Is there any documentation on how to create permissions for the rancher service proxy so we can create NavLinks that proxy services? I've created a RoleTemplate in YAML and deployed it the controller, assigning it to users. It looks like the RoleBinding/ClusterRoleBinding got provisioned to the downstream clusters but the role/clusterole itself did not? I tried to follow what the rancher monitoring does with the

view-monitoring

RoleTemplate.