path "k8s/*" {
    capabilities = ["read"]
}