Revert me if I'm wrong, but the k8s instance has ...

sufficient RBAC already, and each additional instance can add
something like custom's rbac.yaml if needed.

No warnings remain in logs.

Author: solsson