- op: add
  path: /rules/-
  value:
    apiGroups: [""]
    resources: [pods]
    verbs: [list, get, watch]