path "k8s/+/roles/*" {
  capabilities = ["create", "update", "read", "delete", "list"]
}