Second step in decoupling the service controller, use the apiserver for writes too.