- op: add
  path: /rules/-
  value:
    apiGroups: [""]
    resources: [pods, services, endpoints]
    verbs: [list, watch]