{"apiVersion":"abac.authorization.kubernetes.io/v1beta1","kind":"Policy","spec":{"user":"build-bot","namespace":"app","resource":"pods","readonly":true}}