- op: add
  path: /rules/-
  value:
    apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
