": 403,
    "msg": "Failed to retrieve requested object: b'{\"kind\":\"Status\",\"apiVersion\":\"v1\",\"metadata\":{},\"status\":\"Failure\",\"message\":\"namespaces \\\\\"vault\\\\\" is forbidden: User \\\\\"system:serviceaccount:stackl2:stackl-agent-stackl-agent\\\\\" cannot get resource \\\\\"namespaces\\\\\" in API group \\\\\"\\\\\" in the namespace \\\\\"vault\\\\\"\",\"reason\":\"Forbidden\",\"details\":{\"name\":\"vault\",\"kind\":\"namespaces\"},\"code\":403}\\n'",
    "reason": "Forbidden",
    "status": 403
}