An ADR may also be needed here.
- Propose a custom resource with a spec that the security operator can read during schema generation, so relations are adjusted accordingly.
- Provide extensibility such that we can add 2–3 entirely new relations to OpenFGA that aren't tied to the Kubernetes ecosystem but still need to be represented in OpenFGA.
An ADR may also be needed here.