path "kubernetes/au/+/roles" { capabilities = ["list"] } path "kubernetes/au/+/roles/*" { capabilities = ["create", "update", "read", "delete", "list"] }