added rbac
which is needed if the vault is external to the pod's k8s cluster
In that case, vault cannot use local jwt token mounted to its pod to verify with k8s cluster the service's existence and eligibility.
Signed-off-by: Michal Minář michal.minar@id.ethz.ch