Terraform-like datasources

• we want to attach external serviceaccount or secret and we need to check it exists first
• we need to get labels of existing deployment