Least privilege for Kubernetes outposts (on OpenShift)

I got the Kubernetes outposts integration working on OpenShift. Setting `serviceAccount.create=true` doesn't work:

```
*** is attempting to grant RBAC permissions not currently held:
{APIGroups:["apiextensions.k8s.io"], Resources:["customresourcedefinitions"], Verbs:["list"]}
{APIGroups:["traefik.containo.us"], Resources:["middlewares"], Verbs:["get" "create" "delete" "list" "patch"]}
{APIGroups:["traefik.io"], Resources:["middlewares"], Verbs:["get" "create" "delete" "list" "patch"]}
```

Those permissions don't seem necessary, so I manually created the ServiceAccount+Role+RoleBinding. See https://github.com/FNNDSC/NERC/commit/ab7eb25f7857843fdb4d4ecae0a1ac7d6713a378#diff-d436a15e1ce6b1359f8b2ac7b0dd7b61f1a96b28a6d0de3a70c75a3fbc73f817

Things seem to be working. Would it be possible to review the rules here?

https://github.com/goauthentik/helm/blob/4fd7ffa8e80a313bcf3f43428deeba2161f966b7/charts/authentik-remote-cluster/templates/role.yaml#L12-L53

It would be great if unnecessary rules can be removed, and optional roles made optional via values.