TODO's Use Open Policy Agent RBAC: more tight (tiller?) Implement istio ingress (already working, just need to switch) Codeify the configuration of Drone 'Trusted project'? Registry secrets